設定要同步處理的分類和產品Configure classifications and products to synchronize

適用於:Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

根據您在軟體更新點元件內容中指定的設定,Configuration Manager 在同步處理期間會擷取軟體更新中繼資料。Software updates metadata is retrieved during the synchronization process in Configuration Manager based on the settings that you specify in the Software Update Point component properties. 第一次同步處理軟體更新後,或發行新產品和分類時,您必須移至 [內容] 選取新的項目。After you synchronize software updates for the first time, or when new products and classifications are released, you must go to the properties to select the new items. 利用下列程序設定要同步處理的分類和產品。Use the following procedure to configure classifications and products to synchronize.

注意

本節中的程序僅適用於頂層站台。Use the procedure from this section only on the top-level site.

若要設定要同步處理的分類和產品To configure classifications and products to synchronize

  1. Configuration Manager 主控台中,瀏覽至 [管理] > [站台設定] > [站台]。In the Configuration Manager console, navigate to Administration > Site Configuration > Sites.

  2. 選取管理中心網站或獨立主要站台。Select the central administration site or the stand-alone primary site.

  3. 在 [首頁] 索引標籤的 [設定] 群組中,按一下 [設定站台元件] ,然後按一下 [軟體更新點] 。On the Home tab, in the Settings group, click Configure Site Components, and then click Software Update Point.

  4. 在 [分類] 索引標籤上,指定要同步處理其軟體更新的軟體更新分類。On the Classifications tab, specify the software update classifications for which you want to synchronize software updates.

    每個軟體更新都利用有助於組織不同類型更新的更新分類來加以定義。Every software update is defined with an update classification that helps to organize the different types of updates. 在同步處理程序期間,將會同步處理指定分類的軟體更新中繼資料。During the synchronization process, the software updates metadata for the specified classifications are synchronized. Configuration Manager 提供了同步處理下列更新分類之軟體更新的功能:Configuration Manager provides the ability to synchronize software updates with the following update classifications:

    • 重大更新:針對特定問題指定大規模發行的修正程式,以解決與安全性無關的重大 Bug。Critical Updates: Specifies a widely released fix for a specific problem that addresses a critical, non-security-related bug.
    • 定義更新:指定大規模發行且經常性的軟體更新,其中包含新增至產品定義資料庫的項目。Definition Updates: Specifies a widely released and frequent software update that contains additions to a product's definition database.
    • Feature Pack:指定產品版本範圍以外第一次發佈的新產品功能,以及一般包含在下一個完整產品版本的功能。Feature Packs: Specifies new product functionality that is first distributed outside of a product release and that's typically included in the next full product release.
    • 安全性更新:針對產品特定、與安全相關的弱點,指定大規模發行的修正程式。Security Updates: Specifies a widely released fix for a product-specific, security-related vulnerability.
    • Service Pack:指定經過測試的所有 Hotfix、安全性更新、重大更新和更新積存組合,全部都會套用至產品。Service Packs: Specifies a tested, cumulative set of all hotfixes, security updates, critical updates, and updates that are applied to a product. 此外,Service Pack 也可能包含其他修正程式來解決從產品發行以來在內部發現的問題。Additionally, service packs may contain additional fixes for problems that are found internally since the release of the product.
    • 工具:指定有助於完成一項或多項工作的公用程式或功能。Tools: Specifies a utility or feature that helps to complete one or more tasks.
    • 更新彙總套件:指定經過測試的 Hotfix、安全性更新、重大更新和更新積存組合,全部封裝在一起以方便部署。Update Rollups: Specifies a tested, cumulative set of hotfixes, security updates, critical updates, and updates that are packaged together for easy deployment. 更新彙總套件一般處理特定領域,例如安全性或產品元件。An update rollup generally addresses a specific area, such as a security or product component.
    • 更新:針對特定問題指定大規模發行的修正程式。Updates: Specifies a widely released fix for a specific problem. 更新會解決與安全性無關的非重大 Bug。An update addresses a non-critical, non-security-related bug.
    • 升級:指定 Windows 10 特性與功能的升級。Upgrade: Specifies an upgrade for Windows 10 features and functionality. 這些更新也稱為 Windows 10 作業系統的功能更新。These updates are also known as feature updates for Windows 10 operating systems. 您的軟體更新點及網站至少須執行 WSUS 6.2 (含 Hotfix 3095113),才能取得升級分類。Your software update points and sites must run a minimum of WSUS 6.2 with the hotfix 3095113 to get the Upgrade classification. 如需安裝此更新和其他更新以進行升級的詳細資訊,請參閱軟體更新的必要條件For more information about installing this update and other updates for Upgrades, see Prerequisites for software updates.

    注意

    您可以選取 [Include Microsoft Surface drivers and firmware updates] (包含 Microsoft Surface 驅動程式與韌體更新) 核取方塊,以同步處理 Microsoft Surface 驅動程式。You can select the Include Microsoft Surface drivers and firmware updates checkbox to synchronize Microsoft Surface drivers. 所有軟體更新點必須都執行 Windows Server 2016 或更新版本,才能順利同步處理 Surface 驅動程式。All software update points must run Windows Server 2016 or later to successfully synchronize Surface drivers. 如果您在啟用 Surface 驅動程式之後,於執行 Windows Server 2012 的電腦上啟用軟體更新點,則驅動程式更新的掃描結果會不正確。If you enable a software update point on a computer running Windows Server 2012 after you enable Surface drivers, the scan results for the driver updates are not accurate. 這會導致 Configuration Manager 主控台和 Configuration Manager 報告中顯示不正確的相容性資料。This results in incorrect compliance data displayed in the Configuration Manager console and in Configuration Manager reports. 如需詳細資訊,請參閱使用 Configuration Manager 管理 Surface 驅動程式For more information, see Manage Surface drivers with Configuration Manager.

  5. 在 [產品] 索引標籤上,指定要同步處理其軟體更新的產品,然後按一下 [關閉] 。On the Products tab, specify the products for which you want to synchronize software updates, and then click Close.

    • Configuration Manager 儲存了一份產品及產品系列清單,您第一次安裝軟體更新點時就是在這份清單中選擇。Configuration Manager stores a list of products and product families from which you can choose when you first install the software update point. 在您完成軟體更新同步處理之前,可能無法選取在 Configuration Manager 發行後發行的產品和產品系列,因為同步處理會更新可供您選擇的可用產品和產品系列清單。Products and product families that are released after Configuration Manager is released might not be available to select until you complete software updates synchronization, which updates the list of available products and product families from which you can choose.

    • 各個軟體更新的中繼資料會針對適用的更新定義產品。The metadata for each software update defines the products for which the update is applicable. 產品即為特定版本的作業系統或應用程式 (例如 Windows Server 2012)。A product is a specific edition of an operating system or application, such as Windows Server 2012. 而產品系列則是指衍生出個別產品的基礎作業系統或應用程式。A product family is the base operating system or application from which the individual products are derived. 產品系列的範例有 Windows,Windows Server 2012 就是其中的成員。An example of a product family is Windows, of which Windows Server 2012 is a member. 您可以指定產品系列或產品系列中的個別產品。You can specify a product family or individual products within a product family. 您選取的產品越多,同步處理軟體更新的時間就越長。The more products that you select, the longer it takes to synchronize software updates.

    • 當軟體更新適用於多項產品,而且至少已選取其中一項產品要進行同步處理時,即使您並未選取全部產品,Configuration Manager 主控台也會顯示所有產品。When software updates are applicable to multiple products, and at least one of the products was selected for synchronization, all of the products appear in the Configuration Manager console even if some products weren't selected. 例如,如果您只選取 Windows Server 2012 作業系統,而軟體更新適用於 Windows 8 和 Windows Server 2012,則這兩項產品都會顯示在 Configuration Manager 主控台中。For example, if Windows Server 2012 is the only operating system that you selected, and if a software update applies to Windows 8 and Windows Server 2012, both products are displayed in the Configuration Manager console.

    注意

    Windows 10 1903 版及更新版本已新增到 Microsoft Update 成為該產品的一部分,而不再像舊版,隸屬於 Windows 10 產品。Windows 10, version 1903 and later was added to Microsoft Update as its own product rather than being part of the Windows 10 product like earlier versions. 此變更導致您需要執行一些手動步驟以確保您的用戶端可看到這些更新。This change caused you to do a number of manual steps to ensure that your clients see these updates. 我們已協助減少您必須為 Configuration Manager 1906 版新產品進行的手動步驟數量。We've helped reduce the number of manual steps you have to take for the new product in Configuration Manager version 1906.

    當您更新至 Configuration Manager 1906 版並選取 Windows 10 產品進行同步處理時,下列動作會自動執行:When you update to Configuration Manager version 1906 and have the Windows 10 product selected for synchronization, the following actions occur automatically:

    • 新增 Windows 10 1903 版和更新版本產品以進行同步處理。The Windows 10, version 1903 and later product is added for synchronization.
    • 包含 Windows 10 產品的自動部署規則將會更新,以包含 Windows 10 1903 版和更新版本Automatic Deployment Rules containing the Windows 10 product will be updated to include Windows 10, version 1903 and later.
    • 服務方案會更新以包含 Windows 10 1903 版和更新產品。Servicing plans are updated to include the Windows 10, version 1903 and later product.

設定 Windows 10 各版本的產品Configuring products for versions of Windows 10

Windows 10 1909 版Windows 10, version 1909

Windows 10 1909 版與 Windows 10 1903 版共用通用的核心作業系統。Windows 10, version 1909 shares a common core operating system with Windows 10, version 1903. 這兩個版本都由相同的累積更新服務。Both of these versions are serviced with the same cumulative updates. 如需 Windows 10 1909 版的詳細資訊,請參閱 Windows 10 1909 版傳遞選項 (英文) 部落格文章。For more information about Windows 10, version 1909, see the Windows 10, version 1909 delivery options blog post.

確保您的 Windows 10 1909 版和 Windows 10 1903 版用戶端從 Configuration Manager 安裝更新:To make sure both your Windows 10 version 1909 and Windows 10, version 1903 clients install updates from Configuration Manager:

  • 核准 Windows 10 1909 版和 1903 版的更新。Approve updates for both the 1909 and 1903 versions of Windows 10.
    • 針對每個作業系統版本,更新各有不同的標題和適用性規則。The updates have different titles and applicability rules for each OS version.
    • 核准每個版本和每個 OS 架構的每項更新,會維護系統管理員的一般核准程序。Approving each update per version and architecture of the OS maintains the normal approval process for admins.
  • Windows 10 1909 版和 1903 版的累積更新安裝檔案相同。The cumulative update installation files are the same for both the 1909 and 1903 versions of Windows 10.
    • Configuration Manager 只會下載一次更新來源檔案。Configuration Manager will only download the update source files once.

Windows 10 1909 版的功能更新Feature Updates for Windows 10, version 1909

當核准 Windows 10 1909 版的功能更新時,您會看到幾個不同的選項:When you approve feature updates for Windows 10, version 1909, there are a few different options you'll see:

  • 2019 年 11 月 12 日發行的啟用套件,可供 Windows 10 1903 版用戶端使用。Windows 10, version 1903 clients are offered an Enablement Package, released November 12, 2019.

    • 啟用套件是小型的快速安裝檔案,可啟用 Windows 10 1909 版的功能,且會重新啟動裝置。The enablement package is a small, quick to install file that activates the Windows 10, version 1909 features and restarts the device.

    • 啟用套件的必要條件包括:Prerequisites for the enablement package include:

      • KB4517389 的最小累積更新,發行於 2019 年 10 月 8 日。A minimum cumulative update of KB4517389, released October 8, 2019.
      • KB4520390 的最低服務堆疊更新,發行於 2019 年 9 月 24 日。A minimum servicing stack update of KB4520390, released September 24, 2019.
    • 此更新與任何其他功能更新一樣無法從 https:\\catalog.update.microsoft.com 匯入。This update, like any other Feature Update, isn't available for import from https:\\catalog.update.microsoft.com.

    • 如果您有 Windows 10 1903 版及更新版本的產品,並已選取要同步處理的 [升級] 分類,則更新會自動與 WSUS 同步。The update will automatically synchronize with WSUS if you have the Windows 10, version 1903 and later product and Upgrades classification selected for synchronization.

    • 在 Configuration Manager 主控台中,前往 [軟體程式庫] 工作區、展開 [Windows 10 服務],然後選取 [所有 Windows 10 更新] 節點。In the Configuration Manager console, go to the Software Library workspace, expand Windows 10 Servicing, and select the All Windows 10 Updates node. 搜尋「啟用」或 "4517245" 字詞。Search for the terms "enablement" or "4517245".

      提示

      由於這些是功能更新,所以不位於 [所有軟體更新] 節點中。Since these are feature updates, they aren't in the All Software Updates node.

  • Windows 10 1809 版及較舊版用戶端會透過單一直接功能更新進行升級。Windows 10, version 1809 and earlier clients are upgraded with a single direct feature update.

    • 這就像是您為 Windows 10 安裝的所有其他先前功能更新一樣。This is just like all other previous installations for Feature Updates that you've done for Windows 10.

注意

不論使用哪一種路徑來安裝,啟用套件和 Windows 10 1909 版的傳統功能更新都會在報告中顯示為「已安裝」。Both the enablement package and the traditional feature update for Windows 10, version 1909 will show as "Installed" in reporting, regardless of which path was used to install it.

Windows 10 1903 版與更新版本Windows 10, version 1903 and later

Windows 10 1903 版和更新版本已作為其專屬產品新增至 Microsoft Update,而不是像舊版一樣作為 Windows 10 產品的一部分。Windows 10, version 1903 and later was added to Microsoft Update as its own product rather than being part of the Windows 10 product like earlier versions. 此變更導致您需要執行一些手動步驟以確保您的用戶端可看到這些更新。This change caused you to do a number of manual steps to ensure that your clients see these updates. 我們已協助減少您必須為 Configuration Manager 1906 版新產品進行的手動步驟數量。We've helped reduce the number of manual steps you have to take for the new product in Configuration Manager version 1906.

搭配 Configuration Manager 1906 版的 Windows 10 1903 版及更新版本Windows 10, version 1903 and later with Configuration Manager version 1906

當您更新至 Configuration Manager 1906 版並選取 Windows 10 產品進行同步處理時,下列動作會自動執行:When you update to Configuration Manager version 1906 and have the Windows 10 product selected for synchronization, the following actions occur automatically:

  • 新增 Windows 10 1903 版和更新版本產品以進行同步處理。The Windows 10, version 1903 and later product is added for synchronization.
  • 包含 Windows 10 產品的自動部署規則將會更新,以包含 Windows 10 1903 版和更新版本Automatic Deployment Rules containing the Windows 10 product will be updated to include Windows 10, version 1903 and later.
  • 服務方案會更新以包含 Windows 10 1903 版和更新產品。Servicing plans are updated to include the Windows 10, version 1903 and later product.

搭配 Configuration Manager 1902 版的 Windows 10 1903 版及更新版本Windows 10, version 1903 and later with Configuration Manager version 1902

如果您使用 Configuration Manager 1902 搭配 Windows 10 1903 版用戶端,則必須:If you are using Configuration Manager 1902 with Windows 10,version 1903 clients, you'll need to:

  • 選取 [Windows 10 1903 及更新版本] 產品以進行同步。Select the Windows 10, version 1903 and later product for synchronization.
  • 更新 Windows 10 1903 版用戶端的任何自動部署規則Update any Automatic Deployment Rules for Windows 10, version 1903 clients.
  • 更新 Windows 10 1903 版用戶端的服務方案Update Servicing plans for Windows 10, version 1903 clients.

Windows 測試人員計畫Windows Insider Program

從 2019 年 9 月開始,您可以使用 Configuration Manager 為執行 Windows Insider Preview 組建的裝置進行維護及更新。Starting in September 2019, you can service and update devices running Windows Insider Preview builds with Configuration Manager. 此變更表示您可以在不變更您正常程序或啟用商務用 Windows Update 的情況下管理這些裝置。This change means you can manage these devices without changing your normal processes or enabling Windows Update for Business. 您可以將適用於 Windows Insider Preview 組建的更新與累積更新下載到 Configuration Manager,就像任何其他 Windows 10 更新或升級一樣。You can download Feature Updates and Cumulative Updates for Windows Insider Preview builds into Configuration Manager just like any other Windows 10 update or upgrade. 如需詳細資訊,請參閱將發行前版本 Windows 10 功能更新發佈至 WSUS (英文) 部落格文章。For more information, see the Publishing pre-release Windows 10 Feature Updates to WSUS blog post.

如需 Configuration Manager 中 Windows 測試人員支援的詳細資訊,請參閱 Windows 10 的支援For more information about support for Windows Insider in Configuration Manager, see Support for Windows 10.

先決條件Prerequisites

啟用 Windows 測試人員的升級和更新Enable Windows Insider upgrades and updates

您必須啟用產品和分類以進行 Windows 測試人員升級和更新。You need to enable the products and classifications for Windows Insider upgrades and updates. Windows 測試人員的功能更新、累積更新和其他更新,都位於 Windows 測試人員發行前版本產品類別下方。Feature Updates, Cumulative updates, and other updates for Windows Insider are under the Windows Insider Pre-Release product category.

  1. Configuration Manager 主控台中,瀏覽至 [管理] > [站台設定] > [站台] 。In the Configuration Manager console, navigate to Administration > Site Configuration > Sites.
  2. 選取管理中心網站或獨立主要站台。Select the central administration site or the stand-alone primary site.
  3. 在 [首頁] 索引標籤的 [設定] 群組中,按一下 [設定站台元件] ,然後按一下 [軟體更新點] 。On the Home tab, in the Settings group, click Configure Site Components, and then click Software Update Point.
  4. 請確認已在 [產品] 索引標籤上選取下列產品進行同步處理:On the Products tab, make sure the following products are selected for synchronization:
    • Windows 測試人員發行前版本Windows Insider Pre-Release
    • Windows 10 1903 版與更新版本Windows 10, version 1903 and later
  5. 請確認已在 [分類] 索引標籤上選取下列分類進行同步處理:On the Classifications tab, make sure the following classifications are selected for synchronization:
    • 升級Upgrades
    • 安全性更新Security Updates
    • 更新 (選擇性)Updates (optional)
  6. 按一下 [確定] 以關閉 [軟體更新點元件內容] 。Click OK to close the Software Update Point Component Properties.

升級 Windows 測試人員裝置Upgrading Windows Insider devices

在同步處理 Windows 測試人員的升級後,您就可以從 [軟體程式庫] > [Windows 10 服務] > [所有 Windows 10 更新] 看到這些升級。Once the upgrades for Windows Insiders are synchronized, you can see them from Software Library > Windows 10 Servicing > All Windows 10 Updates.

Windows 10 服務的 Windows 測試人員功能更新

如同任何其他升級一樣,將 Windows 測試人員的功能更新部署到目標集合。Deploy Feature Updates for Windows Insider to your target collection just like any other upgrade. 不過,建議您在部署這些功能更新時考量下列項目:However, you'll want to keep the following items in mind when you're deploying these Feature Updates:

如需如何部署升級的詳細資訊,請參閱管理 Windows 即服務For more information on how to deploy upgrades, see Manage Windows as a service.

將測試人員裝置保持在最新狀態Keeping Insider devices up-to date

Windows 測試人員的累積更新將透過 Configuration Manager 延伸模組提供給 WSUS。Cumulative Updates for Windows Insider will be available for WSUS and by extension for Configuration Manager. 這些累積更新將會以類似於 Windows 10 1903 版累積更新的頻率來發行。These Cumulative Updates will be released at a frequency similar to Windows 10 version 1903 Cumulative Updates. Windows 測試人員累積更新位於 Windows 測試人員發行前版本產品類別中,分類為安全性更新更新The Windows Insider Cumulative updates are in the Windows Insider Pre-Release product category and classified as either Security Updates or Updates. 您可以使用一般軟體更新程式 (例如使用自動部署規則階段式部署),以部署 Windows 測試人員的累積更新。You can deploy the Cumulative Updates for Windows Insider using your regular software update process like using automatic deployment rules or phased deployments.

延長安全性更新與 Configuration ManagerExtended Security Updates and Configuration Manager

延長安全性更新 (ESU) 計畫是需要在特定舊版 Microsoft 產品超過終止支援日期之後繼續使用該產品的最後選項。The Extended Security Updates (ESU) program is a last resort option for customers who need to run certain legacy Microsoft products past the end of support. 它包括產品延伸支援終止日期之後最長三年的重大和/或重要安全性更新 (如 Microsoft 安全回應中心 (MSRC) 所定義)。It includes Critical and/or Important security updates (as defined by the Microsoft Security Response Center (MSRC)) for a maximum of three years after the product's End of Extended Support date.

已超出其支援生命週期的產品不支援搭配 Configuration Manager 使用。Products that are beyond their support lifecycle aren't supported for use with Configuration Manager. 這包括 ESU 計畫涵蓋的任何產品。This includes any products that are covered under the ESU program. 例如,Windows 7。For example, Windows 7. 依 ESU 計畫發行的安全性更新將會發佈到 Windows Server Update Services (WSUS)。Security updates released under the ESU program will be published to Windows Server Update Services (WSUS). 這些更新將會出現在 Configuration Manager 主控台中。These updates will appear in the Configuration Manager console. 雖然 ESU 計畫涵蓋的產品已不再支援搭配 Configuration Manager 使用,但 Configuration Manager 最新分支的最新發行版本可用來部署及安裝依該計畫發行的 Windows 安全性更新。While products that are covered under the ESU program are no longer supported for use with Configuration Manager, the latest released version of Configuration Manager current branch can be used to deploy and install Windows security updates released under the program. 最新發行版本也可以用來將 Windows 10 部署到執行 Windows 7 的裝置。The latest released version can also be used to deploy Windows 10 to devices running Windows 7.

與 Windows 軟體更新管理或 OS 部署無關的用戶端管理功能,將不再於 ESU 計畫涵蓋的作業系統上測試,而且我們不保證這些功能將可繼續運作。Client management features not related to Windows software update management or OS deployment will no longer be tested on the operating systems covered under the ESU program and we don't guarantee that they'll continue to function. 強烈建議您儘快升級或移轉到最新的作業系統版本,以接收用戶端管理支援。It's highly recommended to upgrade or migrate to a current version of the operating systems as soon as possible to receive client management support.

後續步驟Next steps

開始軟體更新同步處理,根據新準則擷取軟體更新。Start software updates synchronization to retrieve software updates based on the new criteria. 如需詳細資訊,請參閱同步處理軟體更新For more information, see Synchronize software updates.