Windows as a Service
Nick Ross · Updated
Uploading 52%
As we move to the Modern Desktop environment from Microsoft we need to start adopting best practices for deploying devices and managing updates. Windows 10 is the last iteration of the OS that will be release and we now move into Windows as a service where devices receive their updates that mimic the Proplus licensing model.
With Windows 10 Autopilot, you can go straight from box to production with no IT intervention. Microsoft partners with major hardware vendors like Dell, Lenovo, and HP so that you can completely customize the Out of the box experience (OOBE) without having to physically touch the devices.
The guide i have created below steps you through creating Deployment rings for Windows 10 Updates under the new M365 licensing models as well as show you how to create Windows AutoPilot profiles to deploy new devices to end users.
Click here for the Complete Guide (opens in new tab)
What the Guide Includes
Windows 10 Deployment Ring Creation
Deployment rings in Windows 10 are similar to the deployment groups most organizations constructed for previous major revision upgrades. They are simply a method by which to separate machines into a deployment timeline. You should leverage deployment rings to become more proactive rather than reactive with new updates that are released
Education on Windows AutoPilot
Windows Autopilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. You can also use Windows Autopilot to reset, repurpose and recover devices.
Configuring Device Profiles and adding Devices to Windows AutoPilot
Learn how to add devices from Hardware IDs provided by major vendors like Dell, HP, and Lenovo. Customize the OOBE for your end users by assigning them different profiles
Spread the word
See which Intune and device settings need attention, in about a minute.
CloudCapsule scans 300+ Microsoft 365 controls, including the Intune settings and admin roles that leave a single point of failure, then watches for drift so a fixed setting stays fixed.
No credit card required. Results in about a minute.
Keep reading
Ditch the VPN: How Microsoft’s Global Secure Access is Changing Remote Connectivity
2025 has been a rough year for VPNs. We’ve seen breaches at major vendors, clunky user experiences, and a constant flood of helpdesk tickets from frustrated users. Yet, many businesses still rely on VPNs because their legacy line-of-business applications and on-prem file shares haven’t made the move to the cloud. But what if you could […]
Vendor Integrations will Break with GDAP
Checkout my latest article on this topic here!: Vendor Integrations Break with GDAP: The Fix! – (tminus365.com) Note This article assumes you have knowledge of GDAP (Granular Delegated Admin Privileges). If you do not, check out my article here: https://tminus365.com/granular-delegated-admin-privileges/ × Dismiss alert If you have a vendor that leverages an app registration or are […]
Leveraging PIM with GDAP
In my previous blog post, I talked about the major considerations when adding roles for GDAP relationships. In some instances, you may want to bump up security a step further and pair GDAP with PIM or privileged identity management. This would allow you to have just in time access to customer workloads for users in […]