什麼是商務用 Windows Update?What is Windows Update for Business?

適用對象:Applies to

  • Windows 10Windows 10

商務用 Windows Update 是一項免費服務,適用于所有進位版,包括 Windows 10 專業版、企業版、專業版工作站和教育版。Windows Update for Business is a free service that is available for all premium editions including Windows 10 Pro, Enterprise, Pro for Workstation, and Education editions.

正在尋找消費者資訊嗎?Looking for consumer information? 請參閱 Windows Update:常見問題集See Windows Update: FAQ

Windows 商務用更新可讓 IT 系統管理員直接將這些系統連接到 Windows Update 服務,讓組織中的 Windows 10 裝置隨時保持在最新狀態,並採用最新的安全性防護和 Windows 功能。Windows Update for Business enables IT administrators to keep the Windows 10 devices in their organization always up to date with the latest security defenses and Windows features by directly connecting these systems to Windows Update service. 您可以使用群組原則或行動裝置管理 (MDM) 解決方案 ,例如 Microsoft Intune 來設定控制 Windows 10 裝置更新方式及更新時間的商務用 Windows Update 設定。You can use Group Policy or Mobile Device Management (MDM) solutions such as Microsoft Intune to configure the Windows Update for Business settings that control how and when Windows 10 devices are updated.

具體來說,商務用 Windows Update 可讓您在部署整個組織的更新之前,控制更新產品與體驗,以允許在一組裝置上進行可靠性與績效測試。Specifically, Windows Update for Business lets you control update offerings and experiences to allow for reliability and performance testing on a subset of devices before deploying updates across the organization. 它也為貴組織人員提供正面的更新體驗。It also provides a positive update experience for people in your organization.

我可以使用商務用 Windows Update 執行哪些操作?What can I do with Windows Update for Business?

商務用 Windows Update 可讓商業客戶管理何時收到哪些 Windows 更新,以及裝置收到更新時的體驗。Windows Update for Business enables commercial customers to manage which Windows Updates are received when as well as the experience a device has when it receives them.

您可以使用行動裝置管理 (MDM) 工具 ,例如 Microsoft Intune 或群組原則管理工具 ,例如本機群組策略或群組原則管理主控台 (GPMC) ,以及其他各種非 Microsoft 管理工具,來控制商務用 Windows Update 政策。You can control Windows Update for Business policies by using either Mobile Device Management (MDM) tools such as Microsoft Intune or Group Policy management tools such as local group policy or the Group Policy Management Console (GPMC), as well as a variety of other non-Microsoft management tools. MDM 會使用組 (提供者) 群組原則,而非群組原則。MDMs use Configuration Service Provider (CSP) policies instead of Group Policy. Intune 還會使用雲端策略。Intune additionally uses Cloud Policies. 並非所有策略都提供雲端解決方案 (、群組原則或雲端策略的所有) 。Not all policies are available in all formats (CSP, Group Policy, or Cloud policy).

管理 Windows 更新的部署Manage deployment of Windows Updates

使用商務用 Windows Update,您可以控制哪些類型的 Windows Update 會提供給您生態系統中的裝置、何時會採用更新,以及以波浪方式部署至貴組織的裝置。By using Windows Update for Business, you can control which types of Windows Updates are offered to devices in your ecosystem, when updates are applied, and deployment to devices in your organization in waves.

管理提供哪些更新Manage which updates are offered

商務用 Windows Update 可讓 IT 系統管理員接收和管理各種不同類型的 Windows 更新。Windows Update for Business enables an IT administrator to receive and manage a variety of different types of Windows Updates.

由商務用 Windows Update 管理的更新類型Types of updates managed by Windows Update for Business

商務用 Windows Update 提供 Windows 10 裝置數種更新類型的管理原則:Windows Update for Business provides management policies for several types of updates to Windows 10 devices:

  • 功能更新: 先前稱為「升級」的功能更新不僅包含安全性和品質修訂,也包含重要的功能新增和變更。Feature updates: Previously referred to as "upgrades," feature updates contain not only security and quality revisions, but also significant feature additions and changes. 功能更新在秋季和春季會每半年發佈一次。Feature updates are released semi-annually in the fall and in the spring.
  • 品質更新: 品質更新是傳統的作業系統更新,通常于每個月的第二個星期二發佈 (不過這些更新可于) 。Quality updates: Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). 其中包括安全性、重大以及驅動程式更新。These include security, critical, and driver updates. 商務用 Windows Update 也會將非 Windows 更新 (例如 Microsoft Office 或 Visual Studio) 視為品質更新。Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office or Visual Studio) as quality updates. 這些非 Windows 更新稱為「Microsoft 更新」,您可以將裝置設定為 (或) 連同其 Windows 更新一起接收這類更新。These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates.
  • 驅動程式更新: 與裝置相關的非 Microsoft 驅動程式更新。Driver updates: Updates for non-Microsoft drivers that are relevant to your devices. 驅動程式更新預設為開啟,但您可以視需要使用商務用 Windows Update 政策來關閉。Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer.
  • Microsoft 產品更新:其他 Microsoft 產品的更新,例如使用 Windows Installer (MSI) 。Microsoft product updates: Updates for other Microsoft products, such as versions of Office that are installed by using Windows Installer (MSI). 使用按一下即用安裝的 Office 版本無法使用商務用 Windows Update 更新。Versions of Office that are installed by using Click-to-Run can't be updated by using Windows Update for Business. 產品更新預設為關閉。Product updates are off by default. 您可以使用商務用 Windows Update 政策來開啟它們。You can turn them on by using Windows Update for Business policies.

提供Offering

您可以控制更新的適用時間,例如延遲在裝置上安裝更新的時間,或暫停更新一段時間。You can control when updates are applied, for example by deferring when an update is installed on a device or by pausing updates for a certain period.

管理何時提供更新Manage when updates are offered

您可以將更新的安裝延後或暫停一段設定的時間。You can defer or pause the installation of updates for a set period of time.

註冊發行前更新Enroll in pre-release updates

分支就緒等級可讓系統管理員指定他們想要接收的功能更新通道。The branch readiness level enables administrators to specify which channel of feature updates they want to receive. 今天,有適用于發行前和發行更新的分支就緒等級選項:Today there are branch readiness level options for both pre-release and released updates:

  • Windows 測試人員快速Windows Insider Fast
  • Windows 測試人員慢速Windows Insider Slow
  • Windows 測試人員 - 發行預覽Windows Insider Release Preview
  • 半年通道Semi-Annual Channel

在 Windows 10 版本 1903 之前,有兩個通道可發佈更新:Semi-Annual 通道和 Semi-Annual 通道 (已) 。Prior to Windows 10, version 1903, there are two channels for released updates: Semi-Annual Channel and Semi-Annual Channel (Targeted). 順延天數是根據所選頻道的發行日期計算。Deferral days are calculated against the release date of the chosen channel. 從 Windows 10 開始,版本 1903 只有一個發行通道:Semi-Annual通道。Starting with Windows 10, version 1903 there is only the one release channel: Semi-Annual Channel. 所有延後天數都是根據發行日期與Semi-Annual日期計算。All deferral days are calculated against a release’s Semi-Annual Channel release date. 有關確切的發行日期,請參閱 Windows 發行資訊For exact release dates, see Windows Release Information. 您可以使用選取預覽版建立和功能更新為接收時的政策來 設定分支準備等級You can set the branch readiness level by using the Select when Preview Builds and Feature Updates are Received policy. 若要使用此策略來管理測試版建立,首先請使用管理預覽版建立策略啟用 預覽版To use this policy to manage pre-release builds, first enable preview builds by using the Manage preview Builds policy.

延後更新Defer an update

商務用 Windows Update 系統管理員可以在從 Windows Update 服務第一次提供這些更新的有限時間內,將功能和品質更新的安裝從部署到裝置。A Windows Update for Business administrator can defer the installation of both feature and quality updates from deploying to devices within a bounded range of time from when those updates are first made available on the Windows Update service. 您可以使用此延遲來允許將部署推送到裝置時驗證部署。You can use this deferral to allow time to validate deployments as they are pushed to devices. 延後功能可允許您指定更新發行後的天數,再將更新提供給裝置。Deferrals work by allowing you to specify the number of days after an update is released before it is offered to a device. 也就是說,如果您設定 365 天的功能更新延後期間,裝置將不會安裝已發行少於 365 天的功能更新。That is, if you set a feature update deferral period of 365 days, the device will not install a feature update that has been released for less than 365 days. 若要延後功能更新,請使用選取預覽版 建立和功能更新為已接收 時的政策。To defer feature updates, use the Select when Preview Builds and Feature Updates are Received policy.

類別Category 延遲期間上限Maximum deferral period
功能更新Feature updates 365 天365 days
品質更新Quality updates 30 天30 days
不可延遲Non-deferrable 無 (none)none

暫停更新Pause an update

如果您在部署功能或品質更新時發現問題,IT 系統管理員可以將更新從指定的開始日期暫停 35 天,以防止其他裝置安裝更新,直到問題減輕為止。If you discover a problem while deploying a feature or quality update, the IT administrator can pause the update for 35 days from a specified start date to prevent other devices from installing it until the issue is mitigated. 如果您暫停功能更新,系統仍然會提供品質更新給裝置,以確保裝置安全。If you pause a feature update, quality updates are still offered to devices to ensure they stay secure. 功能和品質更新的暫停期間會從您設定開始日期計算。The pause period for both feature and quality updates is calculated from a start date that you set.

若要暫停功能更新,請使用選取**** 何時收到預覽版和功能更新,並暫停品質更新,請使用選取收到品質更新時的政策。To pause feature updates, use the Select when Preview Builds and Feature Updates are Received policy and to pause quality updates use the Select when Quality Updates are Received policy. 詳細資訊,請參閱暫停功能更新和暫停品質更新For more information, see Pause feature updates and Pause quality updates.

內建優點:從 Windows Update 更新時,您可以取得內建相容性檢查的新增優點,以防止裝置有不佳的更新體驗,以及防止重複的卷起。Built-in benefits: When updating from Windows Update, you get the added benefits of built-in compatibility checks to prevent against a poor update experience for your device as well as a check to prevent repeated rollbacks.

建議Recommendations

為了獲得最佳 Windows Update 體驗,請遵循下列指導方針:For the best experience with Windows Update, follow these guidelines:

  • 每個月使用裝置至少 6 小時,包括至少連續使用 2 小時。Use devices for at least 6 hours per month, including at least 2 hours of continuous use.
  • 定期為裝置充電。Keep devices regularly charged. 隔夜插入裝置,可讓裝置在使用時間以外自動更新。Plugging in devices overnight enables them to automatically update outside of active hours.
  • 請確定裝置至少有 10 GB 的可用空間。Make sure that devices have at least 10 GB of free space.
  • 提供裝置對 Windows Update 服務的無障礙存取權。Give devices unobstructed access to the Windows Update service.

在接收 Windows 更新時管理使用者體驗Manage the end-user experience when receiving Windows Updates

商務用 Windows Update 提供控制項,可協助符合貴組織的安全性標準,並提供出色的使用者體驗。Windows Update for Business provides controls to help meet your organization’s security standards as well as provide a great end-user experience. 我們可設定自動更新,以在適合貴組織人員的時間設定自動更新,並設定品質和功能更新的期限。We do this by enabling you to set automatic updates at times that work well for people in your organization and set deadlines for quality and feature updates. 由於 Windows Update 包含內建智慧,因此最好使用較少的控制項來管理使用者體驗。Because Windows Update includes built-in intelligence, it's better to use fewer controls to manage the user experience.

智慧忙碌檢查等功能 (可確保使用者在) 和使用中時間時不會發生更新,有助於為使用者提供最佳體驗,同時讓裝置更安全且最新。Features like the smart busy check (which ensure updates don't happen when a user is signed in) and active hours help provide the best experience for end users while keeping devices more secure and up to date. 請遵循下列步驟來利用這些功能:Follow these steps to take advantage of these features:

  1. 如果未設定或啟用任何重新開機 (,系統會自動下載、安裝及重新開機) Automatically download, install, and restart (default if no restart policies are set up or enabled)
  2. 使用預設通知Use the default notifications
  3. 設定更新期限Set update deadlines
設定期限Setting deadlines

2019 年 6 月 (發佈的合規性期限) 可讓您針對功能和品質更新設定不同的期限和寬限期。A compliance deadline policy (released in June 2019) enables you to set separate deadlines and grace periods for feature and quality updates.

此政策可讓您指定從更新的發佈日期起,必須在裝置上安裝的天數。This policy enables you to specify the number of days from an update's publication date that it must be installed on the device. 此政策也包含可配置的寬限期,指定從裝置上安裝更新到裝置強制重新開機的天數。The policy also includes a configurable grace period that specifies the number of days from when the update is installed on the device until the device is forced to restart. 這個方法在假期情境中很實用,例如,讓離開一段時間的使用者在休假回來時,必須重新開機裝置。This approach is useful in a vacation scenario as it allows, for example, users who have been away to have a bit of time before being forced to restart their devices when they return from vacation.

更新比較基準Update Baseline

Windows 10 提供許多不同的政策可能會非常龐大。The large number of different policies offered for Windows 10 can be overwhelming. 更新比較基準為想要獲得最佳使用者體驗,同時符合其更新合規性目標的 IT 系統管理員提供建議的 Windows 更新策略設定明確清單。Update Baseline provides a clear list of recommended Windows update policy settings for IT administrators who want the best user experience while also meeting their update compliance goals. Windows 10 的更新比較基準包含涵蓋期限設定、重新開機行為、電源策略等之策略設定建議。The Update Baseline for Windows 10 includes policy settings recommendations covering deadline configuration, restart behavior, power policies, and more.

更新比較基準工具組提供單一命令,讓 IT 系統管理員將更新比較基準適用于裝置,讓操作更加簡單。The Update Baseline toolkit makes it easy by providing a single command for IT Admins to apply the Update Baseline to devices. 您可以從下載中心取得更新比較 基準工具組You can get the Update Baseline toolkit from the Download Center.

注意

更新比較基準工具組僅適用于群組原則。The Update Baseline toolkit is available only for Group Policy. 更新比較基準不會影響您的方案政策,無論您是使用延後或目標版本來管理何時提供哪些更新給裝置。Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices when.