> ## Content Index
> Fetch the complete content index at: https://www.techbyjeff.net/llms.txt
> Use this file to discover other available public pages before exploring further.

# Getting latest Windows updates in Autopilot devices
- URL: https://www.techbyjeff.net/getting-latest-windows-updates-in-autopilot-devices/
- Published: 2024-09-23T19:16:00.000Z
- Updated: 2026-08-19T21:41:29.000Z
- Description: While Microsoft has delayed their baked in solution to updating your OS during Autopilot. You can still do it with a required application in Intune.
- Author: Jeffrey Stuhr
- Tags: Windows, Microsoft 365

We had high hopes that Microsoft was going to add updating Windows during the pre-provisioning phase of Autopilot, but they updated their post on Friday that they are [back to the drawing board](https://techcommunity.microsoft.com/t5/intune-customer-success/important-changes-to-the-windows-enrollment-experience-coming/ba-p/4246689?ref=techbyjeff.net) and we won't be getting that feature for now.

Getting the latest updates with Autopilot is not impossible though, there are still ways to do this in pre-provisioning. We do have a [sample app and script](https://github.com/mtniehaus/UpdateOS?ref=techbyjeff.net) that can be tweaked and is provided from Microsoft to accomplish this. I will use this post to show how to implement.

First we download the UpdateOS.intunewin file from the github and then go to our [Intune portal](https://intune.microsoft.com/?ref=techbyjeff.net). From there it's Apps -> Windows -> Add.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-91.png)

In the App type, select Windows app (Win32) and click on Select.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-92.png)

Select the file you just downloaded here and select Ok.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-93.png)

Update the fields as you see necessary/company policy dictates and hit Next.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-94.png)

For the install command we put `powershell.exe -noprofile -executionpolicy bypass -file .\UpdateOS.ps1` and for the uninstall we can put `cmd.exe /c del %ProgramData%\Microsoft\UpdateOS\UpdateOS.ps1.tag` and then hit Next.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-96.png)

Update the red asterisk fields as necessary by your current policy and Next.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-97.png)

Update the Rules format to `Manually configure detection rules`. Rule type is `File`. Path is `%ProgramData%\Microsoft\UpdateOS\` and the File will be `UpdateOS.ps1.tag`. Detection method is `File or folder exists`.

![](https://storage.ghost.io/c/cb/cc/cbcc23a2-e533-4fde-820e-0d1cbb8edc67/content/images/2024/09/image-99.png)

Skip through Depending and Supersedence sections. Select the Group(s) you use for Autopilot devices in the Required section and then click Next and Create.

Now this will kick off during the pre-provisioning workflow and your new user won't be prompted to restart for updates. 

## Related reading

- [24H2 and Recall](https://www.techbyjeff.net/24h2-and-recall/)
- [Why Every IT Administrator Needs This Intune Browser Extension Policy Analyzer](https://www.techbyjeff.net/why-every-it-administrator-needs-this-intune-browser-extension-policy-analyzer/)
- [PowerToys new Workspaces feature](https://www.techbyjeff.net/powertoys-new-workspaces-feature/)