Event banner
Event details
37 Comments
- Heather_Poulsen
Community Manager
Thank you for joining Office Hours. We'll be back August 21st and every third Thursday! Visit https://aka.ms/Windows/OfficeHours to add upcoming dates to your calendar.
And don't forget to join us July 28 for Windows Tech Community Live where we'll be hosting 3 hours of live Ask Microsoft Anything (AMA) sessions on Windows Autopilot, update and driver management, Connected Cache and Delivery Optimization, and AI experiences for Windows. I am currently struggling with Citrix Workspace updating before it is tested on my Zebra TC53's. Is there a way to have the app installed on select devices before it is rolled out to the rest of the devices?
When is the team going to restore the full functionality of the Windows 10 taskbar in Windows 11? There are multiple missing functions (can't use two rows, can't add "toolbars", can't "always show all apps" in the system tray, etc). And, is there any plan to bring back the Windows 10 Start Menu as an option?
Are there tools we can use to troubleshoot app deployments in real time (Apps deployed from Intune)?
Hello, Our Microsoft defender for Endpoint connector in Intune shows the status as Available and not Enable. We have already performed all the steps mentioned in the document https://learn.microsoft.com/en-us/intune/intune-service/protect/advanced-threat-protection-configure and waited for a week, but the status never changes to Enable. How can I chnage it to enable.
- Heather_Poulsen
Welcome to Windows Office Hours! We are here to answer your questions and offer tips to unblock your deployment and management journey. Post here in the Comments and thanks for all the early questions.
Can we use Windows Update client policies with our internal wsus server? Or will this be deactivated at a later date?
Is there more information about this setup than https://learn.microsoft.com/en-us/windows/deployment/update/wufb-wsus?
We have clients without internet access, they need to update with our internal wsus server.
And if we stopped using WSUS and got everything online through Windows Updates, how would bandwidth be managed? We have over 2000 clients...- EricMoe
Microsoft
The WSUS deployment documentation is here Deploy Windows Server Update Services | Microsoft Learn, I believe you want to look at Step 4 on configuring your policy settings for your clients.
If you stopped using WSUS and went to the cloud directly, you can manage bandwidth using Delivery Optimization (likely coupled with a Microsoft Connected Cache server). Check out Configure Delivery Optimization for Windows | Microsoft Learn and Microsoft Connected Cache overview | Microsoft Learn
There is an AMA scheduled for next week on Delivery Optimization and MCC - here is the link to it: AMA: Microsoft Connected Cache and Delivery Optimization - July 28, 2025 - Microsoft Event
Is it okay to deploy M365Apps for Windows from Intune to Autopilot devices that are comanaged with SCCM client that is also deployed from Intune as a Win32 app. What might be the effect? Will it affect ESP and comanagement of these autopilot devices?
- Joe_Lurie
BrianMakosi It's not technically supported to install the CM client as a Win32 app during Autopilot, basically because of the question you are posing. We have a way to enable CM and co-management during Autopilot (see Windows Autopilot with co-management - Configuration Manager | Microsoft Learn). The recommendation is to install the ConfigMgr agent after Autopilot has completed, to make sure there are no other policy or app conflicts during device or user ESP.
We currently use Autopilot to provision our devices. Is there a way to set the order that apps install in the ESP, or is it on the roadmap at least?
- Jason_Sandys
Hi nlmitchell, There is no directly supported way to do this today. Depending on the exact relationship between apps, you can use Dependencies between apps on a limited basis (see https://learn.microsoft.com/en-us/intune/intune-service/apps/apps-win32-add#step-5-dependencies). In general, dependencies should not be used to create one large chain of apps to install but should be used to model exactly what the name implies. There is a supported depth as well for dependency chains of five apps (I think five is the number) -- any more than this and results are not guaranteed. Additionally, creating any complex chain, even if it technically works, creates overhead and greatly increases effort when troubleshooting.
Creating a more in-depth model to support a explicit app ordering operations is an often discussed "improvement" and is something we continue to consider but has not been prioritized for work at this time.
We'd very much like to hear feedback on the exact scenarios where this is required in your environment for successful use of Autopilot.
In Windows Update for Business, Update Ring configuration allows to set 'Quality Update deferral period' and 'Feature Update deferral period'. This allows us to define a staged approach for when updates are release to each of the 15 'waves' of devices we have.
However, we would like to do the same for Driver Updates but there is no Deferral parameter for that. How can we solve this?
- EricMoe
Check out Manage driver and firmware updates | Microsoft Learn for information on how the deferral period gets set. By default, driver deferral values match the values you set for Windows quality updates. The article dives into how to choose a deferral period for drivers and what this means for manually approved drivers (versus automatic).
- Joe_Lurie
VanakenJ You can use Autopatch Groups to deploy drivers in "rings". Check out Manage driver and firmware updates | Microsoft Learn for more info on using Autopatch Groups.
