Tuesday 20 September 2016

Windows Update for Business not WSUS

WufB:  Windows Update for Business:

Windows Update for Business enables information technology administrators to keep the Windows 10-based devices in their organization always up to date with the latest security defenses and Windows features by directly connecting these systems to Microsoft's Windows Update service. By using Group Policy Objects, Windows Update for Business is an easily established and implemented system which enables organizations and administrators to exercise control on how their Windows 10-based devices are updated, by allowing:

  • Deployment and validation groups; where administrators can specify which devices go first in an update wave, and which devices will come later (to ensure any quality bars are met).
  • Peer-to-peer delivery, which administrators can enable to make delivery of updates to branch offices and remote sites with limited bandwidth very efficient.
  • Use with existing tools such as System Center Configuration Manager and theEnterprise Mobility Suite.

Supported Devices:

All devices running Windows 10 Pro, Enterprise, and Education on the Current Branch for Business (CBB) are Windows Update for Business eligible.

 

For Windows 10 updates has been recently released on November 12 and with that recent update, have introduced a new GPO settings call "Defer Upgrades and Updates".

To see what that setting looks like, open "Local Group Policy Editor" (Run –>gpedit.msc) and browse to "Computer Configuration" –> "Administrative Templates" –> "Windows Components" –> "Windows Update" and you will find the below screen.





The new "Defer Upgrades and Updates" introduces 3 new options:

  1. Defer upgrades up to 8 months (1 month increment)
  2. Defer updates up to 4 weeks (1 week increment)
  3. Pause Upgrades and Updates until the next update/upgrade release (around 30 days)

Note 1: You can't use those settings in conjunction with WSUS. if you specify an internal update service location, above settings will be ignored.

Note 2: By just enabling this GPO setting and not delaying anything (leaving both durations to 0), it will turn the target computers to CBB (Like the old GPO setting "Defer Upgrade" was doing in the Windows 10 RTM build).

 

No comments:

Post a Comment