[Intune] Upgrade Windows operating systems at end of vendor support
Recommendation Impact Across KPIs
| KPI | Impact | Calculated? |
|---|---|---|
| Reliability: | Reduces potential system downtime based on time elapsed since end of support | ✅ |
| Security Compliance: | PRIMARY REC - Ensures continuous security updates and patch management compliance with NIST standards | ✅ |
| Economic: | Cost implications of upgrade licenses and implementation | ❌ |
| User Experience: | Improved performance and compatibility with modern applications | ✅ |
| Environment: | No direct environmental impact measured | ❌ |
Score Calculation
1. Data Ingestion
- Device Name
- Operating System Version
- Last Sign-in Date
- Support Status
- Days Until End of Support
2. Data Enrichment
- Mapping to Microsoft Windows support lifecycle
- Identification of suitable upgrade paths
- NIST compliance scoring
- Asset weight calculations
3. Health Score
- Reliability score based on potential downtime minutes and support end date multiplier
- Security compliance score calculated using NIST scoring and asset weight
- User experience impact based on version compatibility metrics
Example Graph
Pie chart showing distribution of Windows operating systems across three categories: - In support (devices still in support) - EOL update required (devices within 180 days of vendor mainstream support) - Security risk (devices within 180 days of vendor security vulnerability)
Business Opportunities
Product Sales Opportunity
As a provider this recommendation provides an opportunity to generate $405 USD per device through Microsoft 365 E3 licenses ($33.75 per month USD per device).
Professional Services Opportunity
The recommendation provides an opportunity for professional services to implement operating system upgrades and ensure smooth transition to supported versions across the organization's device fleet.
Remediation Guidance
To resolve the recommendation the following steps are recommended:
- Develop an Upgrade Plan
- Assess application and hardware compatibility
- Allocate necessary resources and licenses
Plan phased deployment using Intune
Communicate with Users
- Notify employees about upcoming upgrades
Schedule upgrades during off-peak hours
Pre-Upgrade Preparation
- Backup critical data
- Conduct test deployments
Verify compliance requirements
Execute the Upgrade
- Deploy using Windows Autopilot or Intune task sequences
- Monitor deployment progress
Validate critical applications
Post-Upgrade Monitoring & Optimization
- Track device health
- Apply security updates
Collect user feedback
Ongoing Maintenance
- Ensure continuous updates
- Monitor compliance through Intune
Supporting Information
Supported Data Sources
- Microsoft Graph Entra ID
- Microsoft Graph Intune
Recommendation Categorisation
- End of Support
- Security Compliance
- Infrastructure Modernization
Supported Instances
- Windows Operating Systems
- Microsoft Endpoint Manager
- Microsoft Intune
Planned Instances
- Currently in development status
- New implementation type
- Endpoint asset focus