Intune 中的 Windows 更新设置Windows update settings for Intune

查看可以通过 Microsoft Intune 配置和管理的 Windows 10 更新设置。View the Windows 10 Update settings you can configure and manage with Microsoft Intune.

在 Intune 中配置适用于 Windows 10 更新通道的设置时,将配置 Windows 更新设置。When you configure settings for Windows 10 update rings in Intune, you're configuring the Windows Update settings. 如果 Windows 更新设置具有 Windows 10 版本依赖关系,则在设置详细信息中会记录版本依赖关系。If a Windows update setting has a Windows 10 version dependency, the version dependency is noted in the settings details.

更新设置Update settings

更新设置可控制设备将要下载的位和时间。Update settings control what bits a device will download, and when. 有关每个设置的行为的详细信息,请参阅 Windows 参考文档。For more information about the behavior of each setting, see the Windows reference documentation.

  • 服务频道Servicing channel
    默认值:半年频道Default: Semi-Annual Channel
    Windows 更新 CSP:Update/BranchReadinessLevelWindows Update CSP: Update/BranchReadinessLevel

    设置设备从中接收 Windows 更新的频道(分支)。Set the channel (branch) from which the device receives Windows updates. 在交付更新前,不同的频道可以使用不同的延迟期。Different channels can use different deferral periods before updates are delivered.

    例如,半年频道具有六个月的延迟期。For example, the Semi-Annual Channel has a six-month deferral. 如果使用此频道而没有此设置主体的任何其他延迟,则设备将在更新发布后的六个月安装该更新。If you use this channel with no additional deferrals from this body of settings, the device installs the update six-months after its release.

    支持的更新频道:Supported update channels:

    • 半年频道Semi-Annual Channel
    • 半年频道(定向)Semi-Annual Channel (targeted)
    • Windows 预览体验计划 - 快Windows Insider – Fast
    • Windows 预览体验计划 - 慢Windows Insider – Slow
    • 发布 Windows 预览体验计划Release Windows Insider

    如果选择预览体验计划频道,则 Intune 将自动配置 Windows 更新设置 Update/ManagePreviewBuilds,以便此预览体验计划正常运行。If you select an Insider channel, Intune automatically configures the Windows update setting Update/ManagePreviewBuilds so that the insider build will work.

    重要

    从 Windows 版本 1903 开始,停用半年频道(定向) (SAC-T)。Beginning with Windows version 1903, the use of the Semi-Annual Channel (targeted) (SAC-T), is retired. 通过这一更改,SAC-T 与半年频道合并。With this change, SAC-T merges with the Semi-Annual Channel. 若要详细了解这一更改及其对适用于企业的 Windows 更新所产生的影响,请参阅 Windows IT 专业人员博客文章适用于企业的 Windows 更新和 SAC-T 的停用To learn more about this change and how it affects Windows Update for Business, see the Windows IT Pro Blog post Windows Update for Business and the retirement of SAC-T.

  • Microsoft 产品更新Microsoft product updates
    默认值:AllowDefault: Allow
    Windows 更新 CSP:Update/AllowMUUpdateServiceWindows Update CSP: Update/AllowMUUpdateService

    • 允许 - 选择“允许”以扫描 Microsoft 更新中的应用更新。Allow - Select Allow to scan for app updates from Microsoft Update.
    • 阻止 - 选择“阻止”以禁止扫描应用更新。Block - Select Block to prevent scanning for app updates.
  • Windows 驱动程序Windows drivers
    默认值:AllowDefault: Allow
    Windows 更新 CSP:Update/ExcludeWUDriversInQualityUpdateWindows Update CSP: Update/ExcludeWUDriversInQualityUpdate

    • 允许 - 选择“允许”以在更新过程中包含 Windows 更新驱动程序。Allow - Select Allow include Windows Update drivers during updates.
    • 阻止 - 选择“阻止”以禁止扫描驱动程序。Block - Select Block to prevent scanning for drivers.
  • 质量更新延迟期(天)Quality update deferral period (days)
    默认值:0Default: 0
    Windows 更新 CSP:Update/DeferQualityUpdatesPeriodInDaysWindows Update CSP: Update/DeferQualityUpdatesPeriodInDays

    指定质量更新延迟的天数(从 0 到 30)。Specify the number of days from 0 to 30 for which Quality Updates are deferred. 此期限是属于所选的服务频道的任何延迟期以外的期限。This period is in addition to any deferral period that is part of the service channel you select. 延迟期在设备收到策略时开始。The deferral period begins when the policy is received by the device.

    质量更新通常是对现有 Windows 功能的修复和改进。Quality Updates are typically fixes and improvements to existing Windows functionality.

  • 功能更新延迟期(天)Feature update deferral period (days)
    默认值:0Default: 0
    Windows 更新 CSP:Update/PauseFeatureUpdatesPeriodInDaysWindows Update CSP: Update/PauseFeatureUpdatesPeriodInDays

    指定功能更新延迟天数。Specify the number of days for which Feature Updates are deferred. 此期限是属于所选的服务频道的任何延迟期以外的期限。This period is in addition to any deferral period that is part of the service channel you select. 延迟期在设备收到策略时开始。The deferral period begins when the policy is received by the device.

    支持的延迟期:Supported deferral period:

    • Windows 版本 1709 和更高版本 - 0 到 365 天Windows version 1709 and later - 0 to 365 days

    功能更新通常是 Windows 的新功能。Feature Updates are typically new features for Windows.

  • 设置功能更新卸载期(2 到 60 天)Set feature update uninstall period (2 – 60 days)
    默认值:10Default: 10
    Windows 更新 CSP:Update/ConfigureFeatureUpdateUninstallPeriodWindows Update CSP: Update/ConfigureFeatureUpdateUninstallPeriod

    配置无法卸载功能更新的时间。Configure a time after which feature updates can't be uninstalled.

    当此期限到期后,会从设备中删除之前的更新位,并且无法再将其卸载到以前的更新版本。After this period expires, the previous update bits are removed from the device, and it can no longer uninstall to a previous update version.

    例如,功能更新卸载期为 20 天的更新通道。For example, consider an update ring with a feature update uninstall period of 20 days. 在 25 天后,你决定回滚到最新的功能更新并使用“卸载”选项。After 25 days you decide to roll back the latest feature update and use the Uninstall option. 在 20 天以前安装了功能更新的设备无法卸载更新,因为它们已删除了作为维护一部分的必需的位。Devices that installed the feature update over 20 days ago can't uninstall it as they've removed the necessary bits as part of their maintenance. 但是,在 19 天以前仅安装了功能更新的设备可以卸载更新(如果它们在超过 20 天的卸载期前成功签入以接收卸载命令)。However, devices that only installed the feature update up to 19 days ago can uninstall the update if they successfully check in to receive the uninstall command before exceeding the 20-day uninstall period.

用户体验设置User experience settings

用户体验设置控制设备重启和提醒的最终用户体验。User experience settings control the end-user experience for device restart and reminders. 有关每个设置的行为的详细信息,请参阅 Windows 更新 CSP 文档。For more information about the behavior of each setting, see the Windows Update CSP documentation.

  • 自动更新行为Automatic update behavior
    默认值:在维护时间自动安装Default: Auto install at maintenance time
    Windows 更新 CSP:Update/AllowAutoUpdateWindows Update CSP: Update/AllowAutoUpdate

    选择自动更新的安装方式,如有必要,选择重启设备的时间。Choose how automatic updates are installed and, if necessary, when to restart the device.

    支持的选项:Supported options:

    • 通知下载 - 在下载更新前通知用户。Notify download - Notify the user before downloading the update. 用户选择下载和安装更新。Users choose to download and install updates.

    • 在维护期自动安装 - 自动下载更新,然后在设备未使用或在电池电源上运行时的自动维护期间安装。Auto install at maintenance time - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. 当需要重启时,系统将连续七天提示用户重启,在这之后将强制重启。When restart is required, users are prompted to restart for up to seven days, and then restart is forced.

      此选项可在更新安装后自动重启设备。This option can restart a device automatically after the update installs. 使用“活动时间”设置来定义阻止自动重启的时间段:Use the Active hours settings to define a period during which the automatic restarts are blocked:

      • 活动时间开始 - 指定由于更新安装所导致的取消重启的开始时间。Active hours start - Specify a start time for suppressing restarts due to update installations.
        默认值:上午 8 点Default: 8 AM
        Windows 更新 CSP:Update/ActiveHoursStartWindows Update CSP: Update/ActiveHoursStart

      • 活动时间结束 - 指定由于更新安装所导致的取消重启的结束时间。Active hours end - Specify an end time for suppressing reboots due to update installations.
        默认值:下午 5 点Default: 5 PM
        Windows 更新 CSP:Update/ActiveHoursEndWindows Update CSP: Update/ActiveHoursEnd

    • 在维护期自动安装和重启 – 自动下载更新,然后在设备未使用或在电池电源上运行时的自动维护期间安装。Auto install and restart at maintenance time - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. 需要重启时,设备将在未使用时重启。When restart is required, the device restarts when not being used. (这是非托管设备的默认设置。)(This is the default for unmanaged devices.)

      此选项可在更新安装后自动重启设备。This option can restart a device automatically after the update installs. 在 Windows 更新设置中未说明“活动时间”设置的使用,但 Intune 使用此设置来定义阻止自动重启的时间段:Use of the Active hours settings aren't described in Windows Update settings but are used by Intune to define a period during which the automatic restarts are blocked:

      • 活动时间开始 - 指定由于更新安装所导致的取消重启的开始时间。Active hours start - Specify a start time for suppressing restarts due to update installations.
        默认值:上午 8 点Default: 8 AM
        Windows 更新 CSP:Update/ActiveHoursStartWindows Update CSP: Update/ActiveHoursStart

      • 活动时间结束 - 指定由于更新安装所导致的取消重启的结束时间。Active hours end - Specify an end time for suppressing reboots due to update installations.
        默认值:下午 5 点Default: 5 PM
        Windows 更新 CSP:Update/ActiveHoursEndWindows Update CSP: Update/ActiveHoursEnd

    • 在计划时间自动安装和重启 - 指定安装日期和时间。Auto install and restart at scheduled time - Specify an installation day and time. 如果未指定,则安装程序将在每天凌晨 3 点运行,随后进行 15 分钟倒计时以执行重启。If unspecified, installation runs at 3 AM daily, followed by a 15-minute countdown to a restart. 登录的用户可以延迟倒计时和重启。Logged on uses can delay countdown and restart.
      Windows 更新 CSP:Update/AllowAutoUpdateWindows Update CSP: Update/AllowAutoUpdate

      此选项支持其他设置。This option supports additional settings.

      • 自动行为频率 - 使用此设置计划安装更新的时间,包括星期、天和时间。Automatic behavior frequency - Use this setting to schedule when updates are installed, including the week, the day, and the time.
        默认值:每周Default: Every week

      • 计划安装日期 - 指定要在星期几安装更新。Scheduled install day - Specify on which day of the week you want updates to install.
        默认值:任何一天Default: Any Day

      • 计划安装时间 - 指定要在一天中安装更新的时间。Scheduled install time - Specify the time of day when you want updates to install.
        默认值:凌晨 3 点Default: 3 AM

    • 无需最终用户控制即可自动安装并重启 - 自动下载更新,然后在设备未使用或在电池电源上运行时的自动维护期间安装。Auto install and reboot without end-user control - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. 需要重启时,设备将在未使用时重启。When restart is required, the device restarts when not being used. 此选项将最终用户控制窗格设置为只读。This option sets the end-users control pane to read-only.

    • 重置为默认值 - 在运行“2018 年 10 月”更新或更高版本更新的 Windows 10 计算机上还原原始的自动更新设置。Reset to default - Restore the original auto update settings on Windows 10 machines that run the October 2018 Update or later.

  • 重启检查Restart checks
    默认值:AllowDefault: Allow
    Windows 更新 CSP:Update/SetEDURestartWindows Update CSP: Update/SetEDURestart

    要在重启设备时跳过这些检查,请选择“跳过”。To skip these checks when you restart a device, select Skip.

    此设置具有不同的结果,具体取决于 Windows 的设备版本:This setting has different results depending on the devices version of Windows:

    • Windows 版本 1709 及更高版本 - 在活动时间,不为更新运行以下进程:扫描、下载、安装和重启。Windows version 1709 and later - During Active Hours, the following processes don't run for updates: scan, download, install, and reboot. 在活动时间后,只要通过电池和电源检查,更新进程就会运行并可将设备从睡眠状态唤醒、扫描、下载、安装和重启设备。After Active Hours, the update processes do run and can wake the device from sleep, scan, download, install, and reboot the device as long as the battery checks and power checks pass.
  • 阻止用户暂停 Windows 更新Block user from pausing Windows updates
    默认值:AllowDefault: Allow
    Windows 更新 CSP:Update/SetDisablePauseUXAccessWindows Update CSP: Update/SetDisablePauseUXAccess

    • 允许 - 允许设备用户暂停更新的安装。Allow - Allow device users to pause the installation of an update.
    • 阻止 - 禁止设备用户暂停更新的安装。Block - Prevent device users from pausing the installation of an update.
  • 阻止用户扫描 Windows 更新Block user from scanning for Windows updates
    默认值:AllowDefault: Allow
    Windows 更新 CSP:Update/SetDisableUXWUAccessWindows Update CSP: Update/SetDisableUXWUAccess

    • 允许 - 允许设备用户使用 Windows 更新扫描,查找并下载更新并安装功能。Allow - Allow device users to use Windows Update scan to find and download updates, and install features.
    • 阻止 - 禁止设备用户访问 Windows 更新扫描、下载更新和安装功能。Block - Prevent device users from accessing the Windows Update scan, downloading updates, and installing features.
  • 要求用户批准以消除重启通知Require user approval to dismiss restart notification
    默认值:未配置Default: Not configured
    Windows 更新 CSP:Update/AutoRestartRequiredNotificationDismissalWindows Update CSP: Update/AutoRestartRequiredNotificationDismissal

    • - 在 25 秒后自动消除。No - Automatic Dismissal after 25 seconds.
    • - 需要用户消除。Yes - Require User Dismissal.
  • 通过可消除的提醒提前提醒用户需要自动重启(小时)Remind user prior to required auto-restart with dismissible reminder (hours)
    默认值:4Default: 4
    Windows 更新 CSP:Update/ScheduleRestartWarningWindows Update CSP: Update/ScheduleRestartWarning

    指定在自动重启前提前多久向设备用户显示有关该重启的可消除通知。Specify how long in advance of an automatic restart to display a dismissible notification to a device user about that restart. 支持值 2、4、8、12 或 24 小时。Values of 2, 4, 8, 12, or 24 hours are supported.

    清除默认值后,此设置将变为“未配置”。When you clear the default value, this setting becomes Not configured.

  • 通过永久提醒提前提醒用户需要自动重启(分钟)Remind user prior to required auto-restart with permanent reminder (minutes)
    默认值:15Default: 15
    Windows 更新 CSP:Update/ScheduleImminentRestartWarningWindows Update CSP: Update/ScheduleImminentRestartWarning

    指定自动重启前提前多久向设备用户显示有关该重启的不可消除的警告。Specify how long in advance of an automatic restart to display a non-dismissible warning to a device user about that restart. 支持值 15、30 或 60 分钟。Values of 15, 30 or 60 minutes are supported.

    清除默认值后,此设置将变为“未配置”。When you clear the default value, this setting becomes Not configured.

  • 更改更新通知级别Change Update notification level
    默认值:使用默认 Windows 更新通知Default: Use the default Windows Update notifications
    Windows 更新 CSP:Update/UpdateNotificationLevelWindows Update CSP: Update/UpdateNotificationLevel

    指定用户可见的 Windows 更新通知级别。Specify what level of Windows Update notifications users see. 此设置不控制下载和安装更新的方式和时间。This setting doesn't control how and when updates are downloaded and installed.

    支持的选项:Supported options:

    • 未配置Not configured
    • 使用默认 Windows 更新通知Use the default Windows Update notifications
    • 关闭所有通知(不包括重启警告)Turn off all notifications, excluding restart warnings
    • 关闭所有通知(包括重启警告)Turn off all notifications, including restart warnings
  • 使用截止时间设置Use deadline settings
    默认值:未配置Default: Not configured

    允许用户使用截止时间设置。Allows user to use deadline settings.

    • 未配置Not configured
    • 允许Allow

    如果设置为“允许”,则可以为截止时间配置以下设置:When set to Allow, you can configure the following settings for deadlines:

传递优化下载模式Delivery Optimization download mode

传递优化不再配置为“软件更新”下“Windows 10 更新通道”的一部分。Delivery Optimization is no longer configured as part of a Windows 10 Update Ring under Software Updates. 现在,传递优化通过设备配置进行设置。Delivery Optimization is now set through device configuration. 但是,以前的配置在控制台中仍然可用。However, previous configurations remain available in the console. 可以通过将以前的配置编辑为“未配置”来删除这些配置,否则便无法对其进行修改。You can remove these previous configurations by editing them to be Not configured, but they can't otherwise be modified.

为避免新旧策略之间发生冲突,请参阅删除 Windows 10 更新通道中的传递优化,然后将设置移动到传递优化配置文件。To avoid conflicts between new and old policy, see Remove Delivery Optimization from Windows 10 Update Rings and then move your settings to a Delivery Optimization profile.