Now booking Q1 Intune migrations — talk to an engineer.

CyberSystem
← Back to Blog

Intune Windows Feature Updates: Complete Management Guide

Learn how to manage Windows feature updates in Intune, including deployment strategies, version control, rollout options, and monitoring feature update status.

By Ali Alame•
intunewindows-feature-updateswindows-11windows-10update-managementdeploymentwindows

Windows feature updates in Microsoft Intune allow you to control which Windows version devices run and manage the deployment of new Windows versions. Feature update policies update devices to a specified Windows version and then freeze the feature set version on those devices until you choose to update them to a later version.

Understanding Windows Feature Updates

Feature updates for Windows 10 and later in Intune update devices to the Windows version you specify and then freeze the feature set version. While the feature version remains static, devices can continue to install quality and security updates that are available for their feature version.

Key Benefits

  • Version Control: Control which Windows version devices run
  • Phased Rollout: Deploy updates in phases using rollout options
  • Version Freeze: Keep devices on specific Windows versions
  • Quality Updates: Devices continue receiving security updates
  • Upgrade Path: Upgrade Windows 10 devices to Windows 11

For an overview, see Feature updates for Windows 10 and later policy in Intune.

Creating Feature Update Policies

Step 1: Access Feature Updates

  1. Sign in to the Microsoft Intune admin center
  2. Navigate to Devices > By platform > Windows > Manage updates > Windows 10 and later updates > Feature updates tab
  3. Select Create profile

Step 2: Configure Deployment Settings

  1. Name: Enter descriptive name

  2. Description: Optional description

  3. Required/Optional updates:

    • Make available to users as a required update (default): Automatically installs
    • Make available to users as an optional update: User must choose to install

  4. Feature update to deploy: Select specific Windows version

    • Only versions in support are available
    • Versions change over time

  5. Rollout options: Configure rollout options to manage when updates are available

    • Configure gradual rollout
    • Set availability dates
    • Define rollout phases

For details, see Rollout options for Windows Updates.

Step 3: Assign to Groups

  1. Select + Select groups to include
  2. Choose device groups (recommended)
  3. Select Next

Best Practice: Deploy feature updates to device groups rather than user groups for more predictable behavior.

Step 4: Review and Create

  1. Review all settings
  2. Select Create

For step-by-step guidance, see Feature updates for Windows 10 and later policy in Intune.

Required vs Optional Updates

Required Updates

When configured as Required:

  • Device automatically installs update based on device settings
  • Update installs according to update ring configuration
  • User cannot prevent installation

Optional Updates

When configured as Optional:

  • Update is made available to users
  • User must navigate to Windows Update settings
  • User must choose to install the update
  • Update doesn't install until user initiates

Best Practice: Use required updates for most scenarios. Use optional updates for testing or when user choice is needed.

Rollout Options

Rollout options control when Windows Update makes the update available to devices:

Gradual Rollout:

  • Deploy to percentage of devices
  • Increase percentage over time
  • Monitor before expanding

Availability Dates:

  • Set specific dates for availability
  • Control when updates are offered
  • Align with business schedules

For details, see Rollout options for Windows Updates.

Upgrading to Windows 11

Feature update policies can upgrade Windows 10 devices to Windows 11:

  1. Create feature update policy
  2. Select Windows 11 version
  3. Assign to device groups
  4. Devices upgrade automatically

Requirements:

  • Devices must meet Windows 11 hardware requirements
  • TPM 2.0 required
  • Secure Boot required
  • Compatible processor

For guidance, see Upgrade devices to Windows 11.

Integration with Update Rings

When using feature updates with update rings:

Recommendations:

  • Set Feature update deferral period to 0 days in update rings
  • Feature updates policy takes precedence
  • Update rings control quality updates and user experience

Important: Combining update ring deferrals with feature updates policy can create complexity. Set feature update deferral to 0 in update rings when using feature updates policy.

For details, see Move from update ring deferrals to feature updates policy.

Monitoring Feature Updates

Feature Update Reports

Monitor feature update deployment:

  1. Go to Reports > Windows Updates > Reports tab
  2. Select Feature Updates report
  3. Review update status and issues

Available Reports

  • Feature Updates report: Overall deployment status
  • Organizational report: Detailed device status
  • Update status: Per-device update status
  • Issues: Devices with update problems

For details, see Windows Update reports for Microsoft Intune.

Limitations

Important Considerations

  1. Update Rings: Set feature update deferral to 0 when using feature updates
  2. Autopilot OOBE: Feature updates don't apply during OOBE
  3. Co-management: May have delays when switching workloads
  4. Device Protection: Devices enrolled in feature updates are protected from newer versions

For complete limitations, see Limitations for Feature updates for Windows 10 and later policy.

Best Practices

1. Plan Deployment Strategy

  • Identify target Windows version
  • Plan phased rollout
  • Test with pilot groups
  • Document deployment plan

2. Use Rollout Options

  • Start with small percentage
  • Monitor deployment
  • Expand gradually
  • Adjust based on results

3. Coordinate with Update Rings

  • Set feature update deferral to 0
  • Use update rings for quality updates
  • Understand policy precedence
  • Avoid conflicts

4. Monitor Regularly

  • Review feature update reports
  • Address update failures
  • Track deployment progress
  • Adjust as needed

5. Test Before Production

  • Test with pilot devices
  • Verify hardware compatibility
  • Test application compatibility
  • Validate user experience

Troubleshooting

Common Issues

  1. Updates Not Installing

    • Verify feature update policy assignment
    • Check device hardware requirements
    • Review update ring settings
    • Check for policy conflicts

  2. Unexpected Versions

    • Review all assigned policies
    • Check policy precedence
    • Verify device check-in
    • Review update ring deferrals

  3. Deployment Delays

    • Check rollout options
    • Verify device check-in
    • Review Windows Update service
    • Check network connectivity

Additional Resources

Conclusion

Windows feature updates in Intune provide powerful capabilities for controlling which Windows versions devices run. By following these best practices:

✅ Plan deployment strategy carefully
✅ Use rollout options for phased deployment
✅ Coordinate with update rings
✅ Monitor feature update deployment regularly
✅ Test thoroughly before production

You can maintain control over Windows versions while ensuring devices receive security updates and maintaining a smooth user experience.

Remember: Feature update policies freeze devices on a specific Windows version. Plan your upgrade strategy carefully and use rollout options to deploy new versions gradually.