In previous versions of Windows, you could upgrade a device to the latest version of Windows, migrate data from another device to a new device, or perform a clean install. Enterprises have long believed that performing a clean install offers them the most reliable outcome. However, the best practice is to retain the operating system on the device and then transform it or upgrade to the required build of Windows. Microsoft has successfully and consistently applied updates to Windows from one build to a later one; this is now an accepted and trusted process.

Many large enterprises use Microsoft Configuration Manager, a powerful yet complex tool to manage an organization’s devices, apps, and upgrades. Configuration Manager (current branch) continues to be supported by Microsoft and can be used to upgrade older operating systems to Windows 11.

Rebuilding new computers

Some organizations prefer to completely rebuild devices before handing them to users. This is typical within smaller organizations with limited resources to create and maintain images and provisioning packages. Many will want to remove bloatware—software added by the vendor. This software can be utilities and software that enhances the user experience, which is favorable. However, third-party software, such as security software or apps, is often included. Most of these apps are preinstalled as trial software and are often unwanted, especially in a corporate environment.

While it is best practice to transform an existing device and re-provision it to the latest version of Windows, it is still common for devices to be formatted and completely rebuilt. By reinstalling Windows, the device must be provisioned with the operating system, drivers, patches, applications, and security measures (such as BitLocker Drive Encryption) before they are handed to users.

Rebuilding a device is a straightforward process, though it can be a manual and time-consuming process. The resources must be reviewed to ensure that the latest drivers and other software are up-to-date and compatible.

Seldom will a newly formatted device that is re-installed be as performant as a device supplied preconfigured by the original equipment manufacturer (OEM). This is because device manufacturers often optimize the computer set up with extra drivers or tweaks to settings not included in the public drivers and software packages. This “secret sauce” can greatly affect the device’s speed and battery life.

A new and especially useful option in this new post-COVID world is allowing users to drive the device provisioning process. The user-driven method allows users to join their device into Azure Active Directory and then allow the automatic mobile device management (MDM) provisioning capabilities to configure and set up the device. The user must enter their Azure Active Directory account and password (called their “work or school account” within Windows 11). The MDM service then configures the device, making it ready for work.