Windows 11 won't wait: ready to make the switch?

The changeover to Windows 11 is an extensive project. We have already discussed why it is never too early to start the Win11 migration. But what is the first step?

The analysis of the hardware requirements is essential before starting any migration. Due to the requirements of Windows 11 (processors, TPM, etc.), some devices don’t support Windows 11. Microsoft regularly updates these requirements so it’s necessary to continuously adapt the analysis. It is crucial to find out how many devices meet the requirements. In our case, many were eligible for the new version. Companies with devices that don’t qualify should prepare for the ongoing renewal of their hardware until 2025.

But how do you handle the actual migration? At baramundi, we opted for a new installation in order to guarantee a clean upgrade. However, this led to new challenges, such as backing up and restoring user groups. But we were able to automate this with the right scripts.

For our Win11 migration, it was also crucial to create a carefully tested image before the actual rollout. We had to pay attention to numerous details. For example, the integration of all necessary language packs and the subsequent addition of new features such as Microsoft's Copilot. Another important point for installations directly at the user's workstation is the display of a "maintenance screen" on the lock screen and the simultaneous deactivation of the mouse and keyboard. This prevents users from logging in prematurely during the installation.

We decided against in-place upgrades in order to get everything "clean" on the newly set up computers without legacy issues such as outdated group policies. However, as we recreated the Active Directory object during the installation, it was important first to back up old group memberships in order to restore them after the installation on the newly set up devices. We were able to manage this process efficiently with scripts.

Even though the creation of a single image before the rollout meant a great deal of testing and customization, our approach was worthwhile because we regularly had to prepare for innovations such as Microsoft's Copilot. Test phases based on the ring concept were essential. We first carried out internal tests, which were then extended to key users from various departments to ensure compatibility with third-party software and overall performance.

Windows 11 heralds a new era of innovation, such as a range of Group Policy settings that include user-friendly management options. And with innovative features such as Dev Drive and the integration of Copilot, this version of Windows is not just an update but a leap towards a more efficient and innovative future. The powerful Windows Server Active Directory group policies are designed to ensure consistent and secure configuration across all devices. The Microsoft Security Compliance Toolkit, for example, provides a comprehensive list of important security settings for all supported Windows versions, ideal for customizing your own Group Policy Objects (GPOs).

However, even in this context, comprehensive testing of the security settings before implementation in a production environment is essential. With the right software, all of this can be accomplished without any problems.