Windows Office Hours: October 20, 2022

Hi Patrick, Our data handling policies are described in the Microsoft Trust Center (https://www.microsoft.com/en-us/trust-center/privacy). We only use your customer data to provide you the services you signed up for. As described during the onboarding process, we anonymize and aggregate the scores from all enrolled organizations to keep the All organizations (median) baseline up-to-date. More information on Endpoint Analytics data collection is here: https://learn.microsoft.com/en-us/mem/analytics/data-collection. At any time you can choose to stop sharing data as well, see the section titled "Consent to share data" in this article for how we handle consent - https://learn.microsoft.com/en-us/mem/analytics/settings.

Here is the data that is collected by Endpoint analytics: https://learn.microsoft.com/en-us/mem/analytics/data-collection You can also look at the Microsoft privacy pages: https://aka.ms/privacy

If you are looking for daily "don't reboot" timeframes, you can set Active Hours in Update Rings. We actually recommend setting the Automatic update behavior to "Reset to default" which will enable "Intelligent Active Hours" on devices, which are also then configurable by the end user. That way each user can adapt to their work habits. For machines where you need to set it specifically, you can set Automatic Update Behavior to "Install and restart at maintenance time", which will show the active hours start and end times. If you are actually asking about being able to essentially "stop updates" for a period of days, say for testing week in a school, or the week before quarterly financial reports for the finance org... that is a feature we would like to be able to bring to Windows Update for Business sometime. In the meantime, you can use "Pause" updates to accomplish this, albeit a bit more manually.

I'll also throw in that there is Azure Arc available if we are talking about server workloads in Azure - https://techcommunity.microsoft.com/t5/manufacturing/automate-your-patching-using-azure-arc-and-azure-automation/ba-p/3214141

I'd recommend checking out this blog: https://azure.microsoft.com/en-us/blog/managing-updates-for-your-azure-vm/

If you are still encountering issues with a known issue after a documented update remediation has been applied, I would definitely recommend opening up a support ticket for investigation.

Hi Oleg - The update history for Windows 10, version 22H2 will be available with the first monthly servicing release for version 22H2. KB2020435 is an out-of-band release for Windows 10, version 21H2 and prior.

I would recommend looking at Windows Update for Business reports public preview, which is anticipated to reach GA in just a few week.  Configuration for that is a tenant setting, rather than per-device, which makes configuring devices much easier.   More information can be found here:

Announcing Windows Update for Business reports - Microsoft Community Hub

 

Hi Brandon, Thank you for leaning in and looking at modern management with Intune. We now have the ability to analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune (public preview). https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics There's additional information on managing the process and handling conflicts here. https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics-migrate?source=recommendations We'd love to hear your feedback as we continue to work on a few areas like Preferences. Cheers, -Kevin

The best method is to not convert them! Start new. Most orgs discover that they have years worth of settings that aren't needed. Use the GPOs as a reference, of course, but don't just copy them.