Office bypassing Target Version set by Intune

New Contributor

Ok so I was managing my Microsoft patches through Intune. A while back Microsoft sent out this message….

https://docs.microsoft.com/en-us/DeployOffice/other/devices-updating-monthly-enterprise-channel

 

I believe I had opted out but recently our machines have started updating to the Monthly channel.

 

So if this is true that we are now moved to Monthly channel how do we control it moving forward?

 

I have done some of my own research and came across the following but still not sure what is what.

 

If you log in here - https://admin.microsoft.com

Go to settings, org settings, Office installation updates. You have some items here.

If you click on Organization profile in the same window you have "Release preferences"

 

If you log in here  - https://config.office.com

Go to servicing, Monthly enterprise, settings. You can choose criteria, rollout, etc

 

 

Also I know in the past to troubleshoot a single device the reg keys you wanted to look at were:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate

Updatebranch

updatedeadline

updatetargetversion

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\Configuration

CDNBaseURL

ClientversionToReport

UpdateChannel

 

 

Though I think now that it is managed from https://config.office.com

this is the new key to look @

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\cloud\office\16.0\Common\officeupdate

 

instead of the old one

 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate

 

 

Any input on the above would be great.

 

1 Reply
First, settings from config.office.com or from Intune do overrule the preferences from admin.microsoft.com. Second, config.office.com overrules Intune in regards to Office updates.

So if a device is Intune managed and targeted by the Servicing Profile, Profile (from config.office.com) will overrule the Intune Office update settings.

In order to further help, what are you aiming to do? Keep Profiles active and devices on MEC, as profiles offer additional features (like rollback, Office-specific reports, easy waver controls)? Disable profiles and revert control to Intune? Do you want to stay on MEC or move back to SAEC?