AMA: Managing Windows updates

Ғылым және технология

Managing updates across an organization doesn’t have to be complicated. Have questions on how to control update offerings and experiences? Want to know the best ways to test on a subset of devices before deploying updates across your organization? Need to balance timely update deployment with a positive update experience for the people in your organization? Get answers, tips, and insights here!
-------------------------------------------------------------------------------------------------------------------------------
➡️ For the full list of Q&A, see aka.ms/AMA/ManagingUpdates
This session is part of Tech Community Live: Windows edition. This session will also be recorded and available on demand shortly after conclusion of the live event. To view other AMAs from Tech Community Live: Windows edition, see aka.ms/TCL/Windows.
-------------------------------------------------------------------------------------------------------------------------------
Here's what's covered:
0:00 - Introductions
3:30 - Are there any plans to simplify and expedite driver updates? Specifically, will there be a method to allow users to download the latest drivers directly through Windows Update, eliminating the need to visit multiple manufacturer websites?
8:30 - For the new feature update monitoring in Intune, will this functionality be added in Windows Autopatch in future?
14:45 - Any plans to extend the optional feature update to allow to enforce at a specific date? For example, allow the user to upgrade for 3weeks and if he/she hasn't, enforce. This is the last missing point to fully migrate feature upgrade to WUFB (we already do for CU)
15:50 - What advice do you have for those who want to move to newer management methods of windows updates but have complicated "known unknowns"?. EX. bandwidth issues with VPN split exclude tunnels, and complicated networking which may or may not allow East-West traffic. Previously WSUS/Configmgr you knew Client - DP/WSUS and could back off downloads quickly if too many clients started at the same time. What options are there to throttle if networking goes wrong?
18:05 - Can you talk about (or show) the policy conflict report and how you think we should use it to help fix conflict issue? If we're only using WUFB for now, do we need to do something or wait for the unification to be able to use it? Thanks.
19:45 - Is there a WUFB for GCC roadmap?
20:30 - Can you talk a bit about immigrating WUfB deployment service with Autopilot?
22:20 - Are there any changes coming to Windows Update for BIOS updates? Our devices are hybrid joined and we're switching from WSUS to Autopatch. At the moment I'm implementing a mix of Autopatch and an OEM tool that can be controlled by Proactive Remediations to search and scan for driver/firmware/bios updates. TBH it's a huge pain and I'm starting to think if the drivers provided by Windows Update are "good enough"....
25:00 - We're still heavily an on-prem shop and use WSUS and Group Policies to manage our updates for our workstations (and servers). Is there anything new with WSUS and related Group Policies that we should be considering? Is there a future still for our approach? Appreciate all the goodness y'all are moving forward!
27:25 - What are the most common reasons devices are missing from WUfB reports and how do correct those?
35:55 - I've tried to go to the policy conflict report, but I don't seem to have the 'Autopatch' blade in Intune like it's mentioned in the doc Go to the Microsoft Intune admin center. Navigate to Windows Autopatch - Policy health - Affected devices tab. Select View alert to see the alert details. Can you please provide the url for the report to be sure I'm looking at the right place?
37:35 - If we opt in W10 managed devices for optional updates, will they be offered Windows 11?
39:15 - Will there be mechanisms built on top of WuFb and autopatch to easily pull a Kb from deployment that causes an unforeseen issue in the environment? We can do it easily in WSUS but have been told this is not easy in these products by design? I know we should be able to test releases in advance, `but things happen :) in a large broad environment? thanks!
44:25 - Not sure if this has already been asked, but any plans to give admins the options to, say, install all updates and drivers and only have control over bios/firmware updates? Something like push the bios update to all devices on Friday 10am local time?
45:45 - We have some Cloud PCs that are not used often or may not get used at all. They are all in Autopatch. These have issues getting Windows updates. We've seen some get updates once the users login. Is this a known issue?
48:05 - Any work is being done to add information to the WUFB DO report? I know that the community is actively creating their own reports with more valuable data to troubleshoot DO or show detailed savings, but it would be great to have it included in WUFB reports.

Пікірлер

    Келесі