Event details
71 Comments
- As an IT department for public schools, we have: Shared student pcs stored on a shelf or cart (with power on). - WUfB policy for those only updates at night Staff pc's, used at school or home - Regular WUfB policy with reminders ect. Will there be an option to mark the devices for those different use scenarios ?
- How deep will MS engineers go into troubleshooting of patch compliance? For example, if there are enrollment issues with machine(s) that's causing them not to properly get patched or other stale device objects, etc - how will these devices be investigated or remediated?
- Will Autopatch also offer a catalogue based approach for non-Microsoft apps in the future ?
- I see that Azure Active Directory Premium (P1) and Microsoft Intune (assuming Intune Device is adequate) are required. How would Azure AD P1 licenses work for machines which are not assigned to a specific user i.e., shared use machines? The costs can escalate quickly.
- Do you have SLA's defined for this? What do you commit too?
- Chris_Tulip
Microsoft
We have SLOs defined for each update type in our documentation. Take a look at aka.ms/autopatchdocs under Operate \ Update Management \
- Are these patches pulled form the internet? If I use this on Azure VMs and pull down large patches to a lot of machines will I incur large data ingestion charges?
- Heather_Poulsen
Community Manager
We're halfway through today's Windows Autopatch AMA. Keep posting your questions – and share your feedback on what you like about the service, and what’d you’d like to see from the service in the future.
- How is critical or Zero day patches handled ? As each organization will have tailored approach to handle the security updates.
- Chris_Tulip
Threat and vulnerability information about a new revision of Windows becomes available on the second Tuesday of each month. Windows Autopatch assesses that information shortly afterwards. If the service determines that it's critical to security, it may be expedited. The quality update is also evaluated on an ongoing basis throughout the release and Windows Autopatch may choose to expedite at any time during the release.
At GA Autopatch doesn't support customer lead expedite but we have heard asks for that feature from customers before.
- How are the rings determined? Is locality considered? Device SKU?
- ShannonFritzToday, membership in the Update Rings are decided by the service at the time of device registration to maintain the ration o1%/9%/90% on the First/Fast/Broad rings. https://docs.microsoft.com/en-us/windows/deployment/windows-autopatch/operate/windows-autopatch-update-management#update-rings
- I currently send an email to the business when patches are coming, and when they will be forced. With AutoPatch will the deadlines for the updates be available?
- ShannonFritzThe schedule of update releases for each managed by Autopatch are documented, but any changes to that plan are communicated via the Message center, Service health dashboard, and the Windows Autopatch messages section of the MEM portal. https://docs.microsoft.com/en-us/windows/deployment/windows-autopatch/operate/windows-autopatch-wqu-communications
