question

EdGonz-2830 avatar image
0 Votes"
EdGonz-2830 asked saldana-msft edited

SCCM and Windows 10 Feature Updates

Hello all,

I have a couple of questions that I can't seem to find an answer for:

  1. How do I prevent all my client computers from getting Windows 10 Feature Updates (20H2, 21H1, etc) from Windows Updates?

  2. I want to be able to control deployment of these Feature Updates using SCCM instead of Windows Updates

Bottom line, I want to deploy all feature updates to Windows 10 using only SCCM - that way I can control when my users get them.

Thanks!


mem-cm-generalmem-cm-osd
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TeemoTang-MSFT avatar image
0 Votes"
TeemoTang-MSFT answered EdGonz-2830 commented

About your question: How do I prevent all my client computers from getting Windows 10 Feature Updates (20H2, 21H1, etc) from Windows Updates?
You could enable Select when Select when Feature Updates are received from
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business
Once enable this Policy, we could defer feature for 365 days
100426-365.jpg



365.jpg (195.6 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have that enabled and still users got 21H1 through Windows Updates.
I've opened a case wit MS Support and working through this.

Thanks!

0 Votes 0 ·
EdGonz-2830 avatar image
0 Votes"
EdGonz-2830 answered HanyunZhu-MSFT commented

Okay, issue here is that Windows 10 21H1 seems to be getting deployed via Windows Update, not SCCM, to some of my users...my laptop included for instance.

After some research and speaking to some people, I'm asked to enable these two policies, the issue here is that this will completely disable Windows Updates; which I still need for my Surface users as we go there to retrieve Surface firmware/drivers. Also I think these two policies restrict Microsoft App Store.

100209-image.png



image.png (962.4 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, @ EdGonz-2830

In response to the question about sccm, Jason has given a comprehensive answer. The newest question you mentioned seems to be more related to Windows Update issue.
In order to better resolve your problem, we will add a tag of Windows Updates and see if Windows support will have some comments about this, as they may have a better understanding of these two GPOs.

0 Votes 0 ·
Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered Jason-MSFT edited

There's nothing to do here as long as the systems are managed by WSUS or ConfigMgr. Just don't deploy them (or only deploy them when you are ready for your systems to upgrade to them).

Make sure that you've not added any feature update or quality update deferrals via any policies though as this will enable dual-scan on the devices which makes them use WUfB instead since these policies are only meant for use with WUfB.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.