配置要同步的分类和产品Configure classifications and products to synchronize

适用范围:Configuration Manager (Current Branch)Applies to: Configuration Manager (current branch)

在 Configuration Manager 中,将根据你在软件更新点组件属性中指定的设置在同步过程期间检索软件更新元数据。Software updates metadata is retrieved during the synchronization process in Configuration Manager based on the settings that you specify in the Software Update Point component properties. 首次同步软件更新后,或者当发布新产品和分类时,必须转到这些属性以选择新项。After you synchronize software updates for the first time, or when new products and classifications are released, you must go to the properties to select the new items. 使用下列过程来配置要同步的分类和产品。Use the following procedure to configure classifications and products to synchronize.

备注

请仅在顶层站点上使用本部分中的过程。Use the procedure from this section only on the top-level site.

配置要同步的分类和产品To configure classifications and products to synchronize

  1. Configuration Manager 控制台中,导航到“管理” > “站点配置” > “站点”。In the Configuration Manager console, navigate to Administration > Site Configuration > Sites.

  2. 选择管理中心站点或独立主站点。Select the central administration site or the stand-alone primary site.

  3. 在“主页” 选项卡上的“设置” 组中,单击“配置站点组件” ,再单击“软件更新点” 。On the Home tab, in the Settings group, click Configure Site Components, and then click Software Update Point.

  4. 在“分类” 选项卡上,指定要为其同步软件更新的软件更新分类。On the Classifications tab, specify the software update classifications for which you want to synchronize software updates.

    每个软件更新都是利用更新分类定义的,此分类能帮助组织不同的更新类型。Every software update is defined with an update classification that helps to organize the different types of updates. 同步过程中,将对指定的分类的软件更新元数据进行同步。During the synchronization process, the software updates metadata for the specified classifications are synchronized. Configuration Manager 使你可将软件更新与下列更新分类进行同步:Configuration Manager provides the ability to synchronize software updates with the following update classifications:

    • 关键更新:指定为特定问题广泛发布的修复,旨在解决与安全无关的关键 bug。Critical Updates: Specifies a widely released fix for a specific problem that addresses a critical, non-security-related bug.
    • 定义更新:指定广泛发布且频率较高的软件更新,其中包含对产品的定义数据库的新增内容。Definition Updates: Specifies a widely released and frequent software update that contains additions to a product's definition database.
    • 功能包:指定新的产品功能,该功能首次在产品版本以外分发,而且通常包含在下一个完整的产品版本中。Feature Packs: Specifies new product functionality that is first distributed outside of a product release and that's typically included in the next full product release.
    • 安全更新:指定一个广泛发布的修复程序,旨在修复特定于产品的安全相关漏洞。Security Updates: Specifies a widely released fix for a product-specific, security-related vulnerability.
    • 服务包:指定一个经过测试、逐渐累积的集合,其中包含所有的修补程序、安全更新、关键更新和应用于某个产品的更新。Service Packs: Specifies a tested, cumulative set of all hotfixes, security updates, critical updates, and updates that are applied to a product. 此外,服务包可能还包含旨在解决产品发布以来内部发现的问题的其他修补程序。Additionally, service packs may contain additional fixes for problems that are found internally since the release of the product.
    • 工具:指定可帮助完成一项或多项任务的实用程序或功能。Tools: Specifies a utility or feature that helps to complete one or more tasks.
    • 更新汇总:指定为便于部署而一起打包的修补程序、安全更新、关键更新和其他更新的经过测试的累积集合。Update Rollups: Specifies a tested, cumulative set of hotfixes, security updates, critical updates, and updates that are packaged together for easy deployment. 更新汇总通常解决特定领域的问题,例如安全性或产品组件问题。An update rollup generally addresses a specific area, such as a security or product component.
    • 更新:指定广泛发布的针对特定问题的修补程序。Updates: Specifies a widely released fix for a specific problem. 更新解决了非关键且与安全无关的 bug。An update addresses a non-critical, non-security-related bug.
    • 升级:为 Windows 10 特性和功能指定升级。Upgrade: Specifies an upgrade for Windows 10 features and functionality. 这些更新也称为 Windows 10 操作系统的功能更新。These updates are also known as feature updates for Windows 10 operating systems. 软件更新点和站点必须运行最低具有修补程序 3095113 的 WSUS 6.2 来获取“升级”分类。Your software update points and sites must run a minimum of WSUS 6.2 with the hotfix 3095113 to get the Upgrade classification. 有关安装此更新以及其他“升级”更新的详细信息,请参阅软件更新的先决条件For more information about installing this update and other updates for Upgrades, see Prerequisites for software updates.

    备注

    可以选中“包括 Microsoft Surface 驱动程序和固件更新”复选框来同步 Microsoft Surface 驱动程序。You can select the Include Microsoft Surface drivers and firmware updates checkbox to synchronize Microsoft Surface drivers. 所有软件更新点都必须运行 Windows Server 2016 或更高版本,才能成功同步 Surface 驱动程序。All software update points must run Windows Server 2016 or later to successfully synchronize Surface drivers. 如果启用 Surface 驱动程序后,在运行 Windows Server 2012 的计算机上启用软件更新点,则驱动程序更新的扫描结果不准确。If you enable a software update point on a computer running Windows Server 2012 after you enable Surface drivers, the scan results for the driver updates are not accurate. 这会导致在 Configuration Manager 控制台和 Configuration Manager 报表中显示不正确的符合性数据。This results in incorrect compliance data displayed in the Configuration Manager console and in Configuration Manager reports. 有关详细信息,请参阅使用 Configuration Manager 管理 Surface 驱动程序For more information, see Manage Surface drivers with Configuration Manager.

  5. 在“产品” 选项卡上,指定要为其同步软件更新的产品,然后单击“关闭” 。On the Products tab, specify the products for which you want to synchronize software updates, and then click Close.

    • Configuration Manager 存储产品和产品系列的列表,你在初次安装软件更新点时可以从此列表中进行选择。Configuration Manager stores a list of products and product families from which you can choose when you first install the software update point. 如果某些产品和产品系列是在发布 Configuration Manager 之后发布的,那么,在完成软件更新同步(这将更新可供你从中进行选择的可用产品和产品系列的列表)之前,可能无法选择它们。Products and product families that are released after Configuration Manager is released might not be available to select until you complete software updates synchronization, which updates the list of available products and product families from which you can choose.

    • 每个软件更新的元数据都定义了更新适用于的产品。The metadata for each software update defines the products for which the update is applicable. 产品是指特定版本的操作系统或应用程序,例如 Microsoft Windows Server 2012。A product is a specific edition of an operating system or application, such as Windows Server 2012. 产品家族是指从中派生单个产品的基本操作系统或应用程序。A product family is the base operating system or application from which the individual products are derived. 产品系列的示例是 Windows,而 Windows Server 2012 是其成员之一。An example of a product family is Windows, of which Windows Server 2012 is a member. 可以指定产品系列或产品系列中的各个产品。You can specify a product family or individual products within a product family. 选择的产品越多,同步软件更新所需的时间就越长。The more products that you select, the longer it takes to synchronize software updates.

    • 当软件更新适用于多个产品,且至少选中其中一个产品进行同步时,所有产品都将在 Configuration Manager 控制台中显示,即使未选中某些产品也是如此。When software updates are applicable to multiple products, and at least one of the products was selected for synchronization, all of the products appear in the Configuration Manager console even if some products weren't selected. 例如,Windows Server 2012 是你选择的唯一操作系统,而且软件更新适用于 Windows 8 和 Windows Server 2012,那么,这两个产品都会显示在 Configuration Manager 控制台中。For example, if Windows Server 2012 is the only operating system that you selected, and if a software update applies to Windows 8 and Windows Server 2012, both products are displayed in the Configuration Manager console.

    备注

    Windows 10 版本 1903 以及更高版本作为独立产品添加到 Microsoft 更新,而不像早期版本那样属于 Windows 10 产品 。Windows 10, version 1903 and later was added to Microsoft Update as its own product rather than being part of the Windows 10 product like earlier versions. 这项更改需要你执行许多手动步骤,才可确保客户端显示这些更新。This change caused you to do a number of manual steps to ensure that your clients see these updates. 我们已采取措施减少了需要手动对 Configuration Manager 版本 1906 中的新产品执行操作的步骤数量。We've helped reduce the number of manual steps you have to take for the new product in Configuration Manager version 1906.

    更新至 Configuration Manager 1906 版,并选择了 Windows 10 产品进行同步后,系统将自动执行以下操作:When you update to Configuration Manager version 1906 and have the Windows 10 product selected for synchronization, the following actions occur automatically:

    • 已添加 Windows 10 1903 版以及更高版本产品用于进行同步操作。The Windows 10, version 1903 and later product is added for synchronization.
    • 包含 Windows 10 产品的自动部署规则将更新为包含 Windows 10 1903 版和更高版本 。Automatic Deployment Rules containing the Windows 10 product will be updated to include Windows 10, version 1903 and later.
    • 维护服务计划将更新为包含 Windows 10 1903 版和更高版本产品。Servicing plans are updated to include the Windows 10, version 1903 and later product.

配置 Windows 10 各版本的产品Configuring products for versions of Windows 10

Windows 10 版本 1909Windows 10, version 1909

Windows 10 版本 1909 与 Windows 10 版本 1903 使用的是同一种常用核心操作系统。Windows 10, version 1909 shares a common core operating system with Windows 10, version 1903. 这两个版本都具有相同的累积更新。Both of these versions are serviced with the same cumulative updates. 有关 Windows 10 版本 1909 的详细信息,请参阅 Windows 10 版本 1909 分发选项博客文章。For more information about Windows 10, version 1909, see the Windows 10, version 1909 delivery options blog post.

为确保 Windows 10 版本 1909 和 Windows 10 版本 1903 客户端都是从 Configuration Manager 安装更新,请执行以下操作:To make sure both your Windows 10 version 1909 and Windows 10, version 1903 clients install updates from Configuration Manager:

  • 为 Windows 10 的 1909 和 1903 版本批准更新。Approve updates for both the 1909 and 1903 versions of Windows 10.
    • 对于每个 OS 版本,更新具有不同的名称和适用性规则。The updates have different titles and applicability rules for each OS version.
    • 按 OS 的版本和体系结构批准每个更新可维持管理员的正常批准流程。Approving each update per version and architecture of the OS maintains the normal approval process for admins.
  • Windows 10 的 1909 和 1903 版本的累积更新安装文件相同。The cumulative update installation files are the same for both the 1909 and 1903 versions of Windows 10.
    • Configuration Manager 将只会下载一次更新源文件。Configuration Manager will only download the update source files once.

Windows 10 版本 1909 的功能更新Feature Updates for Windows 10, version 1909

批准 Windows 10 版本 1909 的功能更新时,会看到多个不同选项:When you approve feature updates for Windows 10, version 1909, there are a few different options you'll see:

  • Windows 10 版本 1903 客户端可使用 2019 年 11 月 12 日发布的启用包Windows 10, version 1903 clients are offered an Enablement Package, released November 12, 2019.

    • 启用包是可快速安装的小型文件,用于激活 Windows 10 版本 1909 功能和重启设备。The enablement package is a small, quick to install file that activates the Windows 10, version 1909 features and restarts the device.

    • 启用包的先决条件包括以下内容:Prerequisites for the enablement package include:

      • 2019 年 10 月 8 日发布的最小累积更新 KB4517389A minimum cumulative update of KB4517389, released October 8, 2019.
      • 2019 年 9 月 24 日发布的最小服务堆栈更新 KB4520390A minimum servicing stack update of KB4520390, released September 24, 2019.
    • 此更新与其他任何功能更新一样,无法从 https:\\catalog.update.microsoft.com 导入。This update, like any other Feature Update, isn't available for import from https:\\catalog.update.microsoft.com.

    • 如果选中“Windows 10 版本 1903 和更高版本”产品和“升级”分类进行同步,更新将自动与 WSUS 同步 。The update will automatically synchronize with WSUS if you have the Windows 10, version 1903 and later product and Upgrades classification selected for synchronization.

    • 在 Configuration Manager 控制台中,转到“软件库”工作区,展开“Windows 10 维护服务”,然后选择“全部 Windows 10 更新”节点 。In the Configuration Manager console, go to the Software Library workspace, expand Windows 10 Servicing, and select the All Windows 10 Updates node. 搜索术语“enablement”或“4517245”。Search for the terms "enablement" or "4517245".

      提示

      由于这些是功能更新,因此它们不在“全部软件更新”节点中。Since these are feature updates, they aren't in the All Software Updates node.

  • Windows 10 版本 1809 和更低版本的客户端通过单一直接功能更新进行升级。Windows 10, version 1809 and earlier clients are upgraded with a single direct feature update.

    • 这与之前在 Windows 10 中完成的其他所有功能更新安装一样。This is just like all other previous installations for Feature Updates that you've done for Windows 10.

备注

无论使用哪个路径进行安装,Windows 10 版本 1909 的启用包和惯用功能更新都将在报表中显示为“已安装”。Both the enablement package and the traditional feature update for Windows 10, version 1909 will show as "Installed" in reporting, regardless of which path was used to install it.

Windows 10 版本 1903 及更高版本Windows 10, version 1903 and later

Windows 10 1903 版以及更高版本都已经作为其自身产品添加到 Microsoft 更新中,而不像早期版本那样作为 Windows 10 产品的一部分进行添加 。Windows 10, version 1903 and later was added to Microsoft Update as its own product rather than being part of the Windows 10 product like earlier versions. 这项更改需要你执行许多手动步骤,才可确保客户端显示这些更新。This change caused you to do a number of manual steps to ensure that your clients see these updates. 我们已采取措施减少了需要手动对 Configuration Manager 版本 1906 中的新产品执行操作的步骤数量。We've helped reduce the number of manual steps you have to take for the new product in Configuration Manager version 1906.

Windows 10 版本 1903 和更高版本以及 Configuration Manager 版本 1906Windows 10, version 1903 and later with Configuration Manager version 1906

更新至 Configuration Manager 1906 版,并选择了 Windows 10 产品进行同步后,系统将自动执行以下操作:When you update to Configuration Manager version 1906 and have the Windows 10 product selected for synchronization, the following actions occur automatically:

  • 已添加 Windows 10 1903 版以及更高版本产品用于进行同步操作。The Windows 10, version 1903 and later product is added for synchronization.
  • 包含 Windows 10 产品的自动部署规则将更新为包含 Windows 10 1903 版和更高版本 。Automatic Deployment Rules containing the Windows 10 product will be updated to include Windows 10, version 1903 and later.
  • 维护服务计划将更新为包含 Windows 10 1903 版和更高版本产品。Servicing plans are updated to include the Windows 10, version 1903 and later product.

Windows 10 版本 1903 和更高版本以及 Configuration Manager 版本 1902Windows 10, version 1903 and later with Configuration Manager version 1902

如果使用的是 Windows 10 版本 1903 客户端以及 Configuration Manager 1902,则需要:If you are using Configuration Manager 1902 with Windows 10,version 1903 clients, you'll need to:

  • 选择 Windows 10 1903 版以及更高版本产品用于进行同步操作。Select the Windows 10, version 1903 and later product for synchronization.
  • 更新 Windows 10 版本 1903 客户端的所有自动部署规则Update any Automatic Deployment Rules for Windows 10, version 1903 clients.
  • 更新 Windows 10 版本 1903 客户端的维护服务计划Update Servicing plans for Windows 10, version 1903 clients.

Windows 预览体验计划Windows Insider Program

从 2019 年 9 月起,你可以通过 Configuration Manager 来维护和更新运行 Windows Insider Preview 内部版本的设备。Starting in September 2019, you can service and update devices running Windows Insider Preview builds with Configuration Manager. 此更改意味着,你可以管理这些设备,而无需更改正常流程或启用适用于企业的 Windows 更新。This change means you can manage these devices without changing your normal processes or enabling Windows Update for Business. 像对待任何其他 Windows 10 更新或升级一样,你可以将 Windows Insider Preview 内部版本的功能更新和累积更新下载到 Configuration Manager。You can download Feature Updates and Cumulative Updates for Windows Insider Preview builds into Configuration Manager just like any other Windows 10 update or upgrade. 有关详细信息,请参阅将预发行 Windows 10 功能更新发布到 WSUS 博客文章。For more information, see the Publishing pre-release Windows 10 Feature Updates to WSUS blog post.

若要详细了解对 Configuration Manager 中 Windows 预览体验计划的支持,请参阅对 Windows 10 的支持For more information about support for Windows Insider in Configuration Manager, see Support for Windows 10.

必备条件Prerequisites

启用 Windows 预览体验计划升级和更新Enable Windows Insider upgrades and updates

需要为 Windows 预览体验计划升级和更新启用产品和分类。You need to enable the products and classifications for Windows Insider upgrades and updates. Windows 预览体验计划的功能更新、累积更新和其他更新位于 Windows 预览体验计划预发行版产品类别中。Feature Updates, Cumulative updates, and other updates for Windows Insider are under the Windows Insider Pre-Release product category.

  1. Configuration Manager 控制台中,导航到“管理” > “站点配置” > “站点” 。In the Configuration Manager console, navigate to Administration > Site Configuration > Sites.
  2. 选择管理中心站点或独立主站点。Select the central administration site or the stand-alone primary site.
  3. 在“主页” 选项卡上的“设置” 组中,单击“配置站点组件” ,再单击“软件更新点” 。On the Home tab, in the Settings group, click Configure Site Components, and then click Software Update Point.
  4. 在“产品”选项卡中,确保选中以下产品进行同步:On the Products tab, make sure the following products are selected for synchronization:
    • Windows 预览体验计划预发行版Windows Insider Pre-Release
    • Windows 10 版本 1903 及更高版本Windows 10, version 1903 and later
  5. 在“分类”选项卡中,确保选中以下分类进行同步:On the Classifications tab, make sure the following classifications are selected for synchronization:
    • 升级Upgrades
    • 安全更新Security Updates
    • 更新(可选)Updates (optional)
  6. 单击“确定” 关闭“软件更新点组件属性” 。Click OK to close the Software Update Point Component Properties.

升级 Windows 预览体验计划设备Upgrading Windows Insider devices

同步 Windows 预览体验计划的升级后,可以在“软件库” > “Windows 10 维护服务” > 全部 Windows 10 更新”中进行查看 。Once the upgrades for Windows Insiders are synchronized, you can see them from Software Library > Windows 10 Servicing > All Windows 10 Updates.

Windows 10 维护服务的 Windows 预览体验计划功能更新

与其他任何升级一样,将 Windows 预览体验计划的功能更新部署到目标集合。Deploy Feature Updates for Windows Insider to your target collection just like any other upgrade. 但部署这些功能更新时,建议记住以下项:However, you'll want to keep the following items in mind when you're deploying these Feature Updates:

有关如何部署升级的详细信息,请参阅管理 Windows 即服务For more information on how to deploy upgrades, see Manage Windows as a service.

使预览体验成员设备保持最新Keeping Insider devices up-to date

Windows 预览体验计划的累积更新将可适用于 WSUS,经扩展后可适用于 Configuration Manager。Cumulative Updates for Windows Insider will be available for WSUS and by extension for Configuration Manager. 这些累积更新的发布频率与 Windows 10 版本 1903 累积更新的发布频率相似。These Cumulative Updates will be released at a frequency similar to Windows 10 version 1903 Cumulative Updates. Windows 预览体验计划累积更新位于“Windows 预览体验计划预发行版”产品类别中,并归类为“安全更新程序”或“更新” 。The Windows Insider Cumulative updates are in the Windows Insider Pre-Release product category and classified as either Security Updates or Updates. 可以按常规软件更新流程(如按自动部署规则分阶段部署)部署 Windows 预览体验计划的累积更新。You can deploy the Cumulative Updates for Windows Insider using your regular software update process like using automatic deployment rules or phased deployments.

扩展的安全更新和 Configuration ManagerExtended Security Updates and Configuration Manager

如果客户需要运行某些已停止支持的 Microsoft 旧产品,扩展的安全更新 (ESU) 计划则是他们的终极选项。The Extended Security Updates (ESU) program is a last resort option for customers who need to run certain legacy Microsoft products past the end of support. 它包括关键和/或重要安全更新(相关定义请参见 Microsoft 安全响应中心 (MSRC)),且在超出产品的外延支持结束日期后最多可保存三年。It includes Critical and/or Important security updates (as defined by the Microsoft Security Response Center (MSRC)) for a maximum of three years after the product's End of Extended Support date.

不支持将超出其支持生命周期的产品与 Configuration Manager 一起使用。Products that are beyond their support lifecycle aren't supported for use with Configuration Manager. 它包括 ESU 计划包含的所有产品。This includes any products that are covered under the ESU program. 例如,Windows 7。For example, Windows 7. 通过 ESU 计划发布的安全更新将发布到 Windows Server Update Services (WSUS)。Security updates released under the ESU program will be published to Windows Server Update Services (WSUS). 这些更新将在 Configuration Manager 控制台中显示。These updates will appear in the Configuration Manager console. 尽管不再支持将 ESU 计划包含的产品与 Configuration Manager 一起使用,但仍可使用 Configuration Manager 当前分支的最新版本部署并安装通过此计划发布的 Windows 安全更新。While products that are covered under the ESU program are no longer supported for use with Configuration Manager, the latest released version of Configuration Manager current branch can be used to deploy and install Windows security updates released under the program. 最新发行版还可用于将 Windows 10 部署到运行 Windows 7 的设备。The latest released version can also be used to deploy Windows 10 to devices running Windows 7.

将不再在 ESU 计划包含的操作系统上测试与 Windows 软件更新管理或 OS 部署无关的客户端管理功能,并且不保证它们会继续工作。Client management features not related to Windows software update management or OS deployment will no longer be tested on the operating systems covered under the ESU program and we don't guarantee that they'll continue to function. 强烈建议尽快升级或迁移到操作系统的最新版本,以获得客户端管理支持。It's highly recommended to upgrade or migrate to a current version of the operating systems as soon as possible to receive client management support.

后续步骤Next steps

启动软件更新同步以根据新条件检索软件更新。Start software updates synchronization to retrieve software updates based on the new criteria. 有关详细信息,请参阅同步软件更新For more information, see Synchronize software updates.