Windows and Other Services

Windows 11

FastTrack provides remote guidance for updating to Windows 11 from Windows 10.

This includes:

• Planning for your Windows 11 deployment.
• Assessing the source environment and the requirements.
• Deploying Windows 11 Enterprise and Microsoft 365 Apps using Microsoft Intune.
• Recommending options to assess Windows 11 app and driver readiness.
• Providing update guidance for Windows 11 Enterprise devices that meet Windows 11 system requirements.
• Providing update guidance for in-place updates from Windows 10 to Windows 11 using Windows Update for Business and guidance for Windows 11 servicing using Windows Update for Business and Intune.
• Providing guidance for new Windows 11 device deployment using Windows Autopilot.
• Providing guidance using Endpoint analytics and Windows Update for Business reports to see eligible devices and monitor device deployments.
• Providing guidance for enabling co-management and moving the update workload to Intune.
• Providing guidance to help your organization stay up to date with Windows 11 Enterprise and Microsoft 365 Apps.

Note

PCs must meet Windows 11 hardware requirements.

Out of scope for all Windows 11 products

• Upgrading task sequences or software update feature updates from Configuration Manager.
• Upgrading Configuration Manager to Current Branch.
• Creating custom images for Windows 11 deployment.
• Creating and supporting deployment scripts for Windows 11 deployment.
• Converting a Windows 11 system from BIOS to Unified Extensible Firmware Interface (UEFI).
• Enabling Windows 11 security features.
• Configuring Windows Deployment Services (WDS) for Preboot Execution Environment (PXE) booting.
• Using the Microsoft Deployment Toolkit (MDT) to capture and deploy Windows 11 images.
• Using the User State Migration Tool (USMT).

Contact a Microsoft Partner for assistance with these services.

BitLocker

FastTrack provides remote guidance for:

• Assessing the Windows 11 environment and hardware for BitLocker configuration.
• Enabling compliance reporting of BitLocker from Microsoft Intune.
• Providing guidance on configuring BitLocker for Windows Autopilot scenarios.
• Providing guidance on BitLocker key recovery best practices.

Windows Hello for Business

FastTrack provides remote guidance for:

• Assessing the Windows 10/11 environment and hardware for Windows Hello for Business configuration.
• Enabling Windows passwordless authentication using Windows Hello for Business cloud trust.
• Planning guidance for Windows Hello for Business hybrid key or certificate trust.

Windows Autopatch

FastTrack provides remote guidance for:

• Assistance in understanding the features of the Windows Autopatch service, validating environment prerequisites, and how the service relates to other Microsoft update tools.
• Assessing company readiness for Windows Autopatch onboarding using the Readiness Assessment tool and addressing issues identified by the tool.
• Understanding the process to enroll into the Windows Autopatch service.
• Registering physical and virtual devices into the Windows Autopatch service.
• Validating device updates and understanding reports.

Microsoft Defender for Endpoint

For more information, see Microsoft Defender for Endpoint.

Source environment expectations

The following requirements must be met.

For PC update:

• Source OS: Windows 10 Enterprise or Professional.
• Devices: Desktop, notebook, or tablet form factor.
• Target OS: Window 11 Enterprise.

For infrastructure upgrade:

• Microsoft Endpoint Configuration Manager.
• The Configuration Manager version must be supported by the Windows 11 target version and Configuration Manager must be cloud-attached. For more information, see the Configuration Manager support table at Support for Windows 11 in Configuration Manager.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft 365 Setup.

Windows 365

FastTrack provides remote guidance for onboarding to Windows 365 Enterprise, Windows 365 Frontline, and Windows 365 Government. Windows 365 takes the operating system to the Microsoft Cloud, securely streaming the full Windows experience—including all your apps, data, and settings—to your personal or corporate devices. Organizations can provision Cloud PCs (devices that are deployed on the Windows 365 service) instantly across the globe and manage them seamlessly alongside your physical PC estate using Microsoft Endpoint Manager. This desktop-as-a-service (DaaS) solution combines the benefits of desktop cloud hosting with the simplicity, security, and insights of Microsoft 365.

Remote guidance includes:

• Assigning licenses to users.
• Creating and modifying Azure network connections (ANCs).
• Adding and deleting device images, including standard Azure Marketplace gallery images and custom images. Some guidance might be provided around deploying language packs with custom images using the Windows 365 language installer script.
• Creating, editing, and deleting provisioning policies.
• Assisting with dynamic query expressions for dynamic groups and filtering.
• Deploying Windows Update policies for Cloud PCs using Intune.
• Deploying apps (including Microsoft 365 Apps for enterprise and Microsoft Teams with media optimizations) to Cloud PCs using Intune.
• Securing Cloud PCs, including Conditional Access, multifactor authentication (MFA), and managing Remote Desktop Protocol (RDP) device redirections.
• Managing Cloud PCs on Microsoft Endpoint Manager, including remote actions, resizing, and other administrative tasks.
• Optimizing end user experience.
• Deploying and managing Windows 365 Frontline Cloud PCs.
• Deploying and managing Windows 365 Government Cloud PCs.
• Finding other support for Windows 365.

Note

See Microsoft Defender XDR and Microsoft Defender for Endpoint for details about Microsoft Defender for Endpoint and the security baseline scope as it applies to Windows 365.

Out of scope

• Creation of Azure subscription features including Azure Virtual Networks (VNets), ExpressRoute, and Site-to-Site (S2S) VPN.
• Support for advanced networking topics.
• Customizing images for a Cloud PC on behalf of customers.
• Standalone use of Configuration Manager for managing Cloud PCs.
• Deploying Windows updates for Cloud PCs using Configuration Manager.
• Migrating virtual desktop infrastructure (VDI) or Azure Virtual Desktop virtual machines to Windows 365.
• Migrating Configuration Manager or Microsoft Deployment Toolkit (MDT) images to Azure.
• Migrating user profiles to or from Windows PCs.
• Configuring network appliances on behalf of customers.
• Programmatic actions against Microsoft Graph API.
• Support for third-party integrations.
• Support for Windows 365 Business.

Contact a Microsoft Partner or Microsoft FastTrack for Azure for assistance with items out of scope and/or if source environment expectations aren't met. If facing concerns about app compatibility, contact Microsoft App Assure.

Source environment expectations

Before onboarding the following is required:

• Windows 365 licensing requirements must be met.
• If not using a Microsoft-hosted network:
  • An Azure subscription associated with the Microsoft Entra tenant where licenses are deployed must be used.
  • A virtual network is deployed in a region that's supported for Window 365. The virtual network should:
    • Have sufficient private IP addresses for the number of Cloud PCs in order to deploy.
    • Have connectivity to Active Directory (only for Microsoft Entra hybrid joined configuration).
    • Have DNS servers configured for internal name.

Note

Onboarding assistance for Azure Virtual Desktop is provided by FastTrack for Azure. Customers should contact FastTrack for Azure to check for eligibility since FastTrack for Azure has separate eligibility requirements. If the customer doesn't qualify, they should work with an Azure partner.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Overview for Windows 365 Enterprise.

Universal Print

FastTrack provides remote guidance for:

• Onboarding and configuring Universal Print.
• Universal Print connector.
• Universal Print-ready printers.
• Deploying printers with Microsoft Intune.
• Printer and print job management.
• Configuring the Universal Print PowerShell module.

Out of scope

• Partner integrations.
• Third-party app virtualization and deployment.
• Creating custom scripts with the Universal Print PowerShell module.
• Universal Print developer features (including API).
• Configuring Windows servers for printing.

Source environment expectations

• The customer has one of the following licenses:
  • Microsoft 365 Enterprise F3, E3, or E5.
  • Microsoft 365 Education A3 or A5.
  • Microsoft 365 Business Premium.
  • Microsoft 365 G3, G5 - GCC.
  • Microsoft 365 E3, E5 - GCC High.
  • Windows 10/11 Enterprise E3 or E5.
  • Windows 10/11 Education A3 or A5.
  • Windows 10/11 Enterprise E5 Commercial (GCC Compatible).
• Microsoft Entra ID tenant setup (any edition).
• Universal Print connector host and/or Universal Print-ready printers.
• Client devices must be running Windows 11 or Windows 10 version 1903 or greater.

App Assure

App Assure is a service designed to address issues with Windows and Microsoft 365 Apps app compatibility and is available to all Microsoft customers. When you request the App Assure service, we work with you to address valid app issues. To request App Assure assistance, complete the App Assure service request.

FastTrack also provides guidance to customers who face compatibility issues when deploying Windows 365 Cloud PC, Azure Virtual Desktop, and Microsoft Edge and make every reasonable effort to resolve compatibility issues. We provide remediation assistance for apps deployed on the following Microsoft products:

• Windows 10/11 (including Arm64 devices).
• Microsoft 365 Apps, including Microsoft Copilot for Microsoft 365.
• Microsoft Edge - For deployment guidance, see Overview of the Microsoft Edge channels.
• Azure Virtual Desktop - For more information, see What is Azure Virtual Desktop? and Windows 10 Enterprise multi-session FAQ.
• Windows 365 Cloud PC - For more information, see Introducing a new era of hybrid personal computing: the Windows 365 Cloud PC.

FastTrack eligibility criteria doesn’t apply to App Assure services and is subject to Microsoft’s discretion.

Note

App Assure supports Copilot for Microsoft 365 customers by addressing app compatibility issues encountered when moving to a monthly update channel.

Out of scope

• App inventory and testing to determine what does and doesn’t work on Windows and Microsoft 365 Apps. For more information, see the Windows and Office 365 deployment lab kit. If you're interested in guidance for modernizing endpoints or deploying Windows 11, request assistance from FastTrack.
• Researching third-party ISV apps for Windows compatibility and support statements.
• App packaging-only services. However, the App Assure team packages Windows apps that we remediated to ensure they can be deployed in the customer's environment.
• Although Android apps on Windows 11 are available to Windows Insiders, App Assure doesn’t currently support Android apps or devices, including Surface Duo devices.

Customer responsibilities

• Creating an app inventory.
• Validating those apps on Windows and Microsoft 365 Apps.

Note

Microsoft can’t make changes to your source code. However, the App Assure team can provide guidance to app developers if the source code is available for your apps.

Contact a Microsoft Partner for assistance with these services.

Source environment expectations

Windows and Microsoft 365 Apps

• Apps that worked on Windows 7, Windows 8.1, Windows 10, and Windows 11 also work on Windows 10/11.
• Apps that worked on Office 2010, Office 2013, Office 2016, and Office 2019 also work on Microsoft 365 Apps (32-bit and 64-bit versions).

Windows 365 Cloud PC

Apps that worked on Windows 7, Windows 8.1, Windows 10, and Windows 11 also work on Windows 365 Cloud PC.

Windows on Arm

Apps that worked on Windows 7, Windows 8.1, Windows 10, and Windows 11 also work on Windows 10/11 on Arm64 devices.

Note

x64 (64-bit) emulation is available on Windows 11 on Arm devices.

Microsoft Edge

If your web apps or sites work on supported versions of Google Chrome or any version of Microsoft Edge, they’ll also work on the latest version of Microsoft Edge. As the web is constantly evolving, be sure to review this published list of known site compatibility-impacting changes for Microsoft Edge.

Note

App Assure helps you configure IE mode to support legacy Internet Explorer web apps or sites. Support for development to modernize Internet Explorer web apps or sites to run natively on the Chromium engine isn’t covered under this benefit.

Azure Virtual Desktop

Apps running on Windows 7, Windows 8.1, Windows 10, Windows 11, or Windows Server (as virtualized apps) also run on:

• Windows 10/11 Enterprise.
• Windows 10/11 Enterprise multi-session.

Note

Onboarding assistance for Azure Virtual Desktop is provided by FastTrack for Azure. Customers should contact FastTrack for Azure to check for eligibility since Azure has separate eligibility requirements. If the customer doesn't qualify, they should work with an Azure partner.

Note

Windows Enterprise multi-session compatibility exclusions and limitations include:

• Limited redirection of hardware.
• A/V-intensive apps might perform in a diminished capacity.
• 16-bit apps aren’t supported for 64-bit Azure Virtual Desktop.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft 365 Setup.

Arm Advisory Service

App Assure’s Arm Advisory Service is a no-cost service available to Windows on Arm developers where App Assure engineers assist with porting applications to Arm and building Arm-native applications.

FastTrack provides remote guidance for:

• Delivering a technical workshop for developing best practices, including answering specific implementation questions.
• Suggesting which platform features can be used to enhance application experience.
• Providing code review and code samples to enable development.
• Providing break-fix assistance if issues arise while building or porting apps.
• Providing engineering escalation to enable software development efforts and provide product feedback.

To contact App Assure for this service, complete the Windows Arm Advisory Service enrollment form.

Note

Developers without access to Arm-based hardware can create a Windows on Arm virtual machine to develop, build, and test applications in a native environment.

Important

Please be aware that Microsoft reserves the right to limit this offer to 15 hours per Arm developer and to waitlist developers due to high volume.

Microsoft 365 Apps

FastTrack provides remote guidance for:

• Addressing deployment issues.
• Assigning end-user and device-based licenses using the Microsoft 365 admin center and Windows PowerShell.
• Installing Microsoft 365 Apps from the Office 365 portal using Click-to-Run.
• Installing Office Mobile apps (like Outlook Mobile, Word Mobile, Excel Mobile, and PowerPoint Mobile) on your iOS or Android devices.
• Configuring update settings using the Office 365 Deployment Tool.
• Selection and setup of a local or cloud installation.
• Creation of the Office Deployment Tool configuration XML with the Office Customization Tool or native XML to configure the deployment package.
• Deployment using Microsoft Endpoint Configuration Manager, including assistance with the creation of Microsoft Endpoint Configuration Manager packaging. Additionally, if you have a macro or add-in that worked with prior versions of Office and you experience compatibility issues, FastTrack provides guidance to remediate the compatibility issue at no extra cost through the App Assure program.

Important

Online client software must be at a minimum level as defined in the System requirements for Microsoft 365 and Office.

Network health

Alignment with Microsoft’s principals of network connectivity is vital to the successful onboarding of FastTrack Services. As such, FastTrack provides remote guidance to obtain and interpret data from a customer’s environment subject to the terms of the customer agreement to verify this alignment. This highlights a company’s network score, which directly impacts migration velocity, user experience, service performance, and reliability. FastTrack also guides our customers through necessary remediation steps highlighted by this data to help improve the network score.

Source environment expectations

• Microsoft 365 admin center access.
• Up-to-date versions of Microsoft 365 apps are required.
• Location services enabled as per Network performance recommendations in the Microsoft 365 Admin Center (preview).

Microsoft Edge

FastTrack provides remote guidance for:

• Deploying Microsoft Edge on Windows 10/11 with Microsoft Endpoint Manager (Microsoft Endpoint Configuration Manager or Microsoft Intune).
• Configuring Microsoft Edge (using group policies or Intune app configuration and app policies).
• Migrating web apps or sites from Google Chrome to Microsoft Edge. Additionally, if you have a web app or site that works with Google Chrome and you experience compatibility issues, FastTrack provides guidance to resolve the issue at no extra cost. To request compatibility support for App Assure, sign in to the FastTrack portal to start an engagement.
• Planning guidance for Microsoft Edge adoption and configuration guidance for Microsoft Search bookmarks.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Deploy and configure Microsoft Edge.