pingjilo.blogg.se - Microsoft intune manage windows updates

MICROSOFT INTUNE MANAGE WINDOWS UPDATES HOW TO
MICROSOFT INTUNE MANAGE WINDOWS UPDATES UPDATE
MICROSOFT INTUNE MANAGE WINDOWS UPDATES PATCH
MICROSOFT INTUNE MANAGE WINDOWS UPDATES UPGRADE

MICROSOFT INTUNE MANAGE WINDOWS UPDATES UPDATE

It's not using the TargetReleaseVersion CSP so is it leveraging deployment service under the hood and flagging the client on MS update to offer the feature update? Brooks Peppin October 26, 2022 I'm curious on how exactly the "Feature Upgrade" policy works under the hood in Intune. You can read the full Twitter thread here: And sure enough, they (along with Mattias Melkersen) did confirm that yes this does actually leverage the Windows Update for Business Service. I had my suspicions though and I reached out to the Microsoft PMs to confirm. I then checked for updates and immediately the client would grab the feature upgrade. There were no registry keys and nothing showing under the assigned policy when looking at the MDM-managed policies on the client. This is set in the registry where all of the other Windows Update for Business CSPs are stored.īut when I first deployed the Intune version of feature upgrades, I couldn’t find anything set on the client. It keeps a client at or upgrades them to the version you specify. This CSP was released alongside the Windversion which launched in June 2020.

MICROSOFT INTUNE MANAGE WINDOWS UPDATES HOW TO

I even wrote a whole blog on how to use it while working with VMware Workspace ONE. When I was first getting into managing feature updates via modern management, I learned about the “TargetReleaseVersion” CSP. But after you click the “Create” button and this goes out, what actually happens? Introducing the Windows Update Deployment Service You can also pick different deployment options to suit your needsĪfter this, you can then assign it to your assignments groups. Select a supported Windows 10 or 11 feature version

MICROSOFT INTUNE MANAGE WINDOWS UPDATES UPGRADE

Then you create a profile with the Windows 10 or 11 feature upgrade version you want. Feature updates for Windows 10 and later (preview) You get to this area in the Intune console by going to Devices > Windows > Feature updates for Windows 10 and later (preview).

Tell clients to “upgrade” to the Windows version you specify, if it’s not already on itĪdditionally, deploying one of these to devices enables additional reporting to the Intune console.

Tell clients to “stay” on the Windows version you specify.

So what exactly does this feature do? It allows you to do two primary things: There are a few other limitations and workflow considerations especially if you are in a co-management state so I highly recommend you read the full MS article.

The proper Windows Health Monitoring settings are enabled and deployed to devices.

Running Pro, Enterprise, or Education SKUs of Windows.

The Microsoft Account Sign-In Assistant service, wlidsvc, must be running and not disabled or blocked.

You can create and deploy this via a “Device Restrictions” profile.

A Telemetry value of “Required” or higher.

Be Intune enrolled either as Hybrid Joined or Azure AD Joined.

Be running a “supported” version of Windows 10/11.

On the client side, you’ll need to ensure the following:

Windows Virtual Desktop Access E3 or E5.

Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 or A5).Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5).These are the licenses that currently support WUFB DS: You therefore must be licensed to use it. This technology actually leverages a service called the Windows Update for Business Deployment Service (WUFB DS). There are a few prereqs in order for this to work in your environment. Verify Specify Version and Assignments.

Introducing the Windows Update Deployment Service.

Today we are going to dig in and explore how this all works. But ever wondered how it actually works though? While it may seem like a simple thing on the surface, there is actually a lot going on behind the scenes.

MICROSOFT INTUNE MANAGE WINDOWS UPDATES PATCH

You no longer have to “push” out the full patch or ISO content via ConfigMgr or WSUS or worry about content distribution. Deploying Windows 10/11 feature updates with Microsoft Intune is much simpler than traditional methods.