Best practice MDM / Windows Update for Business

%3CLINGO-SUB%20id%3D%22lingo-sub-689475%22%20slang%3D%22en-US%22%3EBest%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-689475%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20together%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20just%20implemented%20in%20a%20pilot%20stage%20MDM%20for%20Windows%2010%20Devices%20and%20Windows%20Update%20for%20Business.%3C%2FP%3E%3CP%3ETherefore%20i%20have%20some%20questions%20about%20your%20experiences.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20current%20config%20looks%20like%20this%3A%3C%2FP%3E%3CP%3E1.%20Windows%20Update%20Ring%3A%20Win10%20Insider%20Channel%20(Release)%20-%20e.g.%20for%20IT%20Workers%3C%2FP%3E%3CP%3E2.%20Windows%20Update%20Ring%3A%20Win10%20Semi-Annual%20Channel%20(Targeted)%20-%20e.g.%20for%20some%20Key-users%3C%2FP%3E%3CP%3E3.%20Windows%20Update%20Ring%3A%20Win10%20Semi-Annual%20Channel%20-%20for%20the%20rest%20of%20the%20company%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20there%20any%20ideas%20to%20improve%2C%20or%20am%20i%20missed%20something%3F%3C%2FP%3E%3CP%3EHow%20do%20you%20manage%20the%20clients%20update%20status%3F%3C%2FP%3E%3CP%3EIn%20Intune%20i'm%20only%20able%20to%20see%20which%20client%20has%20applied%20which%20update%20ring%2C%20but%20i%20can't%20see%20(like%20in%20the%20old%20WSUS%20console)%20which%20client%20is%20needing%20which%20update%20or%20if%20everything%20is%20okay.%3C%2FP%3E%3CP%3EWhat%20could%20be%20a%20best%20practice%20for%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20in%20advance%3C%2FP%3E%3CP%3EPatrick.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-689475%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Update%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Update%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-716005%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-716005%22%20slang%3D%22en-US%22%3EIf%20there%20isn't%20the%20ONE%20solution%2C%20let's%20discuss%20it.%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3EHow%20are%20you%20handling%20this%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1132979%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1132979%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F275685%22%20target%3D%22_blank%22%3E%40PatrickF11%3C%2FA%3E%26nbsp%3B%20Did%20you%20ever%20get%20a%20good%20response%20from%20anyone%20on%20this%20and%20how%20to%20approach%20setting%20up%20rings%20within%20WUfB.%20%26nbsp%3B%20Anything%20around%20best%20practices%20that%20you%20can%20share%20as%20a%20result.%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1134377%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1134377%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F275685%22%20target%3D%22_blank%22%3E%40PatrickF11%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUse%20Update%20Compliance%20to%20have%20view%20similar%20to%20legacy%20consoles%20like%20WSUS%20or%20Intune%20Silverlight%2C%20not%20sure%20if%20it%20covers%20same%20functionalities%20because%20still%20in%20Preview.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-monitor%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-monitor%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-get-started%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-get-started%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-using%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fupdate%2Fupdate-compliance-using%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps!%3C%2FP%3E%3CP%3EMoe%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1134444%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1134444%22%20slang%3D%22en-US%22%3EI%20like%20Patrick's%20proposal%20and%20that's%20how%20I%20do%20it%20most%20of%20the%20time.%3CBR%20%2F%3E%3CBR%20%2F%3EJust%20with%20the%20change%20that%20SAC-T%20is%20end%20of%20life.%20You%20should%20use%20SAC%20%26amp%3B%20deferral%20dates%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1150180%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1150180%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F503735%22%20target%3D%22_blank%22%3E%40Moe_Kinani%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20advise.%20I%20already%20know%20the%20update%20compliance.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENext%2C%20we're%20trying%20to%20implement%20Desktop%20Analytics%2C%20i%20will%20have%20a%20look%20if%20this%20is%20working.%20Otherwise%20i'm%20going%20to%20implement%20the%20update%20compliance%20monitor.%20(We%20used%20this%20one%20earlier.)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F43449%22%20target%3D%22_blank%22%3E%40Miguel%20Sanabia%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20last%20months%20i've%20been%20using%20the%20following%20settings%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F168928iE63191BB17F62C0B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22updateprofiles.jpg%22%20title%3D%22updateprofiles.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%3E%3CDIV%20class%3D%22gtx-trans-icon%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1150860%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1150860%22%20slang%3D%22en-US%22%3EKeen%20to%20know%20the%20results%20with%20Desktop%20Analytics.%3CBR%20%2F%3E%3CBR%20%2F%3EKeep%20us%20posted.%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20Patrick!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1154617%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20MDM%20%2F%20Windows%20Update%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1154617%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F275685%22%20target%3D%22_blank%22%3E%40PatrickF11%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20also%20build%20your%20own%20reports%20and%20statistics%20using%20Intune%20Data%20Warehouse%20and%20PowerBI%20(or%20any%20other%20BI%20tool).%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20are%20some%20blog%20posts%20about%20this%20online%20and%20here%20one%20from%20MS%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fintune-customer-success%2Fsupport-tip-using-powerbi-to-build-custom-reports-with-intune%2Fba-p%2F294970%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fintune-customer-success%2Fsupport-tip-using-powerbi-to-build-custom-reports-with-intune%2Fba-p%2F294970%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGreetings%2C%26nbsp%3B%3C%2FP%3E%3CP%3EChristian%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Hey together,

 

i just implemented in a pilot stage MDM for Windows 10 Devices and Windows Update for Business.

Therefore i have some questions about your experiences.

 

The current config looks like this:

1. Windows Update Ring: Win10 Insider Channel (Release) - e.g. for IT Workers

2. Windows Update Ring: Win10 Semi-Annual Channel (Targeted) - e.g. for some Key-users

3. Windows Update Ring: Win10 Semi-Annual Channel - for the rest of the company

 

Are there any ideas to improve, or am i missed something?

How do you manage the clients update status?

In Intune i'm only able to see which client has applied which update ring, but i can't see (like in the old WSUS console) which client is needing which update or if everything is okay.

What could be a best practice for this?

 

Thank you in advance

Patrick. :)

 

7 Replies
Highlighted
If there isn't the ONE solution, let's discuss it. :)
How are you handling this?
Highlighted

@PatrickF11  Did you ever get a good response from anyone on this and how to approach setting up rings within WUfB.   Anything around best practices that you can share as a result.?

Highlighted

Hi@PatrickF11 

 

Use Update Compliance to have view similar to legacy consoles like WSUS or Intune Silverlight, not sure if it covers same functionalities because still in Preview. 

 

https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-monitor

https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-get-started

https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-using

 

Hope this helps!

Moe

 

 

 

 

 

 

Highlighted
I like Patrick's proposal and that's how I do it most of the time.

Just with the change that SAC-T is end of life. You should use SAC & deferral dates
Highlighted

@Moe_Kinani 

Thanks for your advise. I already know the update compliance.

 

Next, we're trying to implement Desktop Analytics, i will have a look if this is working. Otherwise i'm going to implement the update compliance monitor. (We used this one earlier.)

 

@Miguel Sanabia 

The last months i've been using the following settings:

updateprofiles.jpg

 
Highlighted
Keen to know the results with Desktop Analytics.

Keep us posted.

Thanks Patrick!
Highlighted

@PatrickF11 

You can also build your own reports and statistics using Intune Data Warehouse and PowerBI (or any other BI tool). 

There are some blog posts about this online and here one from MS: https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-powerbi-to-build-cu...

 

Greetings, 

Christian