在 Intune 中管理 Windows 10 軟體更新Manage Windows 10 software updates in Intune

使用 Intune 從商務用 Windows Update 管理 Windows 10 軟體更新的安裝。Use Intune to manage the install of Windows 10 software updates from Windows Update for Business.

藉由使用「商務用 Windows Update」,您將可以簡化更新管理體驗。By using Windows Update for Business, you simplify the update management experience. 您不需要核准裝置群組的個別更新,也可以透過設定更新首度發行策略以管理環境中的風險。You don't need to approve individual updates for groups of devices and can manage risk in your environments by configuring an update rollout strategy. Intune 可讓您在裝置上設定更新設定,並可讓您將更新安裝延後。Intune provides the ability to configure update settings on devices and gives you the ability to defer update installation. 您也可以防止裝置安裝新版 Windows 的功能,以確保裝置的穩定性,同時允許這些裝置繼續安裝品質和安全性的更新。You can also prevent devices from installing features from new Windows versions to help keep them stable, while allowing those devices to continue installing updates for quality and security.

Intune 只會儲存更新原則指派,而不會儲存更新本身。Intune stores only the update policy assignments, not the updates themselves. 當您儲存原則時,Intune 會將設定詳細資料傳遞給 Windows Update,以決定要將哪些更新提供給每個裝置。When you save a policy, Intune passes the configuration details to Windows Update which then determines which updates will be offered to each device. 裝置會直接存取 Windows Update 以取得更新。Devices access Windows Update directly for the updates.

在 Windows 文件中深入了解 Windows 10 的「功能」和「品質」更新Learn more about Windows 10 feature and quality updates in the Windows documentation.

用於管理更新的原則類型Policy types to manage updates

Intune 提供下列原則類型來管理更新,您可以將這些更新指派給裝置群組:Intune provides the following policy types to manage updates, which you assign to groups of devices:

  • Windows 10 更新通道:此原則是用來設定 Windows 10 更新安裝時機的設定集合。Windows 10 update ring: This policy is a collection of settings that configures when Windows 10 updates get installed.

    執行 Windows 10 1607 版或更新版本的裝置支援更新通道。Update ring policies are supported for devices that run Windows 10 version 1607 or later.

  • Windows 10 功能更新 (公開預覽):此原則會將裝置更新到您指定的 Windows 版本,然後凍結這些裝置上的功能集版本。Windows 10 feature updates (public preview): This policy updates devices to the Windows version you specify, and then freezes the feature set version on those devices. 除非您選擇將凍結的項目更新為較新的 Windows 版本,否則會一直凍結為此版本。This version freeze remains in place until you choose to update them to a later Windows version. 雖然功能版本保持不變,但裝置可繼續安裝其功能版本可用的品質和安全性更新。While the feature version remains static, devices can continue to install quality and security updates that are available for their feature version.

    執行 Windows 10 1709 版或更新版本的裝置支援功能更新原則。Feature updates policies are supported for devices that run Windows 10 version 1709 or later.

從更新通道延期移至功能更新原則Move from update ring deferrals to feature updates policy

使用 Intune 來管理 Windows 10 更新時,您可以同時使用 更新 通道原則和更新延期,以及管理您想要在裝置上安裝之更新的 功能更新 原則。When using Intune to manage Windows 10 updates, it’s possible to use both update rings policy with update deferrals, and feature updates policy to manage the updates you want to install on devices. 如果您要使用功能更新,我們建議您使用更新通道原則中設定的延期來結束使用。If you’re using feature updates, we recommend you end use of deferrals as configured in your update rings policy. 將 [更新通道延期] 與 [功能更新] 原則結合,可能會產生可能會延遲更新安裝的複雜度。Combining update ring deferrals with feature updates policy can create complexity that might delay update installations. 您可以繼續使用更新通道的使用者經驗設定,因為它們不會在與功能更新原則結合時產生問題。You can continue to use the user experience settings from update rings, as they don’t create issues when combined with feature updates policy.

雖然沒有禁止使用這兩種原則類型來控制哪些更新可以安裝在裝置上,但是這樣做並沒有任何好處。While nothing prohibits use of both policy types to control which updates can install on a device, there is typically no advantage to doing so. 當兩種原則類型都套用至裝置時,必須符合這兩種原則類型的條件 (在裝置上提供適用的更新之前) 。When both policy types apply to a device, the conditions of both policy types must be met (be true) on the device before it’s offered an applicable update. 這種情況可能會導致更新未如預期般安裝,因為其中一種原則類型會封鎖。This scenario can lead to updates not installing as expected due to a block by one of the policy types.

規劃轉換Plan to transition

規劃管理從使用更新通道延期到功能更新的變更,讓 Windows Update 服務可以準備好部署您預期的更新。Plan to manage the change from using update ring deferrals to feature updates so that the Windows Update service can be ready to deploy the updates you expect.

  • 當建立或修改 Windows 10 更新的 Intune 原則時,Intune 會將原則詳細資料傳遞給 Windows Update,然後決定每個指派一或多個更新原則的裝置適用的更新。When Intune policies for Windows 10 updates are created or modified, Intune passes the policy details to Windows Update, which then determines the updates that are applicable for each device that’s assigned one or more update policies.

  • 評估裝置更新的程式最多可能需要10分鐘的時間才能完成,而且在某些情況下可能需要更長的時間。The process to evaluate updates for devices can take up to 10 minutes to complete, and in some cases might take a bit longer.

  • 如果裝置在延遲設定為零 之後 啟動掃描以進行更新,但在 Windows Update 完成功能更新原則的處理 之前 ,可以提供您未規劃的更新來安裝該裝置。If a device starts a scan for updates after a deferral has been set to zero or removed for the device, but before Windows Update completes the processing of the feature updates policy, that device can be offered an update you didn’t plan for it to install.

使用下列程式,以確保在移除延期之前,Windows Update 已處理您的功能更新原則。Use the following process to ensure Windows Update has processed your feature updates policy before deferrals are removed.

切換至功能更新原則Switch to feature updates policy

  1. 在 Microsoft 端點管理員系統管理中心,建立 功能更新原則 來設定您想要的 Windows 版本,並將它指派給適用的裝置。In the Microsoft Endpoint Manager admin center, create a feature updates policy that configures your desired Windows version, and assign it to applicable devices.

    將儲存的原則指派給裝置之後,Windows Update 需要幾分鐘的時間來處理原則。After the saved policy is assigned to devices, it will take a few minutes for Windows Update to process the policy.

  2. 在您繼續之前,請查看功能更新原則 (組織) 報告的 Windows 10 功能更新 ,並確認裝置的狀態為 OfferReadyView the Windows 10 feature updates (Organizational) report for the feature update policy, and verify devices have a state of OfferReady before you proceed. 一旦所有裝置都顯示 OfferReady,Windows Update 就會完成原則的處理。Once all devices show OfferReady, Windows Update has completed processing the policy.

  3. 當裝置驗證為處於 OfferReady 狀態之後,您可以安全地重新設定該同一組裝置的 Windows 10 更新通道原則 ,以將設定 功能更新延遲期間 (天) 變更為 0 的值。After devices are verified to be in the OfferReady state you can safely reconfigure the Windows 10 update ring policy for that same set of devices to change the setting Feature update deferral period (days) to a value of 0.

有更新時報告Reporting on updates

若要了解 Windows 10 更新通道原則的報告選項和 Windows 10 功能更新原則,請參閱更新的 Intune 合規性報表To learn about report options for Windows 10 update ring policy and Windows 10 feature updates policy, see Intune compliance reports for updates.

後續步驟Next steps