什么是适用于企业的 Windows 更新?What is Windows Update for Business?

适用范围Applies to

  • Windows 10Windows 10

适用于企业的 windows 更新是适用于所有 premium 版本的免费服务,包括 Windows 10 专业版、企业版、Pro for 工作站和教育版。Windows Update for Business is a free service that is available for all premium editions including Windows 10 Pro, Enterprise, Pro for Workstation, and Education editions.

查找使用者信息?Looking for consumer information? 请参阅 Windows 更新:常见问题See Windows Update: FAQ

Windows 更新企业版使 IT 管理员能够通过直接将这些系统连接到 Windows Update 服务,让组织中的 Windows 10 设备始终保持最新的最新安全防护和 Windows 功能。Windows Update for Business enables IT administrators to keep the Windows 10 devices in their organization always up to date with the latest security defenses and Windows features by directly connecting these systems to Windows Update service. 你可以使用组策略或移动设备管理 (MDM) 解决方案(如 Microsoft Intune)配置 Windows 更新 for Business 设置,这些设置控制更新 Windows 10 设备的方式和时间。You can use Group Policy or Mobile Device Management (MDM) solutions such as Microsoft Intune to configure the Windows Update for Business settings that control how and when Windows 10 devices are updated.

尤其是,Windows 更新企业版可让你控制更新产品和体验,以便在整个组织中部署更新之前,在设备子集上进行可靠性和性能测试。Specifically, Windows Update for Business lets you control update offerings and experiences to allow for reliability and performance testing on a subset of devices before deploying updates across the organization. 它还为组织中的人员提供积极更新体验。It also provides a positive update experience for people in your organization.

在 Windows for Business 更新中可以执行哪些操作?What can I do with Windows Update for Business?

适用于企业的 windows 更新使商业客户能够管理收到哪些 Windows 更新以及在收到设备时收到的体验。Windows Update for Business enables commercial customers to manage which Windows Updates are received when as well as the experience a device has when it receives them.

你可以通过使用移动设备管理 (MDM) 工具(如 Microsoft Intune 或组策略管理工具,如 Microsoft Intune 或组策略管理控制台 (GPMC) )以及其他非 Microsoft 管理工具,来控制企业版策略的 Windows 更新。You can control Windows Update for Business policies by using either Mobile Device Management (MDM) tools such as Microsoft Intune or Group Policy management tools such as local group policy or the Group Policy Management Console (GPMC), as well as a variety of other non-Microsoft management tools. MDMs 使用配置服务提供程序 (CSP) 策略,而不是组策略。MDMs use Configuration Service Provider (CSP) policies instead of Group Policy. Intune 还使用云策略。Intune additionally uses Cloud Policies. 并非所有策略都可用 (CSP、组策略或云策略) 的所有格式。Not all policies are available in all formats (CSP, Group Policy, or Cloud policy).

管理 Windows 更新的部署Manage deployment of Windows Updates

通过使用 Windows 更新 for Business,你可以控制为生态系统中的设备提供的 Windows 更新的类型、应用更新以及在波形中部署到组织中的设备。By using Windows Update for Business, you can control which types of Windows Updates are offered to devices in your ecosystem, when updates are applied, and deployment to devices in your organization in waves.

管理提供的更新Manage which updates are offered

Windows 更新企业版允许 IT 管理员接收和管理各种不同类型的 Windows 更新。Windows Update for Business enables an IT administrator to receive and manage a variety of different types of Windows Updates.

由 Windows 更新企业版管理的更新类型Types of updates managed by Windows Update for Business

Windows 更新企业版为 Windows 10 设备提供多种类型更新的管理策略:Windows Update for Business provides management policies for several types of updates to Windows 10 devices:

  • 功能更新: 以前称为 "升级",功能更新不仅包含安全和质量修订,还包含重要的功能添加和更改。Feature updates: Previously referred to as "upgrades," feature updates contain not only security and quality revisions, but also significant feature additions and changes. 在秋季和春季,功能更新将在半年发布。Feature updates are released semi-annually in the fall and in the spring.
  • 质量更新: 质量更新是传统的操作系统更新,通常会在每月的第二个星期二发布, (尽管可以随时发布这些更新) 。Quality updates: Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). 这些更新包括安全更新、关键更新和驱动程序更新。These include security, critical, and driver updates. Windows 的 Windows 更新还会将非 Windows 更新视为 (例如 Microsoft Office 或 Visual Studio 的更新) 作为质量更新。Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office or Visual Studio) as quality updates. 这些非 Windows 更新称为 "Microsoft update",你可以将设备设置为接收此类更新 (或不) 及其 Windows 更新。These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates.
  • 驱动程序更新: 与你的设备相关的非 Microsoft 驱动程序的更新。Driver updates: Updates for non-Microsoft drivers that are relevant to your devices. 默认情况下,驱动程序更新处于打开状态,但你可以使用 Windows 更新 for Business 策略将其关闭(如果你愿意)。Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer.
  • Microsoft 产品更新:适用于其他 Microsoft 产品(如 Office)的更新。Microsoft product updates: Updates for other Microsoft products, such as Office. 默认情况下,产品更新处于关闭状态。Product updates are off by default. 你可以使用 Windows 更新商业版策略将其打开。You can turn them on by using Windows Update for Business policies.

旨在Offering

你可以控制应用更新的时间,例如,在设备上安装更新或暂停更新一段时间后延迟。You can control when updates are applied, for example by deferring when an update is installed on a device or by pausing updates for a certain period.

在提供更新时进行管理Manage when updates are offered

你可以将更新的安装推迟或暂停一段设定的时间。You can defer or pause the installation of updates for a set period of time.

注册预发布更新Enroll in pre-release updates

分支就绪级别使管理员能够指定要接收的功能更新的频道。The branch readiness level enables administrators to specify which channel of feature updates they want to receive. 现在,预发布和已发布的更新有分支准备情况级别选项:Today there are branch readiness level options for both pre-release and released updates:

  • Windows 预览体验成员快Windows Insider Fast
  • Windows 预览体验成员慢Windows Insider Slow
  • Windows 预览体验成员 Release PreviewWindows Insider Release Preview
  • 半年频道Semi-Annual Channel

在 Windows 10 版本1903之前,发布更新有两个信道: Semi-Annual 信道和 Semi-Annual 频道 (定向的) 。Prior to Windows 10, version 1903, there are two channels for released updates: Semi-Annual Channel and Semi-Annual Channel (Targeted). 将根据所选频道的发布日期计算延期天数。Deferral days are calculated against the release date of the chosen channel. 从 Windows 10 版本1903开始,只有一个发布频道: Semi-Annual 信道。Starting with Windows 10, version 1903 there is only the one release channel: Semi-Annual Channel. 将根据发布的 Semi-Annual 频道发布日期计算所有延期日期。All deferral days are calculated against a release’s Semi-Annual Channel release date. 有关准确的发布日期,请参阅 Windows 版本信息For exact release dates, see Windows Release Information. 你可以使用 " 选择何时接收预览版和功能更新 " 策略来设置分支就绪级别。You can set the branch readiness level by using the Select when Preview Builds and Feature Updates are Received policy. 若要使用此策略管理预发布版本,请首先通过使用 " 管理预览版 " 策略启用 "预览版本"。To use this policy to manage pre-release builds, first enable preview builds by using the Manage preview Builds policy.

推迟更新Defer an update

Windows 更新适用于企业版管理员,可将功能和质量更新的安装推迟到限制的时间范围内,从在 Windows 更新服务中首次进行这些更新时开始部署到设备。A Windows Update for Business administrator can defer the installation of both feature and quality updates from deploying to devices within a bounded range of time from when those updates are first made available on the Windows Update service. 你可以使用此延迟来在部署推送到设备时允许时间验证部署。You can use this deferral to allow time to validate deployments as they are pushed to devices. 延迟通过允许你指定在将更新提供给设备之前发布的天数,从而实现工作。Deferrals work by allowing you to specify the number of days after an update is released before it is offered to a device. 也就是说,如果您设置了365天的功能更新延期期,则设备将不会安装已发布的功能更新(不超过365天)。That is, if you set a feature update deferral period of 365 days, the device will not install a feature update that has been released for less than 365 days. 若要推迟功能更新,请使用 " 选择何时接收预览版和功能更新 " 策略。To defer feature updates, use the Select when Preview Builds and Feature Updates are Received policy.

类别Category 最大延期周期Maximum deferral period
功能更新Feature updates 365 天365 days
质量更新Quality updates 30 天30 days
不可延迟Non-deferrable none

暂停更新Pause an update

如果您在部署功能或质量更新时发现问题,则 IT 管理员可以从指定的开始日期暂停更新35天,以防止其他设备安装它,直到问题被缓解。If you discover a problem while deploying a feature or quality update, the IT administrator can pause the update for 35 days from a specified start date to prevent other devices from installing it until the issue is mitigated. 如果暂停功能更新,仍会向设备提供质量更新,以确保它们保持安全。If you pause a feature update, quality updates are still offered to devices to ensure they stay secure. 功能和质量更新的暂停期是从您设置的开始日期计算的。The pause period for both feature and quality updates is calculated from a start date that you set.

若要暂停功能更新,请使用 " 选择何时接收预览版和功能更新 " 策略,并暂停质量更新使用 " 选择收到质量更新的时间 " 策略。To pause feature updates, use the Select when Preview Builds and Feature Updates are Received policy and to pause quality updates use the Select when Quality Updates are Received policy. 有关详细信息,请参阅 暂停功能更新暂停质量更新For more information, see Pause feature updates and Pause quality updates.

内置的好处:从 Windows 更新更新时,你将获得内置兼容性检查的新增优点,以防止你的设备出现较差的更新体验以及防止重复回退的检查。Built-in benefits: When updating from Windows Update, you get the added benefits of built-in compatibility checks to prevent against a poor update experience for your device as well as a check to prevent repeated rollbacks.

建议Recommendations

有关 Windows 更新的最佳体验,请遵循以下指南:For the best experience with Windows Update, follow these guidelines:

  • 每月至少使用6小时的设备,包括至少2小时的连续使用。Use devices for at least 6 hours per month, including at least 2 hours of continuous use.
  • 让设备定期收费。Keep devices regularly charged. 将设备插入到夜间可使其在活动时间之外自动更新。Plugging in devices overnight enables them to automatically update outside of active hours.
  • 请确保设备至少有 10 GB 的可用空间。Make sure that devices have at least 10 GB of free space.
  • 为设备提供对 Windows Update 服务的不具有障碍的访问权限。Give devices unobstructed access to the Windows Update service.

在接收 Windows 更新时管理最终用户体验Manage the end-user experience when receiving Windows Updates

适用于企业的 Windows 更新提供帮助满足组织的安全标准以及提供出色的最终用户体验的控件。Windows Update for Business provides controls to help meet your organization’s security standards as well as provide a great end-user experience. 这样做的目的是让你能够在你的组织中的人员工作良好的时候设置自动更新,并设置质量和功能更新的截止日期。We do this by enabling you to set automatic updates at times that work well for people in your organization and set deadlines for quality and feature updates. 由于 Windows 更新包含内置的智能,因此最好使用较少的控件来管理用户体验。Because Windows Update includes built-in intelligence, it's better to use fewer controls to manage the user experience.

推荐的体验设置Recommended experience settings

智能繁忙检查 (的功能可确保用户在登录) 和活动时间时不会发生更新,这有助于为最终用户提供最佳体验,同时使设备更安全和最新。Features like the smart busy check (which ensure updates don't happen when a user is signed in) and active hours help provide the best experience for end users while keeping devices more secure and up to date. 请按照以下步骤利用这些功能:Follow these steps to take advantage of these features:

  1. 如果未设置或启用重新启动策略,则自动下载、安装和重新启动 (默认值) Automatically download, install, and restart (default if no restart policies are set up or enabled)
  2. 使用默认通知Use the default notifications
  3. 设置更新截止日期Set update deadlines
设置截止日期Setting deadlines

) 2019 年6月发布的符合性截止时间策略 (使你可以为功能和质量更新设置单独的截止时间和宽限期。A compliance deadline policy (released in June 2019) enables you to set separate deadlines and grace periods for feature and quality updates.

通过此策略,你可以指定必须在设备上安装更新发布日期的天数。This policy enables you to specify the number of days from an update's publication date that it must be installed on the device. 该策略还包括一个可配置的宽限期,指定设备上安装更新的天数,直到设备被迫重启。The policy also includes a configurable grace period that specifies the number of days from when the update is installed on the device until the device is forced to restart. 这种方法在度假方案中很有用,因为它允许的用户在休假后被迫重启其设备之前已有很长时间。This approach is useful in a vacation scenario as it allows, for example, users who have been away to have a bit of time before being forced to restart their devices when they return from vacation.

更新基线Update Baseline

为 Windows 10 提供的大量不同策略可能很大。The large number of different policies offered for Windows 10 can be overwhelming. 更新基线为希望获得最佳用户体验同时满足其更新合规性目标的 IT 管理员提供了建议的 Windows 更新策略设置的清晰列表。Update Baseline provides a clear list of recommended Windows update policy settings for IT administrators who want the best user experience while also meeting their update compliance goals. 适用于 Windows 10 的更新基线包括涵盖截止时间配置、重启行为、电源策略等的策略设置建议。The Update Baseline for Windows 10 includes policy settings recommendations covering deadline configuration, restart behavior, power policies, and more.

"更新基线" 工具包通过提供单个命令让 IT 管理员将更新基线应用到设备,从而使其更加轻松。The Update Baseline toolkit makes it easy by providing a single command for IT Admins to apply the Update Baseline to devices. 您可以从 下载中心获取更新基线工具包。You can get the Update Baseline toolkit from the Download Center.

备注

"更新基线" 工具包仅适用于组策略。The Update Baseline toolkit is available only for Group Policy. 无论你使用的是延迟还是目标版本,更新基准不会影响你的服务策略,而无论你是使用还是目标版本管理你的设备提供的更新。Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices when.