From the course: Windows 10: Troubleshooting Cloud Integration

Demo: Configure Windows 10 update rings using Intune

From the course: Windows 10: Troubleshooting Cloud Integration

Start my 1-month free trial

Demo: Configure Windows 10 update rings using Intune

- Let's drop onto our demo environment and see a demonstration of how to configure Windows 10 update rings using Microsoft Intune. From my Microsoft 365 admin center, I'll click show all and then select endpoint management. We'll first look at how to set up deployment rings for updates, by creating a policy and managing the settings and configuration for the policy. On the left-hand side I'll click devices. Then, under policy, I'll select Windows 10 update rings and you can see I've created a test update ring already from my insider preview devices. I'm going to go ahead and create a new deployment ring. I'll click create. I'll provide a name and description, and click next. Next I'll configure the update ring settings. In the servicing channel I'll confirm the semi-annual channel. Notice that the semi-annual channel targeted is present in this release of Intune, but this is likely to disappear in a future release. I want to ensure that the Microsoft product update setting is set to allow. Allow is the default setting, and we can see it's already configured. This allows updates for other Microsoft products to be delivered at the same time as Windows 10 updates. We can manage the settings for drivers, and I'll assure this setting is for allow. This next setting is for the quality update deferral period. I'll set this to 10 days, and then configure the feature update deferral period to 60 days from release. The next setting manages rollback periods. The default in Windows is 10 days. However, when we deploy settings using Intune, we can configure a maximum of 60 days. In this way, if there are any issues discovered after a feature update has been deployed, we have up to 60 days to perform a rollback. Note the devices must run Windows 10 version 1803 or later for this extra time. Let's now move on to see how we can manage the user experience settings for updates. The settings we can manage for the user include the automatic update behavior. The default setting is auto install and restart at a scheduled time. However, we'll set this to auto install at maintenance time, so that updates will be downloaded automatically but only installed when the device is not in use and when it's not using battery power. This also offers the user the option to delay the restart for up to seven days if needed. We can also configure our active hours. The next setting is restart checks. We'll ensure that this setting is set to allow, which is the default, as we want the update to be able to wake the device from sleep mode, so long as the device checks are passed, for example, the battery power checks. We want to make sure that end users cannot stop or defer updates from being deployed to their device. Therefore, on the option to pause Windows updates, I'll select disable. However, we're happy for end users to be able to check and download updates themselves, and therefore we'll enable the option to check for Windows updates. The next setting is to requires users' approval to restart outside of work hours, and we'll set this to required. We can also send the user a reminder about the auto update, auto start, to ensure that they don't lose any work. I'll select two hours. There's also a reminder setting where the end user cannot dismiss the reminder, which I'll configure for 30 minutes. I'm happy with the rest of the settings, and I'll click next. We now need to assign the update ring to a group. I'll select selected groups, and we can choose a group, all users, all devices, or all users and all devices. I'll select a group to include, and on the right-hand side, I'll search for the group and select my mainstream devices, SAC plus 60, and click select, and then click next. Once I'm happy, I can click create, and those PCs will now use the update and user experience settings configured within this deployment ring.

Contents