Forum Widgets
Latest Discussions
Windows Auto Patch vs Intune Update Rings
Does Microsoft have anything documented to explain the differences between Auto Patch and Update rings? Aside from the obvious of Microsoft managing Auto Patching, is that really the largest benefit here? We are currently investigating the use of Update rings vs Auto Patch. We have reviewed all of the Auto Patch documentation to date but was really hoping for some type of comparison of the two items if possible.Windows Autopatch resource guide
Looking for demos and other video content around Windows Autopatch? Bookmark this post! In this article, find guidance to: Autopatch news and insights Autopatch technical discussions What is Autopatch Demos and tutorials Troubleshooting Customer testimonials and the impact of Autopatch Watch Behind the screens with Windows Autopatch for news and insights April 2023 - (7 min.) Dive into the authentic customer feedback that has been shaping the Windows Autopatch service and get a look at what’s to come. February 2023 - (12 min.) What's the difference between Windows Update for Business, the Windows Update for Business deployment service, and Windows Autopatch? This episode breaks down these services, usage scenarios, and gives a sneak peek at what's to come. January 2023 - (10 min.) Learn how the addition of FastTrack support to #WindowsAutopatch can help you onboard the service and start doing more updating with less effort. November 2022 - (11 min.) IT pros: You have to juggle managing endpoints, providing technical support, updating software, maintaining security, and more. Windows Autopatch helps you do more with less. Explore how the upgraded device registration flow helps IT admins troubleshoot device issues, and how you, our customers, have helped improve the service and make it more secure. Inaugural episode! - (21 min.) Microsoft Ignite 2022 couldn't hold all of the epic and exciting Windows Autopatch news, so we launched a new web series to bring it all to you. Watch and learn about Autopatch Update power with Microsoft update management solutions - (3 min.) Endpoint updating solutions from Microsoft can improve security and productivity – watch this video to learn about the technologies that can give you more update power. Automate Windows 365 Enterprise patch management with Windows Autopatch - Windows in the Cloud - (31 min.) Find out you can spend less time managing updates for your organization and more time driving value. Don't miss this chance to learn about Windows Autopatch directly from the people who built it! Windows Autopatch, How it Works | Automate updates to Windows PCs and devices - Microsoft Mechanics - (11 min.) Watch as we reverse engineer the Windows Autopatch service to show how it works (within Intune and Azure Active Directory), how to get it running, and the time saving configurations it makes on your behalf. Start with these videos that answer, "What is Windows Autopatch?" How to build what's next with Windows Autopatch - (1 min.) Enterprise IT administration is demanding. With Windows Autopatch, Microsoft is offering Enterprise E3 and E5 customers this automated service to manage updates to Windows 10/11, Microsoft Edge, and Microsoft 365 software. Windows Autopatch overview - (9 min.) Demos and tutorials Enrolling in Windows Autopatch - (2 min.) Windows E3 and E5 license holders can now enroll in Windows Autopatch! Learn how with this step-by-step video. Adding devices to the test ring in Windows Autopatch - (2 min.) Preview and learn how to get the native Windows Update experience using Configuration Manager, version 2110, on devices running Windows Insider Preview build 21277 or later. Generate reports for Windows Autopatch - (1 min.) Watch this video and learn how to create reports for devices enrolled in Windows Autopatch, including update status and update history. Troubleshooting videos Resolve "not ready" tenant issues in Windows Autopatch - (1 min.) If your Windows Autopatch readiness assessment comes back ‘Not ready', watch this video to see how you can use the built-in documentation to resolve your issue in just about 30 seconds. Resolve issues with device "not registered" or "not ready" in Windows Autopatch - (1 min.) If your device registration or readiness assessment for Windows Autopatch comes back with devices that are ‘Not ready', watch this video to see how you can use the built-in documentation to resolve your issue in just about 30 seconds. The impact of Windows Autopatch The Forrester Consulting Total Economic Impact™ Study Commissioned by Microsoft, New Technology: The Projected Total Economic Impact™ Of Windows Autopatch Cost Savings And Business Benefits Enabled By Windows Autopatch March 2023 offers testimonials from real Windows Autopatch customers and an in-depth breakdown of the projected impact of Windows Autopatch on an enterprise. Forrester TEI of Windows Autopatch 2023 - (pdf. 1400 KB) This download distills the findings of the full report above into a convenient 4-page summary. Windows Autopatch TEI_Executive Summary - (pdf. 349 KB) This one-sheeter has the gist of what makes the service so valuable. Windows Autopatch TEI Infographic - (pdf. 515 KB) Continue the conversation. Find best practices. Join us on the Windows Autopatch discussion board and follow the Windows IT Pro Blog for the latest Autopatch news and announcements.
Autopatch Admin Role
I want to onboard a new Intune administrator who should only have permissions to manage Autopatch, e.g. enroll devices in the service, move devices between rings, monitor announcements, submit autopatch related support requests, add devices to the autopatch device group, view autopatch related reports, rings, etc.. What are the minimum permissions that are required to do so? what role provides the least privileges to the admin while still allowing them access to all the autopatch features? This admin wont have a requirement to onboard the Autopatch service, i.e. does not require Global Admin.
Devices not getting Updates and the report saying "Intune Sync Older Than 5 Days"
Posting this here in case it may help somebody else. I checked the affected devices and they were not syncing with Intune with the error "The Sync could not be initiated (0x80072f8f)". After some googling I found out that the service "Device Management Wireless Application Protocol (WAP) Push message Routing Service" was involved in the process. Not 100% sure why, but after just restarting that service the Intune synchronization worked.Co-Managed Autopatch - Dynamic AAD Groups
Just finished setting up Autopatch, which was pretty painless, however the device configurations created for Windows 10 and 11 telemetry have exclusions groups for one another, which is expected, however the dynamic group for Windows 11 uses (device.devicePhysicalIds -any _ -startsWith "[OrderID]:Microsoft365Managed_") or (device.deviceOSVersion -startsWith "10.0.22000") to determine if the device is windows 11. However the OrderID wouldn't be set for these devices already in the environment thus never added. Also Windows 11 22h2 will be higher than build 22000. So as of now both 10 and 11 configs are trying to apply to both Win10 and 11 and conflicting with one another.What's New in Windows Autopatch - New Feature: Tenant Management Blade
Hi all! We are announcing that the new Windows Autopatch Tenant Management blade is now live in the Windows Autopatch admin center. You can find this blade by navigating to: Tenant administration > Windows Autopatch > Tenant management in the Microsoft Endpoint Manager admin center. Alternatively, if your tenant has been flagged for an action, you will see a banner notifying you of this action in the Windows Autopatch devices blade. See screenshots below for examples. The purpose of the Tenant Management blade is to highlight all tenant level actions that require an admin action. Currently, the only action that is live is for select customers to take action on their tenant access model, more details below. Once there, Global Admins will need to consent to the action to approve the changes which are as follows: If you enrolled into Windows Autopatch before July 11, 2022, Windows Autopatch will: Create the Modern Workplace Management enterprise application. This is a limited enterprise application with elevated privileges. We use this account to manage the service, publish baseline configuration updates and maintain overall service health. For more information, see Changes made at tenant enrollment. Remove the following: Service accounts: MSAdmin, MsAdminInt, MsTest Groups: Workplace Service Accounts, Modern Workplace Service - Intune Reader MMD, Modern Workplace Service - Intune Reader All, Modern Workplace Service - Intune Admin All Conditional Access Policy: Modern Workplace - Secure Workstation If you enrolled into Windows Autopatch after July 11, 2022, Windows Autopatch will only remove the service accounts, groups and conditional access policy as specified in the previous section as you already have the new first party application on your tenant. For more information, see the following public documentation: Changes made at tenant enrollment - Windows Deployment | Microsoft Learn Maintain the Windows Autopatch environment - Windows Deployment | Microsoft Learn Privacy - Windows Deployment | Microsoft Learn
