17 August, 2022

Things I encountered while enrolling into Windows Autopatch

This article is about two things I encountered while enrolling into Windows Autopatch. Today I enrolled our first customer into Windows Autopatch. During that enrollment, I came across two actions I needed to handle before the tenant was ready to enroll in Windows Autopatch. I will go through them in detail in this article.

If you want to know how to enroll your tenant into Windows Autopatch, check out my previous post on “How to enroll your Microsoft 365 tenant into Windows Autopatch“.

After running the Run checks in the tenant enrollment section of Windows Autopilot, I got to issues I need to check first before my tenant was ready to enroll:

  • Unlicensed admin
  • Update rings for Windows 10 or later

Issue 1: Unlicensed admin

The first issue we are going to check out is the Unlicensed admin part. When you click on the link in the checklist, you’ll get some details on how to solve this issue. This issue encounters when your admin account doesn’t have the required license.

Now let’s go to https://endpoint.microsoft.com => Tenant administration => Roles => Administrator licensing. Click on Allow access to unlicensed admins.

Things I encountered while enrolling into Windows Autopatch

Click on Yes to Allow access to Intune for unlicensed admins.

All unlicensed admins have access to Microsoft Intune.

If we now re-run the Management Settings checks, you’ll see that the Unlicensed admin part is green and ready. Now let’s go to the second issue.

Things I encountered while enrolling into Windows Autopatch

Issue 2: Update rings for Windows 10 or later

If we are going to check the details of this issue, we’ll see this:

Our customers have an Update ring assigned to the group All devices. If you want to enroll your tenant to Windows Autopatch you need to narrow this down. In our case, we’ve assigned this Update ring to a group with all Autopilot devices (a Dynamic Group we’ve created ourselves).

So make sure your Update rings aren’t assigned to the groups All devices, all users.

Now re-run the checks and you’ll see you are ready to enroll your tenant in Windows Autopatch.

Things I encountered while enrolling into Windows Autopatch

So these were the things I encountered while enrolling into Windows Autopatch. Stay tuned for more articles about Windows Autopatch in the coming days, and weeks. Thanks for reading and I hope you’ve found this useful.

Nicky De Westelinck

Nicky De Westelinck is a Modern Workplace Consultant for Wortell Belgium with several years of experience in Microsoft 365. His main focus is Microsoft EndPoint Manager and Microsoft 365 Administration. He is also a Microsoft Certified Trainer since 2021.

View all posts by Nicky De Westelinck →