部署软件更新Deploy software updates

适用范围: Configuration Manager (Current Branch)Applies to: Configuration Manager (current branch)

软件更新部署阶段是指部署软件更新的过程。The software update deployment phase is the process of deploying software updates. 无论如何部署软件更新,该站点:No matter how you deploy software updates, the site:

  • 将更新添加到软件更新组Adds the updates to a software update group
  • 将更新内容分发到分发点Distributes the update content to distribution points
  • 将更新组部署到客户端Deploys the update group to clients

创建部署后,站点向目标客户端发送关联的软件更新策略。After you create the deployment, the site sends an associated software update policy to targeted clients. 客户端将软件更新内容文件从内容源下载到其本地缓存。The clients download the software update content files from a content source to their local cache. Internet 上的客户端始终从 Microsoft 更新云服务中下载内容。Clients on the internet always download content from the Microsoft Update cloud service. 软件更新随后可供客户端安装。The software updates are then available for installation by the client.

提示

如果未提供分发点,则 Intranet 上的客户端也可以从 Microsoft 更新下载软件更新。If a distribution point isn't available, clients on the intranet can also download software updates from Microsoft Update.

备注

与其他部署类型不同,软件更新全部下载到客户端缓存。Unlike other deployment types, software updates are all downloaded to the client cache. 这与客户端上的最大缓存大小设置无关。This is regardless of the maximum cache size setting on the client. 有关客户端缓存设置的详细信息,请参阅为 Configuration Manager 客户端配置客户端缓存For more information about the client cache setting, see Configure the client cache for Configuration Manager clients.

如果配置必需的软件更新部署,则软件更新将于计划的截止时间自动安装。If you configure a required software update deployment, the software updates are automatically installed at the scheduled deadline. 或者,客户端计算机上的用户可以在截止时间前计划或启动软件更新安装。Alternatively, the user on the client computer can schedule or initiate the software update installation prior to the deadline. 在尝试的安装后,客户端计算机会将状态消息发回站点服务器以报告软件更新安装是否成功。After the attempted installation, client computers send state messages back to the site server to report whether the software update installation was successful. 有关软件更新部署的详细信息,请参阅 Software update deployment workflowsFor more information about software update deployments, see Software update deployment workflows.

有三种主要的软件更新部署方案:There are three main scenarios for deploying software updates:

通常,首先手动部署软件更新以便为客户端创建基线,然后通过使用自动或分阶段部署来管理客户端上的软件更新。Typically, you start by manually deploying software updates to create a baseline for your clients, and then you manage software updates on clients by using an automatic or phased deployment.

备注

不能将自动部署规则与分阶段部署配合使用。You can't use an automatic deployment rule with a phased deployment.

手动部署软件更新Manually deploy software updates

在 Configuration Manager 控制台中选择软件更新并手动启动部署过程。Select software updates in the Configuration Manager console and manually start the deployment process. 通常使用此部署方法:You typically use this method of deployment to:

  • 在创建管理每月部署的自动部署规则之前,通过所需软件更新使客户端保持最新状态Get clients up-to-date with required software updates before you create automatic deployment rules that manage monthly deployments

  • 部署带外软件更新Deploy out-of-band software updates

以下列表提供手动部署软件更新的一般工作流:The following list provides the general workflow for manual deployment of software updates:

  1. 使用特定要求的软件更新的筛选。Filter for software updates that use specific requirements. 例如,提供条件,以检索 50 多个客户端上所需的所有安全或严重软件更新。For example, provide criteria that retrieves all security or critical software updates that are required on more than 50 clients.

  2. 创建包含软件更新的软件更新组。Create a software update group that contains the software updates.

  3. 下载软件更新组中的软件更新的内容。Download the content for the software updates in the software update group.

  4. 手动部署软件更新组。Manually deploy the software update group.

有关详细信息和详细步骤,请参阅手动部署软件更新For more information and detailed steps, see Manually deploy software updates.

备注

  • 自 2020 年 4 月 21 日起,Office 365 专业增强版已重命名为 Microsoft 365 企业应用版 。Starting on April 21, 2020, Office 365 ProPlus is being renamed to Microsoft 365 Apps for enterprise. 有关详细信息,请参阅 Office 365 专业增强版的名称变更For more information, see Name change for Office 365 ProPlus. 在控制台更新期间,你可能仍会看到 Configuration Manager 控制台和支持文档中引用的是旧名称。You may still see references to the old name in the Configuration Manager console and supporting documentation while the console is being updated.
  • 手动部署 Microsoft 365 Apps 客户端更新时,请在“软件库”工作区的“Office 365 客户端管理”下的“Office 365 更新”节点中查找它们。When manually deploying Microsoft 365 Apps client updates, find them in the Office 365 Updates node under Office 365 Client Management of the Software Library workspace.

自动部署软件更新Automatically deploy software updates

使用自动部署规则 (ADR) 配置自动软件更新部署。Configure automatic software updates deployment by using an automatic deployment rule (ADR). 这是部署每月软件更新(通常称为“周二补丁日”)的常见方法,并且用于管理定义更新。This method of deployment is common for monthly software updates (typically known as "Patch Tuesday") and for managing definition updates. 定义 ADR 的条件以自动执行部署过程。You define the criteria for an ADR to automate the deployment process. 以下列表提供自动部署软件更新的一般工作流:The following list provides the general workflow to automatically deploy software updates:

  1. 创建 ADR 以指定部署设置。Create an ADR that specifies deployment settings.

  2. 该站点将软件更新添加到软件更新组。The site adds the software updates to a software update group.

  3. 该站点将软件更新组部署到目标集合中的客户端。The site deploys the software update group to the clients in the target collection.

首先,确定自动软件更新部署策略。First, determine your automatic software update deployment strategy. 例如,创建 ADR 并以测试客户端集合为最初目标。For example, create the ADR to initially target a collection of test clients. 验证测试组已成功安装软件更新后,向规则添加新部署。After you verify the test group successfully installed the software updates, add a new deployment to the rule. 还可以将现有部署中的目标集合更改为包含更多客户端的集合。You could also change the targeted collection in the existing deployment to one that includes a larger set of clients. 在决定使用的策略时,请考虑以下行为:Consider the following behaviors when deciding upon the strategy to use:

  • 可以修改 ADR 所创建的软件更新对象的属性。You're able to modify the properties of the software update objects that the ADR creates.

  • 将软件更新添加到目标集合时,ADR 可自动向客户端部署软件更新。The ADR automatically deploys software updates to clients when you add them to the target collection.

  • 当用户或 ADR 将新的软件更新添加到软件更新组时,该站点可自动将它们部署到目标集合中的客户端。When you or the ADR adds new software updates to the software update group, the site automatically deploys them to the clients in the target collection.

  • 针对 ADR 随时启用或禁用部署。Enable or disable deployments at any time for the ADR.

创建 ADR 后,将其他部署添加到规则。After you create an ADR, add additional deployments to the rule. 此操作有助于管理将不同更新部署到不同集合的复杂性。This action helps you manage the complexity of deploying different updates to different collections. 每个新部署均具有完整的功能和部署监视体验。Each new deployment has the full range of functionality and deployment monitoring experience.

你添加的每个新部署:Each new deployment that you add:

  • 使用的更新组和包与在 ADR 首次运行时创建的更新组和包相同Uses the same update group and package, which the ADR creates when it first runs
  • 可以针对不同的集合Can target a different collection
  • 支持唯一部署属性,包括:Supports unique deployment properties including:
    • 激活时间Activation time
    • 截止时间Deadline
    • 用户体验User experience
    • 针对每个部署的单独警报Separate alerts for each deployment

有关详细信息和详细步骤,请参阅自动部署软件更新For more information and detailed steps, see Automatically deploy software updates

分阶段部署软件更新Deploy software updates in phases

从版本 1810 开始,为软件更新创建分阶段部署。Starting in version 1810, create phased deployments for software updates. 通过分阶段部署,可以根据可自定义条件和组进行协调安排,有序推出软件。Phased deployments allow you to orchestrate a coordinated, sequenced rollout of software based on customizable criteria and groups.

有关详细信息,请参阅创建分阶段部署For more information, see Create phased deployments.