question

yannara avatar image
0 Votes"
yannara asked yannara commented

Windows Update for Business in Settings Catalog

I found out, that Settings Catalog has lot of Windows Update for Business settings, and there are much more settings than in traditional Device rings settings. My main question is, that should I stick only to one configuration method, or is it totally okay to match these? In Settings Catalog I miss the option to lock down the build version...

186354-image.png


mem-intune-device-configurations
image.png (441.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered yannara commented

In general, yes, use rings as using both may introduce a conflict.

What setting exactly is present in Settings Catalog and not Rings or Feature Updates that you would want to use?

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I am still evaluating but the main reason why I am interested in this, I would like to have ALL update releated settings in the same place. Still, some reasons;

  1. Delivery optimization is controlled elsewhere.

  2. Feature updates are configured elsewhere and there is no monitoring for it.

  3. Notification dismisal -> user only is very interesting for me, to have the maximum level of user visibility.


0 Votes 0 ·

Hmmm, that's a problematic goal at best. DO is for more than just Windows Update for Business. Also, the feature update configuration in Intune cannot be controlled via Settings Catalog or GPO.

Also, not sure what you mean by "there is no monitoring for" Feature Updates? There is a report in Intune for this and you can/should also leverage Update Compliance for reporting when using Windows Update for Business.

0 Votes 0 ·

You can't track, will the Feature Updates for Windows 10 or later get applied or not. There is no monitor engine for that feature. For other polices, you can track down, did it apply or not.

0 Votes 0 ·
Show more comments

@Jason-MSFT now it looks there are more reasons to go to Settings Catalog, because some critical features are moved there and are not available anymore in Update Rings settings. See this for more info:

https://docs.microsoft.com/en-us/answers/questions/906935/windows-update-notifications-repeatedly-gone.html

0 Votes 0 ·
Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered yannara commented

Sorry, still not following. DO is not Windows Update specific and has never had settings configuration within update rings. Feature updates does have a report built into Intune and you can also use update compliance. As for notifications, that's more a client configuration and shouldn't be specific to a ring which is most likely why the settings were removed particularly since there was no other way to configure these prior to the Settings Catalog although update rings were introduced long before the Settings Catalog was even thought of.

Ultimately, we are in a slow transition away from the rings functionality completely as this is all client configuration but the newer/better way to configure this is on the service side which is what expedited updates and feature updates functionality within Intune uses. Implementation of this is on-going though.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Are you saying that Settings for Catalog for Windows Update for Business is not yet completely ready, but that will be the future?

0 Votes 0 ·