22H2 Feature Freeze failing for newly configured devices

[Jason_Berry]

I have a feature freeze in place using the following settings:

This is assigned to the same device group as my Update ring settings, however newly imaged devices with 10.0.22621.1848 are applying the 23H2 update (10.0.22631.2861). Any idea why that might be?

[#2]

Hello,
How do you stage your devices?
Is it with Intune or SCCM?
If you do it with SCCM it may take some time before device receive Intune policies.

[#3]

These are Autopilot devices enrolled in Intune.
I always make sure to sync manually once or twice before launching Windows Update, and am pretty sure policies have all been sync'd before clicking "Check for updates".