Event details
Get answers to your questions about adopting Windows 11 and managing Windows devices across your organization. Find out how to proactively implement and monitor Zero Trust practices. Get tips on keeping devices up to date. Learn how to move forward with cloud-native workloads, even if you have on-premises or hybrid needs.
Windows Office Hours is our continuing series of live Q&A for IT professionals here on Tech Community.
How does it work?
We will have a broad group of product experts, servicing experts, and engineers representing Windows, Microsoft Intune, Configuration Manager, Windows 365, Windows Autopilot, security, public sector, FastTrack, and more. They will be standing by here -- in chat -- to provide guidance, discuss strategies and tactics, and, of course, answer any specific questions you may have.
Post your questions in the Comments early and throughout the one-hour event.
Note: This is a chat-based event. There is no video or live meeting component. Questions and answers will appear in the Comments section below.
50 Comments
- Heather_PoulsenCommunity Manager Thanks for joining today's Office Hours. We'll be back next month. Visit https://aka.ms/Windows/OfficeHours to save the date. 
- HIGGeorgeChiuCopper ContributorDo you have more insights into MC1150664 https://mc.merill.net/message/MC1150664 such as how Intune is going to use the Azure Front Door. We are using Zscaler Client Connector and will need to adjust its PAC file. Our security team has concerns of *.azurefd.net is too broad and asked if there is a subdomain specific for Intune that can be used in our Zscaler Client Connector PAC file - Jason_SandysMicrosoft All required endpoints that must be allowed are fully documented at https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/intune-endpoints. This documentation does include a brief discussion on Azure Front Door and everything required for it. I'm not aware of a wildcard exception required for the domain you noted. As for how any changes need to be accounted for in any third-party products, that's something you should consult that third-party for. 
 
- HIGGeorgeChiuCopper ContributorDo you have more insights into https://thehartford.sharepoint.com/sites/HartfordM365ChangeManagement/Lists/M365%20Messages/DispForm.aspx?ID=7592&e=LCn2Af such as how Intune is going to use the Azure Front Door. We are using Zscaler Client Connector and will need to adjust its PAC file. Our security team has concerns of *.azurefd.net is too broad and asked if there is a subdomain specific for Intune that can be used in our Zscaler Client Connector PAC file 
- stagordaOccasional Readerwe added windows 11 devices to intune as hybrid joined but several computers have since dropped. there is nothing in our log files that show if there were enrollment issues. The computers still show in Entra ID but have 2 entries as microsoft registered and microsoft hybrid joined both as autopilot devices. How do we enroll them back into intune? 
- Tim_MenzelCopper ContributorIs there a roadmap/date for when the computer name assignment will be available for Windows Autopilot (Device Preparation)? - Maggie_DakevaMicrosoft It's coming, can't share ETA for public availability yet though (it will be in 2026) 
 
- IndiaYankeeBrass ContributorHej, i am looking for a way to minimize prusser on our internet connection when updateing to the next Windows 11 feature update. We have about 7000 devices in Intune and are using WUfB - nlmitchellIron ContributorI would suggest implementing a Delivery Optimization (DO) Policy via an Intune Config Profile. This policy allows you to set a bunch of stuff, including the download method (including peering) as well as business hours. You are then able to set maximum foreground/background download bandwidth %'s against those hours to throttle the traffic as you see fit. We hit a network bandwidth issue when deploying 23H2 to 5,500 devices. We implemented a DO policy as a result and the 24H2 upgrade/rollout worked a treat :-) - IndiaYankeeBrass Contributornlmitchell Thanks for the advice! i will sure look into it. Thanks. :-) 
 
 
- anandpladis1Copper ContributorWe are a global company with users who need Microsoft 365 Apps in different languages. We deploy applications using Intune and autopilot, currently installing Office 365 Apps and all language packs on every device, which results in a large download and installation process. What is the most efficient way to handle this, and how do other companies approach it? - Maggie_DakevaMicrosoft Hi! Have you considered letting the Office apps install outside of Autopilot so users won't have to wait? And if that's not an option, could you share more about the challenge with this approach? - anandpladis1Copper ContributorHi Maggie, thanks for replying. We purchase devices with ready to provision image (Windows 11 Ent, no retail bloatware), but Office 365 Apps are not included. After AutoPilot, deploying Office via Intune triggers a 16GB download due to language packs, which is time-consuming. Should we install Office 365 Apps before AutoPilot on the base image? What’s the best way to handle multiple language packs? 
 
 
- ksm503Copper ContributorIs there a Known Issues List for Windows 25H2? - Heather_PoulsenCommunity Manager ksm503 - Yes, you can find this information on the Windows release health hub: https://learn.microsoft.com/windows/release-health/status-windows-11-25H2 
 
- Heather_PoulsenCommunity Manager Welcome to Windows Office Hours for October 2025! We'll be here for the next hour to answer your questions so please post them here in the comments and we'll do our best to help. 
- This comment was moved to another post