I recently enrolled 400 laptops in Intune (hybrid joined), but they seem to be stuck with old Active Directory policies, which is causing issues with upgrading. I configured MDM through Group Policy, but many of the laptops are failing to upgrade due to conflicting policies created by our previous managed service provider. I'm looking for effective strategies to successfully upgrade these laptops to Windows 11. Any suggestions?
5 Answers
The first step is definitely to fix those conflicting policies to allow for updates. I’ve faced similar issues before, and when I temporarily disabled restricting policies through local group policy, I was able to get users upgraded to Windows 11 without a hitch. I used a tool called Action1 for deployments, and it worked great for our smaller environment of under 200 devices.
You should definitely inspect the Intune homescreen for any configuration policy errors or conflicts. That could give you insight into what's going wrong with the upgrades.
Make sure to thoroughly review the policies that might be conflicting. It’s also worth checking the devices that upgraded successfully to see if they had the same policies applied. Sometimes the issue might even be as simple as not having enough free space on the device, which could block the upgrade.
Good point! It's easy to overlook storage space. I'll check that too.
Don’t forget that Action1 can be really handy for this kind of mass upgrade as well.
If those laptops are truly hybrid joined, Intune has an option that can kick off the upgrade without any manual effort. I used that a while back, and it worked like a charm, saving a bunch of time on hands-on management.

That’s a solid approach! Was Action1 easy to set up? I'm curious if it would work with a larger number of laptops without running into issues.