Require patching to complete before AutoPilot completes provisioning device
For the longest time we've been able to ensure that the device is fully patched after imaging but with AutoPilot there is a significant delay after provisioning until Windows Update tries to evaluate the patch compliance of the device. This is a big feature for security admins when allowing devices on the corporate LAN and I wonder how this would work for people who use device health because the machine is not fully patched after provisioning.
I'd like to see a setting for AutoPilot to pause the provisioning process until the device has installed its patches. The device would be released to the user once the device was compliant.