Configuration guide: Windows 11 migration

Introduction

To get started with this workflow, please ensure all related content is installed and configured appropriately. This page provides guidance on which content is included and how to configure it.

Please keep in mind this is just a guide and represents suggested configurations. You are free to customize and edit content as you see fit based on your specific environment.

Dependencies

To utilize this workflow, you need to install the necessary content into your Nexthink Infinity tenant.

Pre-requisites

This library pack contains content from the following expansion products

• Employee Engagement - Campaigns
• Remote Actions
• Flow - Workflows

Content and dependency

Type	Name	Description

Configuration

Step 1) Install library pack content

Step 2) Configure ITSM API connector credentials

The configuration of connector credentials is essential for enabling API calls. See detailed information at https://nexthink.gitbook.io/opd/integrations/outbound-connectors/connector-credentials. Each Service/API thinklet has a dropdown field for credentials that need to be filled out. When the workflow is installed or copied from the Library, this field will be blank as it is a local setup of each environment and is not included in the Library.

Here's an example of a connector credential configuration in a thinklet that augments a ServiceNow ticket with information about a device that needs to be updated for Windows 11 compatibility.

Step 3) Set up a registered Microsoft Entra ID app and configure Microsoft Graph API connector credentials

Refer to the following documentation page to register the Microsoft Entra ID application and configure the appropriate connector credentials in Nexthink: Entra ID integration for workflows.

For this workflow, the registered Entra ID application must be granted the following permissions:

Permission type	Least privileged permissions

For detailed information about permissions, see the Graph API documentation:

https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0

Step 4) Configure global parameters

There are three global parameters in this workflow:

4.1) MS migration group (ms_migration_group)

This parameter should contain the ID of the Entra ID group in which the Intune Windows 11 deployment is targeting its members.

4.2) Ticket for upgrade candidates (ticket_for_upgrade_candidates)

This parameter should contain the reference for a single global ITSM ticket created before running the workflow. This ticket will be updated with details about devices that require hardware upgrades to be compatible with Windows 11.

4.3) Ticket for replacement candidates (ticket_for_replacement_candidates)

This parameter should contain the reference for a single global ITSM ticket created before running the workflow. This ticket will include information about devices that are candidates for replacement due to incompatibility with Windows 11.

The corresponding Entra ID group and two ITSM tickets must be created before running the workflow, and their IDs must be specified in the parameters above.

As the workflow progresses, these tickets will be updated with details of devices that are considered partially compatible or candidates for replacement. This information includes the following: the device name and the incompatible hardware components of these devices.

Step 5) Configuration of Windows 11 deployment with Intune

This workflow uses the Microsoft Intune feature update deployment profile to update devices to Windows 11. This deployment profile applies to devices that are members of the Entra ID migration group specified in the global workflow parameters.

For this workflow, create an Intune feature update deployment profile with the following settings:

Setting name	Setting value

Step 6) Configure remote action(s)

This workflow uses the following remote actions. Make sure to install the latest versions and complete the setup as below.

Name	Trigger	Parameters to edit

Please note: The Get Windows 11 readiness remote action contains a list of CPUs that are compatible with Windows 11. Nexthink updates this list with new generations of CPUs. Be sure to update this remote action regularly.

Disk cleanup - input parameters

Name	Default value	Description

Step 7) Configure campaigns

There are four campaigns in this workflow:

Campaign name	Campaign NQL ID	Description

These campaigns should be modified before use to ensure that they match corporate communication guidelines. Navigate to the manage campaigns administration page to review and edit your campaigns.

For each installed campaign, please ensure to:

• Customize the sender name and image.

• Review and adjust questions.

• Publish the campaign when you are ready to use it.

Step 9) Schedule the workflow

This workflow is designed to run on all non-Windows 11 devices that are included in the Windows 11 migration process. As a result of this workflow, devices that are compatible with Windows 11 will be migrated to Windows 11, and devices that are not compatible or that require a hardware upgrade will appear in the corresponding ITSM tickets.

Trigger configuration for the workflow

The recommended way to trigger this workflow is as follows: Trigger the workflow in ad hoc mode on non-Windows 11 devices using Investigation. The workflow will automatically evaluate whether each specific device is compatible with Windows 11. Any devices that are considered incompatible or require a hardware update will be added to the appropriate ITSM tickets with details of their incompatibility.

The example below shows what an investigation looks like when selecting non-Windows 11 devices.

NQL:

Code

1 devices
2 | where operating_system.platform == windows and device.license_type != server
3 | where operating_system.name != "*Windows 11*"
4 | list name, operating_system.name, operating_system.build, last_seen

Usage guide

Your content is now configured and ready to be used. For usage overview and recommendations, you can visit the usage guide:

Usage guide: Windows 11 migration