I recently rolled out ESU keys in our Windows 10 environment using educational licensing while transitioning from GPO configured updates to Intune Autopatch. Now, I've run into a problem where the devices, which are showing as licensed with their Windows 10 EDU MAKs and ESU MAKs, are not receiving the 2025-10 quality update if they are on versions released before September 2025.
My Autopatch settings have zero deferral days for quality updates, but when I manually check for updates on the machines, they claim to be fully updated despite being behind. Intune Autopatch correctly shows these devices as not up to date, and I've verified that Autopatch is targeting the right deployment rings.
I even tried removing Autopatch from some endpoints to see if that would resolve the issue, but it hasn't worked. It seems that installing the ESU key might be the factor preventing these quality updates from being offered. I'm at a loss and would appreciate any guidance or insights on this situation.
2 Answers
It sounds like the ESU updates could be conflicting with your Intune settings. When you switch to Autopatch, the update management process changes, and this might affect how updates are being delivered. Have you checked to see if the ESU key is fully activated across all devices? Also, sometimes a re-sync with Intune might help in recognizing the updates that are pending. You might want to consult Microsoft's documentation about compatibility between ESU and Autopatch for any specific notes on this issue.
There's a known issue with ESU where it can occasionally block or delay quality updates. A few users reported that clearing the update cache or running the Windows Update Troubleshooter helped unstick things. Definitely worth a shot!
Yes! I did that once and it resolved a similar problem. Just make sure you re-enable your update settings afterwards.
Exactly! I had a similar issue and ended up needing to reconfigure some settings in Autopatch. Make sure all the requirements are met for the quality updates to flow through.