It's like you thought out so many great features and refuse to implement the basics.  All I want to do is install a bunch of applications after I install Windows 10.  It's not an uncommon request but for some reason on the cloud version - it's a nightmare. Every workaround I find to get close has a major "BUT" associated with it.  Is there really no way to force a check-in for a machine? Why can't I assign dynamic groups based on OU? I wouldn't have to assign dynamic groups based on OUs if there was a way to install applications from our software repository WITHOUT having to maintain a separate software repository for OS deployments. I'm disappointed in the tool and have resorted back to using MDT and dreaming of having PDQ again.