Assign devices to servicing channels for Windows 10 updates

Applies to

  • Windows 10
  • Windows 10 Mobile

Looking for consumer information? See Windows Update: FAQ

Tip

If you're not familiar with the Windows 10 servicing or release channels, read Servicing Channels first.

Due to naming changes, older terms like CB,CBB and LTSB may still be displayed in some of our products.

Semi-Annual Channel (Targeted) is the default servicing channel for all Windows 10 devices except those with the LTSB edition installed. The following table shows the servicing channels available to each edition of Windows 10.

Windows 10 edition Semi-Annual Channel (Targeted) Semi-Annual Channel Long-Term Servicing Channel Insider Program
Home yes no no yes
Pro yes yes no yes
Enterprise yes yes no yes
Enterprise LTSB no no yes no
Pro Education yes yes no yes
Education yes yes no yes
Mobile yes no no yes
Mobile Enterprise yes yes no yes
Note

The LTSB edition of Windows 10 is only available through the Microsoft Volume Licensing Center.

Assign devices to Semi-Annual Channel

Important

Due to naming changes, older terms like CB,CBB and LTSB may still be displayed in some of our products.

In the following settings CB refers to Semi-Annual Channel (Targeted), while CBB refers to Semi-Annual Channel.

To assign a single PC locally to CBB

  1. Go to Settings > Update & security > Windows Update > Advanced options.
  2. Select Defer feature updates.

To assign PCs to CBB using Group Policy

  • In Windows 10, version 1511:

    Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Upgrades and Updates

  • In Windows 10, version 1607:

    Computer Configuration > Administrative Templates > Windows Components > Windows Update > Defer Windows Updates > Select when Feature Updates are received - enable policy and set branch readiness level to CBB

To assign PCs to CBB using MDM

  • In Windows 10, version 1511:

    ../Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade

  • In Windows 10, version 1607:

    ../Vendor/MSFT/Policy/Config/Update/BranchReadinessLevel

To assign Windows 10 Mobile Enterprise to CBB using MDM

  • In Windows 10 Mobile Enterprise, version 1511:

    ../Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade

  • In Windows 10 Mobile Enterprise, version 1607:

    ../Vendor/MSFT/Policy/Config/Update/BranchReadinessLevel

Enroll devices in the Windows Insider Program

Enrolling devices in the Windows Insider Program is simple and requires only a Microsoft account. To enroll a device in the Windows Insider Program, complete the following steps on the device that you want to enroll:

  1. Go to Start > Settings > Update & security > Windows Insider Program.

  2. Select Get started.

    Note

    If you didn’t use a Microsoft account to log in to the computer, you’ll be prompted to log in. If you don’t have a Microsoft account, you can create one now.

  3. Read the privacy statement and program terms, and then click Next.

  4. Click Confirm, and then select a time to restart the computer.

Install your first preview build from the Windows Insider Program

After enrolling your devices, you are ready to install your first preview build. To do so, go to Start > Settings > Update & security > Windows Insider Program to select your Insider level. The device receives the most recent Windows Insider build for the Insider level you select.

The options for Insider level are:

  • Release Preview: Insiders on this level receive builds of Windows just before Microsoft releases them for Semi-Annual Channel. Although these builds aren’t final, they are the most complete and stable builds available to Windows Insider Program participants. This level provides the best testing platform for organizations that conduct early application compatibility testing on Windows Insider PCs.
  • Slow: The Slow Windows Insider level is for users who enjoy seeing new builds of Windows with minimal risk to their devices but still want to provide feedback to Microsoft about their experience with the new build.
  • Fast: This level is best for Insiders who would like to be the first to experience new builds of Windows, participate in identifying and reporting issues to Microsoft, and provide suggestions on new functionality.
Note

Once your machine is updated to Windows 10 and you select your desired flight ring, the process known as "Compatibility check" will need to run in the background. There is no manual way to force this process to run. This process allows for the discovery of your OS type (32-bit, 64-bit), build edition (Home, Pro, Enterprise), country and language settings, and other required information. Once this process is complete, your machine will be auto-targeted for the next available flight for your selected ring. For the first build on any given machine, this may take up to 24 hours to complete.

Block access to Windows Insider Program

To prevent devices in your enterprise from being enrolled in the Insider Program for early releases of Windows 10:

  • Group Policy: Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds\Toggle user control over Insider builds
  • MDM: Policy CSP - System/AllowBuildPreview

Switching channels

During the life of a device, it may be necessary or desirable to switch between the available channels. Depending on the channel you are using, the exact mechanism for doing this can be different; some will be simple, others more involved.

From this channel To this channel You need to
Windows Insider Program Semi-Annual Channel (Targeted) Wait for the final Semi-Annual Channel release.
Semi-Annual Channel Not directly possible, because Windows Insider Program devices are automatically upgraded to the Semi-Annual Channel (Targeted) release at the end of the development cycle.
Long-Term Servicing Channel Not directly possible (requires wipe-and-load).
Semi-Annual Channel (Targeted) Insider Use the Settings app to enroll the device in the Windows Insider Program.
Semi-Annual Channel Select the Defer upgrade setting, or move the PC to a target group or flight that will not receive the next upgrade until it is business ready. Note that this change will not have any immediate impact; it only prevents the installation of the next Semi-Annual Channel release.
Long-Term Servicing Channel Not directly possible (requires wipe-and-load).
Semi-Annual Channel Insider Use the Settings app to enroll the device in the Windows Insider Program.
Semi-Annual Channel (Targeted) Disable the Defer upgrade setting, or move the device to a target group or flight that will receive the latest Current Semi-Annual Channel release.
Long-Term Servicing Channel Not directly possible (requires wipe-and-load).
Long-Term Servicing Channel Insider Use media to upgrade to the latest Windows Insider Program build.
Long-Term Servicing Channel (Targeted) Use media to upgrade to a later Long-Term Servicing Channel build. (Note that the Long-Term Servicing Channel build must be a later build.)
Long-Term Servicing Channel Use media to upgrade to a later Long-Term Servicing Channel for Business build (Long-Term Servicing Channel build plus fixes). Note that it must be a later build.

Block user access to Windows Update settings

In Windows 10, administrators can control user access to Windows Update. By enabling the Group Policy setting under Computer Configuration\Administrative Templates\Windows Components\Windows update\Remove access to use all Windows update features, administrators can disable the "Check for updates" option for users. Any background update scans, downloads and installations will continue to work as configured.

Note

In Windows 10, any Group Policy user configuration settings for Windows Update were deprecated and are no longer supported on this platform.

Steps to manage updates for Windows 10

done Learn about updates and servicing channels
done Prepare servicing strategy for Windows 10 updates
done Build deployment rings for Windows 10 updates
done Assign devices to servicing channels for Windows 10 updates (this topic)
to do Optimize update delivery for Windows 10 updates
to do Deploy updates using Windows Update for Business
or Deploy Windows 10 updates using Windows Server Update Services
or Deploy Windows 10 updates using System Center Configuration Manager