更新云解决方案提供商Update CSP

更新配置服务提供程序使 IT 管理员能够管理和控制新更新的推出。The Update configuration service provider enables IT administrators to manage and control the rollout of new updates.

备注

建议不要为管理桌面设备使用"AprrovedUpdates"的更新 CSP 功能。The Update CSP functionality of 'AprrovedUpdates' is not recommended for managing desktop devices. 若要从 Windows 更新管理桌面设备的更新,请参阅策略 CSP - 更新 文档,了解建议的策略。To manage updates to desktop devices from Windows Update, see the Policy CSP - Updates documentation for the recommended policies.

下面以树格式显示更新配置服务提供程序。The following shows the Update configuration service provider in tree format.

Update
----ApprovedUpdates
--------Approved Update Guid
------------ApprovedTime
----FailedUpdates
--------Failed Update Guid
------------HResult
------------Status
------------RevisionNumber
----InstalledUpdates
--------Installed Update Guid
------------RevisionNumber
----InstallableUpdates
--------Installable Update Guid
------------Type
------------RevisionNumber
----PendingRebootUpdates
--------Pending Reboot Update Guid
------------InstalledTime
------------RevisionNumber
----LastSuccessfulScanTime
----DeferUpgrade
----Rollback
--------QualityUpdate
--------FeatureUpdate
--------QualityUpdateStatus
--------FeatureUpdateStatus

更新Update

根节点。The root node.

支持的操作为 Get。Supported operation is Get.

ApprovedUpdatesApprovedUpdates

代表最终用户进行更新审批和 EULA 接受的节点。Node for update approvals and EULA acceptance on behalf of the end-user.

备注

设置 RequireUpdateApproval 策略时,MDM 使用 ApprovedUpdates 列表传递已批准的 GUID。When the RequireUpdateApproval policy is set, the MDM uses the ApprovedUpdates list to pass the approved GUIDs. 这些 GUID 应该是 InstallableUpdates 列表的子集。These GUIDs should be a subset of the InstallableUpdates list.

MDM 必须先向 IT 人员提供 EULA,并让他们接受它,然后才能批准更新。The MDM must first present the EULA to IT and have them accept it before the update is approved. 如果不这样做,将违反法律或合同义务。Failure to do this is a breach of legal or contractual obligations. EULA 可以从更新元数据获取,并且具有自己的 EULA ID。The EULAs can be obtained from the update metadata and have their own EULA ID. 可以'多个更新来共享同一 EULA。It's possible for multiple updates to share the same EULA. 只需对每个 EULA ID 批准一次 EULA,而不是每个更新一次。It is only necessary to approve the EULA once per EULA ID, not one per update.

通过更新审批列表,IT 人员可以批准各个更新和更新分类。The update approval list enables IT to approve individual updates and update classifications. 通过按更新分类自动批准,IT 人员可以自动批准定义更新(例如,设备上病毒和间谍软件定义的更新)和安全更新(例如,针对安全相关漏洞的产品特定更新)。Auto-approval by update classifications allows IT to automatically approve Definition Updates (i.e., updates to the virus and spyware definitions on devices) and Security Updates (i.e., product-specific updates for security-related vulnerability). 更新审批列表不支持通过撤销对已安装更新的审批来卸载更新。The update approval list does not support the uninstallation of updates by revoking approval of already installed updates. 更新基于 UpdateID 审批,并且每个 UpdateID 只需批准一次。Updates are approved based on UpdateID, and an UpdateID only needs to be approved once. UpdateID 和 RevisionNumber 是 UpdateIdentity 类型的一部分。An update UpdateID and RevisionNumber are part of the UpdateIdentity type. 由于 RevisionNumber 设置的更改,UpdateID 可以与多个 UpdateIdentity GUID 关联。An UpdateID can be associated to several UpdateIdentity GUIDs due to changes to the RevisionNumber setting. MDM 服务必须基于最新的 RevisionNumber 同步 UpdateID 的 UpdateIdentity,才能获取更新的最新元数据。MDM services must synchronize the UpdateIdentity of an UpdateID based on the latest RevisionNumber to get the latest metadata for an update. 但是,更新审批基于 UpdateID。However, update approval is based on UpdateID.

备注

对于 Windows 10 版本,客户端可能需要在添加其他更新后重新启动。For the Windows 10 build, the client may need to reboot after additional updates are added.

支持的操作包括 Get 和 Add。Supported operations are Get and Add.

ApprovedUpdates/ 已批准的更新 GuidApprovedUpdates/Approved Update Guid

指定更新 GUID。Specifies the update GUID.

若要自动批准一类更新,可以指定更新分类 GUID。To auto-approve a class of updates, you can specify the Update Classifications GUIDs. 强烈建议始终指定用于反恶意软件签名的 DefinitionsUpdates 分类 (E0789628-CE08-4437-BE74-2495B842F43B)。We strongly recommend to always specify the DefinitionsUpdates classification (E0789628-CE08-4437-BE74-2495B842F43B), which are used for anti-malware signatures. 定期发布(一天多次)。There are released periodically (several times a day). 一些企业可能还希望自动批准安全更新,以快速部署它们。Some businesses may also want to auto-approve security updates to get them deployed quickly.

支持的操作包括 Get 和 Add。Supported operations are Get and Add.

syncml 示例:Sample syncml:

<LocURI>./Vendor/MSFT/Update/ApprovedUpdates/%7ba317dafe-baf4-453f-b232-a7075efae36e%7d</LocURI>

ApprovedUpdates/Approved Update Guid/ApprovedTimeApprovedUpdates/Approved Update Guid/ApprovedTime

指定更新得到批准的时间。Specifies the time the update gets approved.

支持的操作包括 Get 和 Add。Supported operations are Get and Add.

FailedUpdatesFailedUpdates

指定在设备上安装失败的已批准更新。Specifies the approved updates that failed to install on a device.

支持的操作为 Get。Supported operation is Get.

FailedUpdates/ 更新 Guid 失败FailedUpdates/Failed Update Guid

UpdateIdentity GUID 的更新标识符字段,表示下载或安装失败的更新。Update identifier field of the UpdateIdentity GUID that represent an update that failed to download or install.

支持的操作为 Get。Supported operation is Get.

FailedUpdates/Failed Update Guid/HResultFailedUpdates/Failed Update Guid/HResult

更新失败错误代码。The update failure error code.

支持的操作为 Get。Supported operation is Get.

FailedUpdates/Failed Update Guid/StatusFailedUpdates/Failed Update Guid/Status

指定失败的更新状态 (例如,下载、安装) 。Specifies the failed update status (for example, download, install).

支持的操作为 Get。Supported operation is Get.

FailedUpdates/Failed Update Guid/RevisionNumberFailedUpdates/Failed Update Guid/RevisionNumber

已添加到 Windows 10 版本 1703。Added in Windows 10, version 1703. 必须在服务器与服务器同步中传递才能获取更新元数据的更新的修订号。The revision number for the update that must be passed in server to server sync to get the metadata for the update.

支持的操作为 Get。Supported operation is Get.

InstalledUpdatesInstalledUpdates

设备上安装的更新。The updates that are installed on the device.

支持的操作为 Get。Supported operation is Get.

InstalledUpdates/ 已安装的更新 GuidInstalledUpdates/Installed Update Guid

表示设备上安装的更新的 UpdateID。UpdateIDs that represent the updates installed on a device.

支持的操作为 Get。Supported operation is Get.

InstalledUpdates/Installed Update Guid/RevisionNumberInstalledUpdates/Installed Update Guid/RevisionNumber

已添加到 Windows 10 版本 1703。Added in Windows 10, version 1703. 必须在服务器与服务器同步中传递才能获取更新元数据的更新的修订号。The revision number for the update that must be passed in server to server sync to get the metadata for the update.

支持的操作为 Get。Supported operation is Get.

InstallableUpdatesInstallableUpdates

适用且尚未在设备上安装的更新。The updates that are applicable and not yet installed on the device. 这包括尚未批准的更新。This includes updates that are not yet approved.

支持的操作为 Get。Supported operation is Get.

InstallableUpdates/ 可安装更新 GuidInstallableUpdates/Installable Update Guid

表示适用且未安装在设备的更新的更新标识符。Update identifiers that represent the updates applicable and not installed on a device.

支持的操作为 Get。Supported operation is Get.

InstallableUpdates/Installable Update Guid/TypeInstallableUpdates/Installable Update Guid/Type

更新的 UpdateClassification 值。The UpdateClassification value of the update. 有效值包括:Valid values are:

  • 0 - 无0 - None
  • 1 - 安全性1 - Security
  • 2 = 关键2 = Critical

支持的操作为 Get。Supported operation is Get.

InstallableUpdates/Installable Update Guid/RevisionNumberInstallableUpdates/Installable Update Guid/RevisionNumber

必须在服务器与服务器同步中传递才能获取更新元数据的更新的修订号。The revision number for the update that must be passed in server to server sync to get the metadata for the update.

支持的操作为 Get。Supported operation is Get.

PendingRebootUpdatesPendingRebootUpdates

需要重新启动才能完成更新会话的更新。The updates that require a reboot to complete the update session.

支持的操作为 Get。Supported operation is Get.

PendingRebootUpdates/ 挂起重新启动更新 GuidPendingRebootUpdates/Pending Reboot Update Guid

更新挂起的重启状态标识符。Update identifiers for the pending reboot state.

支持的操作为 Get。Supported operation is Get.

PendingRebootUpdates/Pending Reboot Update Guid/InstalledTimePendingRebootUpdates/Pending Reboot Update Guid/InstalledTime

安装更新的时间。The time the update is installed.

支持的操作为 Get。Supported operation is Get.

PendingRebootUpdates/Pending Reboot Update Guid/RevisionNumberPendingRebootUpdates/Pending Reboot Update Guid/RevisionNumber

已添加到 Windows 10 版本 1703。Added in Windows 10, version 1703. 必须在服务器与服务器同步中传递才能获取更新元数据的更新的修订号。The revision number for the update that must be passed in server to server sync to get the metadata for the update.

支持的操作为 Get。Supported operation is Get.

LastSuccessfulScanTimeLastSuccessfulScanTime

上次成功的扫描时间。The last successful scan time.

支持的操作为 Get。Supported operation is Get.

DeferUpgradeDeferUpgrade

升级延迟到下一个时间段。Upgrades deferred until the next period.

支持的操作为 Get。Supported operation is Get.

回滚 在 Windows 10 版本 1803 中添加。Rollback Added in Windows 10, version 1803. 回滚操作节点。Node for the rollback operations.

Rollback/QualityUpdate 在 Windows 10 版本 1803 中添加。Rollback/QualityUpdate Added in Windows 10, version 1803. 如果计算机满足以下条件,则回滚最新的质量更新:Roll back latest Quality Update, if the machine meets the following conditions:

  • 条件 1:设备必须是适用于连接的企业 Windows 更新Condition 1: Device must be Windows Update for Business Connected
  • 条件 2:设备必须已暂停状态Condition 2: Device must be in a Paused State
  • 条件 3:设备必须在设备上安装最新质量更新 (当前状态) Condition 3: Device must have the Latest Quality Update installed on the device (Current State)

如果条件不为 true,设备将不会回滚最新质量更新。If the conditions are not true, the device will not Roll Back the Latest Quality Update.

Rollback/FeatureUpdate 在 Windows 10 版本 1803 中添加。Rollback/FeatureUpdate Added in Windows 10, version 1803. 回滚最新功能更新(如果计算机满足以下条件):Roll Back Latest Feature Update, if the machine meets the following conditions:

  • 条件 1:设备必须是适用于连接的企业 Windows 更新Condition 1: Device must be Windows Update for Business Connected
  • 条件 2:设备必须已暂停状态Condition 2: Device must be in Paused State
  • 条件 3:设备必须已安装在设备上的最新功能更新 (当前状态) Condition 3: Device must have the Latest Feature Update Installed on the device (Current State)
  • 条件 4:计算机应在卸载期内Condition 4: Machine should be within the uninstall period

备注

这仅适用于半年频道目标设备。This only works for Semi Annual Channel Targeted devices.

如果条件不为 true,设备将不会回滚最新功能更新。If the conditions are not true, the device will not Roll Back the Latest Feature Update.

Rollback/QualityUpdateStatus 在 Windows 10 版本 1803 中添加。Rollback/QualityUpdateStatus Added in Windows 10, version 1803. 返回上次 RollBack QualityUpdate 操作的结果。Returns the result of last RollBack QualityUpdate operation.

Rollback/FeatureUpdateStatus 在 Windows 10 版本 1803 中添加。Rollback/FeatureUpdateStatus Added in Windows 10, version 1803. 返回上一次 RollBack FeatureUpdate 操作的结果。Returns the result of last RollBack FeatureUpdate operation.

配置服务提供程序参考Configuration service provider reference