What you’re seeing
- Intune reports the feature update as "Offered" or "Pending" for weeks, yet the PCs are still on the previous Windows release.
- Windows Update on the affected machines shows only monthly quality patches and never offers the newer version.
- Some devices upgrade fine while others in the same group never move, with no error listed against them.
- The Windows feature update report lists devices as "Not ready" or with a safeguard hold and no further explanation.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- An update ring with a feature update deferral is assigned to the same devices and overrides the feature update policy.
- Microsoft has placed a compatibility safeguard hold on the hardware, drivers or apps found on those PCs.
- The devices are missing the Windows diagnostic data or licensing prerequisites Intune needs before it can deliver feature updates.
- A leftover Group Policy or WSUS setting from the old on-premises setup still controls Windows Update and ignores Intune.
- The hardware falls short of Windows 11 requirements such as TPM 2.0, Secure Boot or a supported processor.
- Low free disk space or a pending reboot keeps the upgrade from staging on the device.
Why it matters
PCs left on an older Windows release eventually fall out of support and stop receiving security patches, which leaves them exposed and can put cyber-insurance or compliance requirements at risk. A mixed fleet also means inconsistent behavior, harder support and apps that work on one machine but not another. When the deadline for the old version arrives, a business can be forced into a rushed upgrade of every PC at once, with the disruption and cost that comes with it.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Why does Intune say the update is pending if nothing is happening?
Pending only means the policy has been assigned, not that the PC can actually take the update. A conflicting policy, a safeguard hold or a missing prerequisite can keep it in that state indefinitely.
Can you tell which PCs will never be able to upgrade?
Yes. Our certified US engineers review the device reports and hardware details in a remote secure session and separate PCs that are blocked by policy from ones that genuinely cannot run the new version.