Forum Discussion
Office bypassing Target Version set by Intune
Ok so I was managing my Microsoft patches through Intune. A while back Microsoft sent out this message….
https://docs.microsoft.com/en-us/DeployOffice/other/devices-updating-monthly-enterprise-channel
I believe I had opted out but recently our machines have started updating to the Monthly channel.
So if this is true that we are now moved to Monthly channel how do we control it moving forward?
I have done some of my own research and came across the following but still not sure what is what.
If you log in here - https://admin.microsoft.com
Go to settings, org settings, Office installation updates. You have some items here.
If you click on Organization profile in the same window you have "Release preferences"
If you log in here - https://config.office.com
Go to servicing, Monthly enterprise, settings. You can choose criteria, rollout, etc
Also I know in the past to troubleshoot a single device the reg keys you wanted to look at were:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate
Updatebranch
updatedeadline
updatetargetversion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\Configuration
CDNBaseURL
ClientversionToReport
UpdateChannel
Though I think now that it is managed from https://config.office.com
this is the new key to look @
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\cloud\office\16.0\Common\officeupdate
instead of the old one
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate
Any input on the above would be great.
- manoth_msft
Microsoft
First, settings from config.office.com or from Intune do overrule the preferences from admin.microsoft.com. Second, config.office.com overrules Intune in regards to Office updates.
So if a device is Intune managed and targeted by the Servicing Profile, Profile (from config.office.com) will overrule the Intune Office update settings.
In order to further help, what are you aiming to do? Keep Profiles active and devices on MEC, as profiles offer additional features (like rollback, Office-specific reports, easy waver controls)? Disable profiles and revert control to Intune? Do you want to stay on MEC or move back to SAEC?manoth_msft I am interested in this as well.
We have just started using Intune and targeting the Current Channel.
config.office.com had been set up and there is a Monthly Enterprise Channel servicing profile configured.
We are finding a lot of machines are reverting to the Monthly Channel.
Is it only possible to have the Monthly Enterprise Channel as the Servicing option in config.office.com?
Sorry can you please confirm what MEC and SAEC means?Thanks in advance.
- manoth_msftHi Steven,
MEC = Monthly Enterprise Channel
SAEC = Semi-Annual Enterprise Channel
As mentioned above, if the same group of devices is targeted by Intune and Servicing Profiles, profiles will win and overrule the update channel assigned by Intune. If you want to have both update channels in your environment, you need to use the "group filtering" feature in Servicing Profile to restrict the scope or de-select "Current Channel" from the Selection Criteria page. Check out https://youtu.be/YO6a3iNVXXI for more details on how Profiles work.
And yes, as of now, the outcome of a device being targeted by Servicing Channel is always Microsoft 365 Apps on Monthly Enterprise Channel. Currently Profiles does not support keeping devices current on SAEC or CC (Current Channel).
