Feedback wanted: Adopting new features with agility and control

In addition to the questions posted on this page, we also answer questions posted in reply to the event on LinkedIn and X (Twitter). Here are the questions we answered:

Comment from Tech Community -- Hi, one of the blockers/issue that we have is that there doesn't seem to be a centralised/documented place where it shows have is now enabled by default (for example device encryption in 24h2) for new Windows 11 builds. This would really help us to inform about such changes and to be able to test how they affect our devices/users. - answered at 2:16.

Comment from Tech Community -- Functionality that was once in Intune is being moved to, or duplicated in, other consoles like admin.microsoft.com. or example, Edge policy settings and Organizational Messages. Is there an intention to continue this practice in the future? In the case of Edge policy, is there a commitment to keep feature and policy settings parity between what's in admin.microsoft.com and the Intune settings catalog? It's a pain to have to manage systems from multiple consoles… - answered at 4:23.

Feedback on reporting from Tech Community -- It would be helpful if there were a Power BI app or template for reporting on WUfB updates / driver updates instead of having to use the Azure Workbook. - answered at 5:52. For more information, go to https://techcommunity.microsoft.com/blog/windows-itpro-blog/tailor-windows-update-for-business-reports-with-power-bi/3978975

Question from Tech Community -- Intune now has partner portals for Dell, HP, and Surface. Is there any plan to add this functionality for Lenovo? - answered at 6:49.

Question from X - Why do you keep changing things, what they are called and where we use them? How can I plan? - answered at 7:48. For more resources, go to https://aka.ms/WindowsITProBlog  and join our monthly office hours https://aka.ms/Windows/OfficeHours.

Comment on Tech Community -- From a business perspective data loss is much more expensive than hardware replacement. So for businesses things like TPM 2.0 requirements seem like a no-brainer. The discussion around e-waste is hard to ignore however. How do we balance modern HW over durability?? Will W11 devices today become obselete with only support for Copilot+ PCs? - answered at 14:01.

Question from Tech Community -- Will Windows Autopatch be roadmapped for Microsoft 365 GCC cloud instances, please? There are 1000s of State & Local Government customers in the US with limited support personnel such as law enforcement, justice entities like Superior Courts & District Attorneys offices, fire departments & authorities, city financial & employee retirement depts, etc. that would REALLY appreciate the availability of Windows Autopatch. - answered at 19:23.

Question from Tech Community -- Are there any plans to allow windows hello to run on the device itself without connecting to Azure/Microsoft? This would be a huge security boost and would eliminate the need for third party solutions. - answered at 22:15.

Question from X -- How do I balance adopting new features against security and providing a consistent UX? - answered at 23:01.

Question from Tech Community - Do any system admins really roll out those "non-security preview updates"? To who? - answered at 26:56.

Comment -- I'm not anti-cloud, but users should have a choice. Every forced push to cloud or AI (rather than simply giving customers what they ask for) is another reason to choose another platform. Public cloud uptime continues to not be any better than the old private server room or datacenter days...- answered at 27:43.

Question from Tech Community -- How does Microsoft suggest we patch Windows clients and servers with no internet access, behind firewalls, in process control networks etc? We currently rely on WSUS to get the updates then distribute via tight firewall policies to computers in a PCN. - answered at 31:39.

Question from X -- Curious how you define agility? - answered at 36:37.

Question -- I feel like we are always behind and running just to catch up. Part of it is our legacy processes, but if we invest the time to change, how do we future-proof our strategies - thinking a year or two down the line? - answered at 42:30.

Question -- So, if we're going to roll out a new Windows thing, how do we measure if it was beneficial, or not? When we opt in to new AI capabilities or services like Autopatch, will we be able to turn back if we don't like it - either from an IT or user perspective? - answered at 45:54.

Thank you for joining this feedback session at Tech Community Live! Make sure to visit https://aka.ms/TCL/Windows for more great sessions.

Something for the wish list - it would be great to have an "OU like" folder structure in Intune for configuration profiles to handle conflict resolution, similar to how conflict resolution in Group Policy works.

It would be helpful if there were a Power BI app or template for reporting on WUfB updates / driver updates instead of having to use the Azure Workbook.

Intune now has partner portals for Dell, HP, and Surface.  Is there any plan to add this functionality for Lenovo?

Welcome to Tech Community Live: Windows edition - and today's feedback session! We're here for the next hour to listen to you. What do you need to be resilient and secure in the current landscape of continuous innovation in Windows and expanding AI capabilities? Are there tools you need to make it easier? Controls you need to feel more comfortable with pace and progress? Share your thoughts!

Functionality that was once in Intune is being moved to, or duplicated in, other consoles like admin.microsoft.com.  For example, Edge policy settings and Organizational Messages.  Is there an intention to continue this practice in the future?  In the case of Edge policy, is there a commitment to keep feature and policy settings parity between what's in admin.microsoft.com and the Intune settings catalog?  It's a pain to have to have to manage systems from multiple consoles, especially when that management used to be part of Intune.

Hi, one of the blockers/issue that we have is that there doesn't seem to be a centralised/documented place where it shows have is now enabled by default (for example device encryption in 24h2) for new Windows 11 builds.

This would really help us to inform about such changes and to be able to test how they effect our devices/users.

Thks