Upgrade Windows 10 Pro to Enterprise Device based (Microsoft 365 E3)

Leo Johnson 151 Reputation points

Hi y'all,

Our company is using lots of Dell laptop with a built-in Windows 10 Professional license.

Is it allowed to have the license upgraded to Enterprise by using Intune with a generic KMS key from Microsoft?

We have 5000+ Microsoft 365 E3 licenses, so Windows 10 Enterprise is licensed.

What are we doing at the moment?

In Intune we created a policy to upgrade Windows 10 to Enterprise, this policy is device based.

Sure it works perfect when a users logs in: the device will be upgraded to Enterprise.
But we want to use a predefined company wallpaper (Blob storage method) and this will work only with Windows 10 Enterprise.

So when the first user logs in, the standard Microsoft wallpaper will be shown. When this user logs off and on again, or a second user logs in, the company wallpaper will show. Because after the first logout, Windows is upgraded to Enterprise

Is the way we are using allowed?

Are there any alternatives?

Please help.


Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,818 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,492 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,487 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,866 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Nick Hogarth 3,436 Reputation points

    If your M365 E3 licenses include Windows 10 Enterprise, then make sure that is assigned to a user, then you don't need KMS or the Intune policy to upgrade to Enterprise. Windows 10 Pro should step up to Windows 10 Enterprise when the user logs in (if it is Azure AD Joined or Hybrid Azure AD Joined). See https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation#requirements

    Have you tried creating an Intune policy specifying a URL for the wallpaper as per https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#personalization ? If not, what is the exact blob storage method you are using?

  2. Jenny Feng 14,081 Reputation points

    What do you mean of a temporary KMS license?
    You need to be the enterprise version before the first user logs in, right?