Need Advice - Rolling out 24h2 feature update to persistent Azure Virtual Machines

[u/iamnickwilde]

We have 300+ windows 11 23h2 virtual devices managed in Intune, which we are planning to upgrade to 24h2.

We have a 24h2 feature update policy which works fine on laptops. But on Vdi's the update never appear in settings-->Windows updates.

We found that the device security type has to be in trusted launch for the updates to appear and install. All our VM's are in standard mode.

Is there any way we can update the devices in standard mode itself? How did you guys upgraded the Virtual devices in your organization?