在 Microsoft Intune 中利用软件更新使 Windows PC 保持最新版本Keep Windows PCs up to date with software updates in Microsoft Intune

适用于:经典门户中的 IntuneApplies to: Intune in the classic portal
在寻找有关 Azure 门户中 Intune 的文档吗?Looking for documentation about Intune in the Azure portal? 请转到此处Go here.

Microsoft Intune 可通过多种方式帮助你保护托管计算机,其中包括管理软件更新,它通过确保快速安装最新修补程序和软件更新,使你的计算机保持最新版本。Microsoft Intune can help you to secure your managed computers in a number of ways, including the management of software updates that keep your computers up to date by ensuring the latest patches and software updates are quickly installed.

如果你尚未在计算机上安装 Intune 客户端,请参阅使用 Microsoft Intune 安装 Windows 电脑客户端If you have not yet installed the Intune client on your computers, see Install the Windows PC client with Microsoft Intune.

当 Microsoft 更新中有新的更新可用或你创建了第三方更新,并且这些更新适用于托管计算机时,“更新”工作区的“概述”页上将显示一条通知。When new updates are available from Microsoft Update, or you have created a third-party update, and they are applicable to your managed computers, a notification is displayed on the Overview page of the Updates workspace. 单击此通知链接后,你可以执行各种操作,如查看有关更新的详细信息、批准或拒绝更新,以及查看将在更新获得批准的情况下安装更新的计算机。After you choose this notification link, you can then perform various operations like viewing more information about the update, approving or declining the update, and viewing the computers that will install the update if it is approved.


直到客户端已被安装,并成功管理至少一台计算机客户端,“更新” 工作区才会显示在管理员控制台中。The Updates workspace is not displayed in the administrator console until you have installed the client on, and are successfully managing at least one computer client.

批准并安装更新后,可以在 Intune 工作台的“更新”工作区中查看安装是成功还是失败。As updates are approved and installed, you can examine the success or failure of the installation in the Updates workspace of the Intune console.

下列部分将帮助你使被管理的计算机上的软件保持最新。The following sections will help you to keep software up to date on your managed computers.

开始之前Before you start

在开始创建和批准软件更新之前,请配置用于控制更新安装时间和方式的策略并将其部署到你的计算机。Before you begin to create and approve software updates, configure and deploy polices to your computers that control when and how the updates are installed.

配置更新策略设置To configure update policy settings

  1. Microsoft Intune 管理控制台上,选择“策略”>“概述”>“添加策略”。In the Microsoft Intune administration console, choose Policy > Overview > Add Policy.

  2. 为更新设置配置和部署 Microsoft Intune 代理设置 策略。Configure and deploy a Microsoft Intune Agent Settings policy for the update settings. 你可以使用建议的设置,或对设置进行自定义。You can use recommended settings or customize the settings. 如果你需要有关如何创建和部署策略的详细信息,请参阅使用 Microsoft Intune 计算机客户端的常见 Windows 电脑管理任务If you need more information about how to create and deploy policies, see Common Windows PC management tasks with the Microsoft Intune computer client.

下表显示你可在策略中配置的值,还显示将在你未自定义策略的情况下使用的建议值。The following table shows the values you can configure in the policy and also the recommended values that will be used if you don’t customize the policy. 你可以在“更新”部分找到这些设置。You can find these settings in the Updates section.

策略设置Policy setting 详细信息Details
更新和应用程序检测频率(小时)Update and application detection frequency (hours) 指定 Intune 检查更新和新应用程序的频率(间隔 8-22 小时)。Specifies how frequently (from 8-22 hours) Intune checks for new updates and applications.

建议的值:“8”小时。Recommended value: 8 hours.
自动安装或提示安装更新和应用程序Automated or prompted installation of updates and applications 指定是否自动安装更新,或者是否在安装之前提示用户。Specifies whether updates are installed automatically or whether the user is prompted before installation. 此外,这些设置可让你计划更新和应用程序的安装。Additionally, this setting lets you schedule the installation of updates and applications.

“按计划自动安装更新和应用程序”会使用指定的计划安装更新和应用程序。Install updates and applications automatically as scheduled installs updates and applications using the specified schedule.

作为相关的策略设置,“为 Windows 计算机使用自动维护” 指定在 Windows 自动维护时限内安装更新和应用程序。As a dependent policy setting, Use Automatic Maintenance for Windows computers specifies that updates and applications are installed during the Windows Automatic maintenance window.

“提示用户进行安装”会在更新准备好时提示用户进行安装。Prompt user for installation prompts the user to install updates when they are ready.

建议的值:Recommended values:

选择“按计划自动安装更新和应用程序”Install updates and applications automatically as scheduled selected

计划日期:每天Day scheduled: Every day

计划时间:上午 3:00Time scheduled: 3:00 AM

选择“为 Windows 计算机使用自动维护”Use Automatic Maintenance for Windows computers selected
允许立即安装不会中断 Windows 的更新Allow immediate installation of updates that do not interrupt Windows 如果为“允许”,则在下载更新后立即安装更新(将中断或重启 Windows 的更新除外)。Allow installs updates immediately after they are downloaded, except for updates that would interrupt or restart Windows. 那些更新会按照“自动安装或提示安装的更新”设置的配置进行安装。Those updates are installed according to the configuration of the Automated or prompted installation of updates setting.

如果为“不允许”,则按照“自动安装或提示安装的更新”设置的配置来安装更新。Do not allow installs updates according to the configuration of the Automated or prompted installation of updates setting.

建议的值:AllowRecommended value: Allow
安装计划更新和应用程序后延迟重新启动 Windows (分钟)Delay to restart Windows after installation of scheduled updates and applications (minutes) 指定在安装计划的更新和应用程序后等待重启 Windows 的时间(1-30 分钟)。Specifies (from 1-30 minutes), the time to wait to restart Windows after the installation of scheduled updates and applications.

建议的值:15 分钟Recommended value: 15 minutes
Windows 重新启动后开始安装错过的已计划更新和应用程序的延迟时间(分钟)Delay following Windows restart to begin installing missed scheduled updates and applications (minutes) 指定在错过计划的更新后,在重启 Windows 多长时间后开始安装更新和应用程序(1-60 分钟)。Specifies (from 1-60 minutes), how long to wait to start the installation of updates and applications after Windows is restarted when a scheduled update was missed.

建议的值:5 分钟Recommended value: 5 minutes
在计划的更新和应用程序安装后允许登录的用户控制 Windows 重启Allow logged-on user to control Windows restart after installation of scheduled updates and applications 指定登录的用户是否能延迟重启 Windows(如果设置为“是”),或者在 Windows 自动重启时收到通知(如果设置为“否”)。Specifies whether the logged-on user can delay restarting Windows (if set to Yes), or be notified of the automatic Windows restart (if set to No). 如果在计划的更新和应用程序安装完成时没有用户登录,则 Windows 将在需要时自动重启。If no user is logged on when the scheduled installation of updates and applications is completed, Windows is restarted automatically when required. 如果设置为“否”,默认情况下,Windows 重启之前的时间设置为 5 分钟。When set to No, by default, the time before Windows restarts is set to 5 minutes.

建议的值:Recommended value: Yes
提示用户在执行 Intune 客户端代理强制更新过程中重启 WindowsPrompt user to restart Windows during Intune client agent mandatory updates 指定在 Intune 客户端强制更新要求重启 Windows 时是否提示登录的用户重启 Windows。Specifies whether the logged on users is prompted to restart Windows when an Intune client mandatory update requires Windows to restart.

建议的值:Recommended value: Yes
Microsoft Intune 客户端代理必备更新安装计划Microsoft Intune client agent mandatory updates installation schedule 计划何时安装客户端更新。Schedules when the installation of client updates occur.

建议值:未配置Recommended value: not configured
在安装计划的更新和应用程序后重启 Windows 的两次提示之间的延迟时间(分钟)Delay between prompts to restart Windows after installation of scheduled updates and applications (minutes) 指定在以下情况下提示用户重启 Windows 的频率(1-1440 分钟):安装了需要重启 Windows 的计划更新或应用程序,并且用户延迟了重启。Specifies how frequently (from 1-1440 minutes) the user is prompted to restart Windows when a scheduled update or application that requires restarting Windows is installed, and the user delays the restart.

建议的值:30 分钟Recommended value: 30 minutes

更新 Microsoft 开发的软件Update software made by Microsoft

在更新 Microsoft 软件时,你需要完成的工作很少。Updating Microsoft software requires very little work from you. 但是,在开始之前,你应配置下列两项:However, before you start, there are two things you should configure:

  • 产品类别和更新分类 – 定义要提供给计算机的更新的类别和分类。Product categories and update classifications – Defines the categories and classifications of the updates you want to make available to computers. 例如,你可能会决定只安装 Microsoft Office 的关键更新。For example, you might decide that you only want critical updates for Microsoft Office to be installed.

  • 自动批准规则 – 这些规则会自动批准指定类型的更新,并减少你的管理开销。Automatic approval rules – These rules automatically approve specified types of update and reduce your administrative overhead. 例如,你可能希望自动批准所有关键软件更新。For example, you might want to automatically approve all critical software updates.

使用下列两个过程来帮助你准备好使用软件更新:Use the following two procedures to help you get ready to use software updates:

配置要提供给被管理的计算机的产品类别和更新分类Configure the product categories and update classifications you want to make available to managed computers

  1. Microsoft Intune 管理控制台上,选择“管理”>“更新”。In the Microsoft Intune administration console, choose Admin > Updates.

  2. 在“服务设置: 更新”页上的“产品类别”列表中,选择要提供给计算机的更新类别。On the Service Settings: Updates page, in the Product Category list, select the update categories that you want to make available to computers. 请注意,默认情况下会选择最常用的更新。Note that the most common updates are selected by default.


    为确保计算机接收到管理员批准的更新,请勿将 Windows Server Update Services (WSUS) 组策略设置“指定 Intranet Microsoft 更新服务位置”应用到已注册 Intune 的计算机。To ensure that computers receive the updates that have been approved by the admin, the Windows Server Update Services (WSUS) Group Policy setting, Specify Intranet Microsoft update service location must not be applied to computers that have been enrolled with Intune.

  3. 在“更新分类”列表中,选择要提供给被管理的计算机的更新分类。In the Update Classification list, select the classes of update that you want to make available to managed computers. 同样,默认情况下会选择最常用的选项。Again, the most common options are selected by default.

  4. 单击“保存”以存储你的选择。Choose Save to store your selections.

配置软件更新的自动批准规则To configure automatic approval rules for software updates

  1. Microsoft Intune 管理控制台上,选择“管理”>“更新”。In the Microsoft Intune administration console, choose Admin > Updates.

  2. 在“服务器设置:更新”页的“自动批准规则”部分,单击“新建”。In the Automatic Approval Rules section of the Server Settings: Updates page, choose New.

  3. 在创建自动批准规则向导的“常规”页中,指定规则的名称和可选描述。On the General page of the Create Automatic Approval Rule Wizard, specify a name and optional description for the rule.

  4. 在“产品类别”页上,选择要为其自动批准更新的任何产品。On the Product Categories page, select any products for which you want to have updates approved automatically.

  5. 在“更新分类”页上,指定要自动批准的更新分类。On the Update Classifications page, specify the update classifications that you want to have approved automatically.

  6. 在“部署”页上,执行以下操作:On the Deployment page, do the following:

    • 选择要向其部署新规则的计算机组,然后单击“添加”。Select the computer groups to which you want to deploy the new rule, and then choose Add.

    • 要指定更新的安装截止时间,请选中“对这些更新强制采用安装截止时间”复选框,然后在“安装截止时间”列表中选择安装截止时间。To specify an installation deadline for the updates, select the Enforce an installation deadline for these updates check box, and then on the Installation deadline list, select the installation deadline.


      如果指定安装截止时间,则在截止时间间隔过后,被管理的计算机可能需要一次或多次重启。If you specify an installation deadline, the managed computer might require one or more restarts after the deadline interval has passed.

    • 完成后,请选择“下一步”。When you are finished, Choose Next.

  7. 在“摘要”页上,查看新规则的设置,然后单击“完成”。On the Summary page, review the settings for the new rule, and then choose Finish.

新规则会显示在“服务设置: 更新”页的“自动批准规则”部分中。The new rule is shown in the Automatic Approval Rules section of the Service Settings: Updates page.


创建自动批准规则后,它只会批准未来的更新,而不会自动批准之前已存在于 Intune 中的现有更新。When you create an automatic approval rule, it only approves future updates, and does not automatically approve previously existing updates that already exist in Intune. 若要批准这些更新,你需要运行自动批准规则。To approve these updates you need to run the automatic approval rule.

编辑、运行或删除自动批准的更新规则To edit, run, or delete an automatically approved update rule

  1. Microsoft Intune 管理控制台上,选择“管理”>“更新”。In the Microsoft Intune administration console, choose Admin > Updates.

  2. 在“自动批准规则”部分选择一条规则,然后执行下列操作之一:In the Automatic Approval Rules section, select a rule, and then do one of the following:

    • 若要编辑规则,请单击“编辑”,然后在“更新自动批准规则向导”中更改该规则的参数。To edit the rule, choose Edit, and then change the rule’s parameters in the Update Auto Approval Rule Wizard.

    • 若要运行规则,请单击“运行所选项”。To run the rule, choose Run Selected.

    • 若要删除规则,请单击“删除”。To delete the rule, choose Delete.


      删除规则对被删除的规则以前批准的更新不会产生影响。Deleting a rule does not affect previous updates that were approved by the deleted rule.

更新非 Microsoft 开发的软件Update software not made by Microsoft

你可以部署不是由 Microsoft 开发的软件更新。You can deploy updates for software that is not made by Microsoft. 可通过使用“上载更新”向导将更新上载到云存储空间中来达到此目的,之后你可以就像批准或拒绝 Microsoft 软件一样批准或拒绝该更新。You do this by using the Upload Update wizard to get the update into your Cloud Storage space, after which you can approve or decline the update just like with Microsoft software.

上载和配置第三方更新To upload and configure a third-party update

  1. Microsoft Intune 管理控制台上,选择“更新”>“概述”>“上传”。In the Microsoft Intune administration console, choose Updates > Overview > Upload.

  2. 在“更新文件”页上,单击“浏览”以选择安装更新包所需的安装程序文件。On the Update files page, choose Browse to select the setup files that are required to install the update package. 文件可以是 Windows Installer (.msi) 文件、Windows Installer 修补程序 (.msp) 文件或 .exe 程序文件。The file can be a Windows Installer (.msi) file, a Windows Installer patch (.msp) file, or a .exe program file. 你也可以包括与安装程序文件处于同一文件夹中的任何其他文件或文件夹。You can also include any additional files or folders that are in the same folder as the setup file.

    此时会显示要上载的所选文件的总大小。The total size of the selected files to upload is displayed. 请注意,此大小不包括未压缩或扩展的安装文件的大小。Note that this size does not include the uncompressed or expanded sizes of installation files.

  3. 指定安装程序文件后,“更新描述”页会显示 Intune 从软件安装程序文件中提取到的软件信息名称、描述和分类。After you specify the setup files, the Update description page displays the name, description, and classification for software information that Intune extracted from the software setup files. 你可以选择分类以标记要部署的更新的类型(更新、关键更新、安全更新、更新汇总或 Service Pack)。You can select a classification to label the type of update you are deploying (Updates, Critical Updates, Security Updates, Update Rollups or Service Packs). 完成后单击“下一步”。Choose Next when you are done.

  4. 在向导的“要求”页上,选择体系结构(32 位和/或 64 位),以及此更新将适用的托管计算机的操作系统。On the Requirements page of the wizard, choose the architecture (32-bit, 64-bit, or both), and the operating systems of the managed computers to which this update will be applicable.

  5. 在“检测规则”页上,指定 Intune 如何确定托管计算机上是否已存在更新。On the Detection rules page, specify how Intune determines whether the update already exists on managed computers. 如果使用默认选项“使用默认检测规则”,则 Intune 将始终在每台目标计算机上安装一次更新包。If you use the default option, Use the default detection rules, Intune always installs the update package on each targeted computer once.


    如果指定的更新安装程序文件是 Windows Installer 或 .msp 文件,则不会出现向导的“检测规则”页。If the update setup file that you specified is a Windows Installer or .msp file, the Detection rules page of the wizard does not appear. 这是因为 Windows Installer 和 .msp 文件包含它们自己的用于检测以前更新安装的说明。This is because Windows Installer and .msp files contain their own instructions for detecting previous update installations.

    选择下列一条或多条规则以确定被管理的计算机上是否已安装了更新:Select one or more of the following rules to determine whether the update is already installed on managed computers:

    • 文件存在File exists

    • MSI 产品代码存在MSI product code exists

    • 注册表项存在Registry key exists

  6. 提供配置检测规则所需的任何进一步信息,例如文件路径和名称、Windows Installer 产品代码或注册表项,然后单击“下一步”。Provide any further information that is required to configure the detection rule such as a file path and name, Windows Installer product code, or a registry key, and then choose Next.

  7. 在向导的“先决条件”页上,你指定必须安装然后才能安装此更新的任何软件。On the Prerequisites page of the wizard, you specify any software that must already be installed before this update can be installed. 可以指定“无”,选择已添加并由 Intune 托管的软件包,也可以指定以下规则之一来描述软件:You can specify None, select a software package that has already been added to, and is managed by Intune, or you can specify one of the following rules to describe the software:

    • 文件存在File exists

    • MSI 产品代码存在MSI product code exists

    • 注册表项存在Registry key exists

  8. 提供配置检测规则所需的任何进一步信息,如文件路径和名称、Windows Installer 产品代码或注册表项,然后单击“下一步”。Provide any further information that is required to configure the detection rule like a file path and name, Windows Installer product code, or a registry key, and then choose Next.

  9. 在向导的“命令行参数”页上,你可以向安装命令行中添加任何所需的安装属性,以修改安装程序文件的行为。On the Command line arguments page of the wizard, you can add any required installation properties to the installation command line to modify the behavior of the setup file. 例如,某些软件支持可启用无提示安装的 /q 属性。For example, some software supports the /q property to enable silent installation. 请参阅软件包的文档以了解任何支持的命令行参数。Refer to the documentation for your software package to learn about any supported command line arguments. 指定所需的任何命令行参数,然后单击“下一步”。Specify any command line arguments you need and then choose Next.


    如果更新不支持无提示安装,则无法使用 Intune 安装更新。If the update does not support silent installation, you cannot install the update using Intune

  10. 在向导的“返回代码”页上,你可以指定如何解释更新安装中的返回代码。On the Return codes page of the wizard, you can specify how return codes from the update installation are interpreted. 默认情况下,Intune 使用行业标准返回代码来报告失败的或成功的更新包安装。By default, Intune uses industry-standard return codes to report a failed or successful installation of an update package. 提供的返回代码是:The supplied return codes are:

返回代码Return code 详细信息Details
00 成功Success
30103010 成功并重新启动Success with restart
  1. 任何未列出的返回代码被认为是失败。Any return code that is not listed is considered a failure. 某些更新对返回代码使用非标准的解释。Some updates use nonstandard interpretations for return codes. 在此情况下,你可以指定自己的返回代码解释。In this case, you can specify your own return code interpretations.

  2. 指定或编辑所需的返回代码,然后单击“下一步”。Specify or edit the required return codes, and then choose Next.

  3. 在向导的“摘要”页上,查看将采取的操作,然后单击“上载”以完成向导。On the Summary page of the wizard, review the actions that will be taken, and then choose Upload to complete the wizard.

上载的更新存储在你的 Intune 云存储中。The uploaded update is stored in your Intune cloud storage. 如果没有足够的可用空间来上载更新包,则将在上载过程中通知你。If you have insufficient free space to upload the update package, you are notified of this during the upload process. 直到更新上载开始后,Intune 才能确定是否具有充足的可用空间,因为压缩的安装程序和安装文件在解压缩后需要更多的空间。Intune cannot determine sufficient free space until after the update upload has started, because compressed setup and installation files require more space when they are uncompressed.

将内容上传到 Intune 后,第三方更新将显示在“所有更新”窗格中的“更新”工作区中。After it is uploaded into Intune, a third-party update is displayed in the Updates workspace in the All Updates pane. 你可以随后批准和部署更新。You can then approve and deploy the update. 有关详细信息,请参阅下面的“批准和拒绝更新”部分。For more information, see the following "Approve and decline updates" section.

批准和拒绝更新Approve and decline updates

当更新准备就绪可安装时,“更新”工作区的“更新概述”页上的“更新状态”下将显示一条消息。When updates are ready to install, a message is shown on the Updates Overview page of the Updates workspace, under Update Status. 单击此消息打开“所有更新”页,查看哪些更新已准备就绪,可供批准。Choose this message to open the All Updates page to see which updates are ready for approval.

你可以使用“筛选器”列表以便更轻松地查找更新。You can use the Filters list to make it easier to find updates. 例如,你可以仅显示失败的更新或被取代的更新。For example, you can display only updates that failed, or updates that are superseded.

从列表中选择更新时,你将可使用进一步的命令按下表中所示的方式管理更新:When you select an update from the list, further commands are available that let you manage updates as shown in the following table:

任务Task 详细信息Details
查看属性View Properties 显示有关更新的详细信息,包括该更新适用于的计算机的数量。Displays detailed information about the update including the number of computers to which it is applicable.
编辑Edit 仅适用于非 Microsoft 更新。For non-Microsoft updates only. 允许你编辑更新的属性。Allows you to edit the properties of the update.
批准Approve 批准所选更新,并允许你配置将更新部署到哪些组。Approves the selected update and allows you to configure which groups is will be deployed to. 有关详细信息,请参阅此主题中的批准更新过程。For more information, see the procedure To approve updates in this topic.
拒绝Decline 为更新删除任何以前的批准,并在默认视图中隐藏更新。Removes any previous approvals for the update and hides the update from the default views. 此外,将删除更新的任何报表数据。Additionally, any report data for the update will be removed.

如果你稍后需要查找已拒绝的更新,请在“所有更新”页上将筛选器设置为“已拒绝”。If you later want to locate a declined update, set the filter on the All Updates page to Declined. 你可以随后根据需要批准此更新。You can then approve this update as required.

如果更新由于在 Microsoft Update 中过期而被拒绝,则无法在 Intune 管理控制台中批准该更新。If an update was declined because the update was expired in Microsoft Update, that update cannot be approved in the Intune administration console.

如果你删除部署到计算机的更新策略,则这些更新策略设置的值会重置为计算机上安装的操作系统的默认状态。If you delete an updates policy that is deployed to computers, the values of those updates policy settings are reset to the default state for the operating system that is installed on the computers.
删除Delete 仅适用于非 Microsoft 更新。For non-Microsoft updates only. 删除所选更新。Deletes the selected update.
上传Upload 启动“上传更新”向导,该向导允许你上传要部署的非 Microsoft 更新。Starts the Upload Update wizard that allows you to upload non-Microsoft updates that you want to deploy.

批准更新To approve updates

  1. Microsoft Intune 管理控制台上,选择“更新”>“概述”>“要批准的新更新”。In the Microsoft Intune administration console, choose Updates > Overview > New updates to approve.

    在“更新”工作区中,选择“概述”>“要批准的新更新”。In the Updates workspace, choose Overview > New updates to approve.


    “要批准的新更新” 链接在仅当有至少一个需要批准更新的托管计算机时才会显示在“更新状态”区域中。The New updates to approve link appears in the Updates Status area only when there is at least one managed computer that needs an update to be approved.

  2. 选择更新,在页面底部查看更新属性,以确认要批准此更新,然后单击“批准”。Select an update, review the update properties at the bottom of the page to ensure that you want to approve the update, and then choose Approve. 可通过在选择每一项时按住“CTRL”键来选择多个更新。You can select multiple updates by holding down the CTRL key as you select each item.

  3. 在“选择组”页上,选择要为其部署更新的组,然后单击“添加”。On the Select Groups page, select a group that you want to deploy the updates to, and then choose Add. 完成指定组后,单击“下一步”。When you have finished specifying groups, choose Next.

  4. 在“部署操作”页上,为列表中的每个组执行下列操作:On the Deployment Action page, do the following for each group in the list:

    • 在“批准”列表中,选择下列选项之一:On the Approval list, select one of the following:

      • “必需安装”- 在指定组中的计算机上安装此更新。Required Install - Installs the update on computers in the specified group.

      • “不安装”- 仅报告适用性而不安装更新。Do Not Install - Reports applicability only and does not install the update.

      • 可用安装 – 用户可通过公司门户按需安装应用程序。Available Install – The user can install the application on demand from the Company Portal.

      • “卸载”- 从目标组内的计算机中删除更新。Uninstall - Removes updates from computers in the targeted group.


        即使 Intune 未安装该更新,也会将其删除。The update is removed even if it was not installed by Intune.

    • 在“截止时间”列表中,选择下列选项之一:On the Deadline list, select one of the following:

      • “无”- 表示没有对更新安装强制实施截止时间,用户可以继续拒绝更新。None - Indicates that no deadline is enforced for the installation of the update and users may decline the update continually.

      • “尽快”- 下一个时机到来时在目标计算机上安装更新。As soon as possible - Installs the update at the next opportunity on targeted computers.

      • “自定义”- 指定安装已审批更新的日期和时间。Custom - Specifies the date and time that approved updates are installed.

      • 一周两周一个月 – 在指定的时间段内安装更新。One week, Two weeks, One month – Installs the update within the specified time period.

  5. 单击“完成”以保存设置,或者单击“取消”以放弃设置并返回到更新列表。Choose Finish to save the settings, or Cancel to discard the settings and return to the updates list.


    除非显式为子组配置了“不安装”、“所需的安装”或“卸载”操作,否则父组的所有子项将继承为该父组配置的操作。Unless the action Do Not Install, Required Install, or Uninstall was explicitly configured for a child group, an action configured for a parent group is inherited by all its children.

  6. 你可以检查“所有更新”页底部的详细信息窗格来了解有关更新的提醒消息。You can check the details pane at the bottom of the All Updates page for reminder messages about the update.

另请参阅See also

保护 Windows 电脑的策略Policies to protect Windows PCs