Fix issues found by the Readiness assessment tool

Seeing issues with your tenant? This article details how to remediate issues found with your tenant.

Note

If you need more assistance with tenant enrollment, you can submit a tenant enrollment support request.

Check results

For each check, the tool reports one of four possible results:

Result	Meaning
Ready	No action is required before completing enrollment.
Advisory	Follow the steps in the tool or this article for the best experience with enrollment and for users. You can complete enrollment, but you must fix these issues before you deploy your first device.
Not ready	You must fix these issues before enrollment. You can't enroll into Windows Autopatch if you don't fix these issues. Follow the steps in the tool or this article to resolve them.
Error	The Microsoft Entra role you're using doesn't have sufficient permission to run this check or your tenant isn't properly licensed for Microsoft Intune.

Note

The results reported by this tool reflect the status of your settings only at the time that you ran it. If you make changes later to policies in Microsoft Intune, Microsoft Entra ID, or Microsoft 365, items that were "Ready" can become "Not ready". To avoid problems with Windows Autopatch operations, review the specific settings described in this article before you change any policies.

Microsoft Intune settings

You can access Intune settings at the Intune admin center.

Update rings for Windows 10 or later

Your "Update rings for Windows 10 or later" policy in Intune must not target any Windows Autopatch devices.

Result	Meaning
Advisory	You have an "update ring" policy that targets all devices, all users, or both. Windows Autopatch creates our own update ring policies during enrollment. To avoid conflicts with Windows Autopatch devices, we exclude our devices group from your existing update ring policies that target all devices, all users, or both. You must consent to this change when you go to enroll your tenant.

Microsoft Entra settings

You can access Microsoft Entra settings in the Azure portal.

Co-management

Co-management enables you to concurrently manage Windows 10 or later devices by using both Configuration Manager and Microsoft Intune.

Result	Meaning
Advisory	To successfully enroll devices that are co-managed into Windows Autopatch, it's necessary that the following co-managed workloads are set to Intune: Device configuration Windows update policies Office 365 client apps If co-management doesn't apply to your tenant, this check can be safely disregarded, and it won't block device deployment.

Licenses

Windows Autopatch requires the following licenses:

Result	Meaning
Not ready	Windows Autopatch requires Windows 10/11 Enterprise E3 (or higher) to be assigned to your users. Additionally, Microsoft Entra ID P1 or P2, and Microsoft Intune are required. For more information, see more about licenses.