Support Tip: Troubleshooting Windows 10 Update Ring Policies

Thanks for the posting, Mingzhe - very informative. I'd like to ask what are your thoughts in regards to user-based assignment of update rings. Using user (rather than device) groups for assignment seems appealing to us in that user groups could be easier to administer than device groups. What are the implications, however? For example, you could have different users, possibly with different update rings assigned, logging into the same machine. Is there a precedence of which update settings will persist? Based on the documentation at https://docs.microsoft.com/en-us/windows/deployment/update/waas-servicing-channels-windows-10-updates#switching-channels you cannot always switch channels in the lifetime of a device, so that implies if a user with insider policy logs into a device (e.g. an IT support person), then they could upgrade that device into the insider ring without a possibility to switch back? It seems safer to user device groups to get a more deterministic outcome of update settings, but have you (or anyone reading this) tried user group assignment of update rings and if so, what was your experience?