Integrate Upgrade Readiness with Configuration Manager
Applies to: System Center Configuration Manager (Current Branch)
Upgrade Readiness is a part of Windows Analytics. It allows you to assess and analyze the readiness of devices in your environment for an upgrade to Windows 10. Integrate Upgrade Readiness with Configuration Manager to access client upgrade compatibility data in the Configuration Manager console. Then use this data to create collections, and target devices for upgrade or remediation.
Upgrade Readiness relies on Windows Analytics data. In order for Upgrade Readiness to receive sufficient data, configure the following prerequisites:
Configure all clients with a commercial ID key
Configure Windows 10 clients for Windows Analytics to report at least basic level data
For clients running Windows 7 or 8.1:
Install the updates as described in Get started with Upgrade Readiness
Enable Windows Analytics client settings
Configure these settings using Configuration Manager client settings. For more information, see Use Windows Analytics.
Deploying the correct prerequisite updates and configuring client settings should be sufficient in most environments. If you encounter issues with Upgrade Readiness not receiving data from devices in your environment, then some of these issues may be addressed by using the Upgrade Readiness deployment script.
Connect Configuration Manager to Upgrade Readiness
Use the Azure services wizard to simplify the process of configuring Azure services you use with Configuration Manager. To connect Configuration Manager with Upgrade Readiness, create an Azure Active Directory (Azure AD) app registration of type Web app / API in the Azure portal. For more information about how to create an app registration, see Register your application with your Azure AD tenant.
In the Azure portal, give following permissions to your newly registered web app:
- Reader permissions to the resource group that contains the Log Analytics workspace with your Upgrade Readiness data
- Contributor permissions to the Log Analytics workspace that hosts your Upgrade Readiness data
The Azure services wizard uses this app registration to allow Configuration Manager to communicate securely with Azure AD and connect your infrastructure to your Upgrade Readiness data.
Grant permissions to the app itself, not to an Azure AD user identity. It's the registered app that accesses the data on behalf of your Configuration Manager infrastructure. To grant the permissions, search for the name of the app registration in the Add users area when assigning the permission.
This process is the same as when providing Configuration Manager with permissions to Log Analytics. These steps must be completed before the app registration is imported into Configuration Manager with the Azure services wizard.
For more information, see Connect Configuration Manager to Log Analytics.
Use the Azure Wizard to create the connection
Follow the instructions in Configure Azure services to create a connection to Upgrade Readiness by importing the web app registration you created above.
If the web app import was successful and the correct permissions are assigned in the Azure portal, the Configuration page pre-populates the following values:
- Azure subscriptions
- Azure resource group
- Windows Analytics workspace
More than one resource group or workspace is available in the following circumstances:
- If the registered Azure AD web app has Contributor permissions on more than one resource group
- If the selected resource group has more than one Log Analytics workspace
View and use Upgrade Readiness information in Configuration Manager
After you've integrated Upgrade Readiness with Configuration Manager, you can view the analysis of your clients' upgrade readiness.
In the Configuration Manager console, go to the Monitoring workspace, and select the Upgrade Readiness node.
Review the data. For example:
- The upgrade readiness state
- The percent of Windows devices that are reporting data
Filter the dashboard to view data for devices in specific collections.
View the devices in a particular readiness state, and then create a dynamic collection for those devices. Then use that collection to upgrade those devices, or take action to remediate devices that are in a blocked state.
The site synchronizes data with Upgrade Readiness once a week. To manually trigger synchronization:
- In the Configuration Manager console, go to the Administration workspace, expand Cloud Services, and select the Azure Services node.
- Select the Upgrade Readiness connection from the list.
- In the ribbon, select the option to synchronize.