Join Brien Posey for an in-depth discussion in this video Plan for a service branch in Intune, part of Windows 10: Plan and Implement Software Updates.
- [Instructor] Microsoft is currently in the process of moving intune from the classic portal into Microsoft Azure and in doing so they're adding new features and capabilities such as support for service branches for Windows 10. So right now, I'm logged in to Microsoft Azure and I want to show you how this is going to work. If you look in the lower left corner of the screen, you'll notice that there's a link called more services. I'm going to go ahead and click on that link. This is going to display a list of all of the services that are available in Azure.
These services are grouped by category. For example, you can see the general category, the compute category. What we're looking for is monitoring and management, it's about three quarters of the way down, maybe a little further down. Here's monitoring and management and we can find a link for intune within this section. There's the intune link, I'm going to click on it now. We can see a number of different options that look very similar to the ones that are presented within the intune classic portal. The link that I'm going to click on is software updates and when I do that you'll notice that I'm taken to Windows 10 update rings and right now there are no Windows 10 update rings to show because Microsoft doesn't actually support this feature yet.
Even so, they will allow us to go in and take a look around so that you can see how this is going to work. What I'm going to do is click on create. This is going to bring up the create update ring interface. The first thing that we have to do is enter a name for the update ring that we're going to create. I'm just going to call this Windows 10. Next we have a field for an optional description. For example, you might enter Windows 10 anniversary update or Windows 10 Creator update or something to that effect.
Then we have a section called settings configure. If I expand this we're taken to all of the various options that we can configure. The first option is servicing branch. We have two options here, CBB and CB. CB is the default option and that stands for current branch. CBB is current branch for business. The next option that we have is Microsoft product updates. So we can choose whether we want to allow updates or block updates. The default option is to allow updates. Then we have an option for Windows drivers.
By default, drivers are going to be allowed to be downloaded, but we can block that if we want to. Then we can control automatic update behavior, the default option is to auto install at maintenance times, but if I click on this down arrow we can notify download, we can auto install and restart at maintenance times, auto install and restart at a scheduled time, or auto install and reboot without end user control. Then we can set our active hours. By default, active hours are set from eight am to five pm, this is basically business hours and we can change that to suit our own needs.
Then we have a couple of deferral options. The first option, right here, allows us to set a deferral period in days for quality updates. Now quality updates are sometimes referred to as the patch Tuesday updates. These are generally bug fixes and that sort of thing that make Windows run a little bit more smoothly. The other deferral option is feature update deferral. Feature updates add new features and capabilities to Windows and you can implement a deferral to keep those new features from being deployed right away. Then we have the delivery optimization download mode and by default this is set to http blended with peering behind same NAT but we do have a number of other options that we can use if you would prefer to have updates delivered in a different way.
Once all of this is configured, we would click okay and then we would click create to create the update ring. That's how update rings work within intune in Microsoft Azure.
- Deploying updates manually
- Monitoring deployments
- Configuring automatic deployment rules
- Analyzing log files
- Approving and declining updates in Intune
- Deploying software from SCCM, WSUS, and Intune