Trigger a Windows 11 Feature Upgrade for an Intune-Managed Device

Windows 10 is approaching end-of-support, and many organizations need a repeatable, auditable way to move managed workstations onto a supported Windows 11 release. Unlike a device sync or reboot, a Windows feature upgrade cannot be fired as a one-shot remote action. There is no Graph endpoint like /upgradeToWindows11. Instead, the upgrade is delivered through a Windows Feature Update profile in Intune that targets the specific Windows 11 version you want devices to land on.

This recipe walks through the correct pattern: locate the target device, confirm its current OS build and compliance, create (or reuse) a Feature Update profile pointing at a supported Windows 11 release, assign the profile to the device (directly via a group), and verify the rollout. It also covers the manual user-driven fallback via the Windows 11 Installation Assistant when you need one device upgraded immediately.

When to run this

• Preparing fleets for Windows 10 end-of-support
• Onboarding a new device family that shipped on Windows 10
• A help-desk ticket where a user explicitly asks for the upgrade
• Bringing a device to a version required by a compliance policy

• The target device (e.g. DESKTOP-8ADV83V) is confirmed located and managed in Intune, with current OS build recorded.
• A Windows Feature Update profile exists in Intune targeting a supported Windows 11 release (e.g. Windows 11 23H2).
• The profile is assigned to a group that contains the target device.
• The device has been instructed to sync so it picks up the policy at its next Windows Update scan.
• You have a verification path (Intune reporting + device-side Windows Update UI) to confirm the upgrade downloads and installs.

Before you upgrade

• Hardware compatibility: Confirm the device meets Windows 11 requirements (TPM 2.0, Secure Boot, supported CPU). VMs and older hardware may fail the compatibility check and silently skip the upgrade.
• Personal vs corporate-owned: Feature Update profiles only apply to Intune-managed Windows devices. If managedDeviceOwnerType is personal (BYOD / user-enrolled), policy targeting still works but the user experience and rollback options differ.
• Free disk space: Windows 11 upgrades typically need 20+ GB free. A device with low free space will stall at download or install.
• Servicing channel collisions: If a Windows Update for Business ring or a Feature Update deferral policy already holds the device back, your new profile may not take effect until conflicts are resolved. Check Policy conflicts in Intune.
• Rollout pacing: For anything beyond a handful of devices, use a rollout plan (gradual rollout) rather than an immediate blast. Feature upgrades are disruptive and can break line-of-business apps.
• No instant trigger: Do not promise the end user that the upgrade will start right now. Even after assignment + sync, the device downloads and installs during its normal Windows Update window. Manual Installation Assistant on the device is the only truly immediate path.
• BitLocker & recovery keys: Ensure recovery keys are escrowed in Entra before upgrading. A stalled upgrade that boots into recovery without a key is a painful ticket.