%3CLINGO-SUB%20id%3D%22lingo-sub-1468950%22%20slang%3D%22en-US%22%3ERoll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1468950%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EEarlier%20this%20year%2C%20we%20released%20an%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fwindows-it-pro-blog%2Freal-world-practices-to-optimize-windows-10-update-deployments%2Fba-p%2F1227825%22%20target%3D%22_blank%22%3Ein-depth%20guide%20to%20Windows%2010%20update%20adoption%3C%2FA%3E%2C%20providing%20you%20with%20best%20practices%20and%20tips%20on%20how%20to%20more%20effectively%20manage%20updates.%20The%20guide%20included%20recommended%20strategies%20and%20tactics%20as%20well%20as%20detailed%20discussions%20on%20tradeoffs%20and%20tools%20to%20help%20you%20make%20the%20best%20decision%20for%20your%20organization.%20We%E2%80%99ve%20received%20great%20feedback%20on%20the%20guide%20so%20far%20and%20I'm%20glad%20to%20hear%20that%20these%20recommendations%20and%20discussions%20were%20useful%20to%20many%20of%20you.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EToday%20we%20published%20the%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fdownload%2Fdetails.aspx%3Fid%3D101056%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EUpdate%20Baseline%20for%20Windows%2010%3C%2FA%3E%2C%20a%20toolset%20that%20builds%20on%20our%20in-depth%20guide%20to%20further%20simplify%20the%20process.%20Like%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows%2Fsecurity%2Fthreat-protection%2Fwindows-security-baselines%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWindows%20security%20baselines%3C%2FA%3E%2C%20the%20Update%20Baseline%20for%20Windows%2010%20includes%20recommended%20configuration%20settings%20plus%20guidance%20on%20customizing%20those%20settings%20to%20meet%20your%20organization%E2%80%99s%20unique%20needs.%20And%2C%20like%20the%20Windows%20security%20baselines%2C%20you%20can%20get%20to%20an%20optimized%20approach%20that%E2%80%99s%20right%20for%20you%20with%20just%20a%20few%20clicks.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EToday%20there%20are%20over%203%2C000%20Group%20Policy%20settings%20for%20Windows%2010.%20Although%20Microsoft%20provides%20extensive%20guidance%20on%20different%20security%20features%2C%20exploring%20each%20one%20can%20take%20a%20long%20time.%20You%20would%20have%20to%20determine%20the%20impact%20of%20each%20setting%20on%20your%20own%20and%20then%20determine%20the%20appropriate%20value%20for%20each%20setting.%20The%20Update%20Baseline%20for%20Windows%2010%20includes%20recommended%20policy%20settings%20across%20a%20number%20of%20areas%2C%20including%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EConfiguring%20deadlines%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ERestart%20behavior%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EAccounting%20for%20low%20activity%20devices%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EDelivery%20optimization%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EPower%20policies%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EIn%20creating%20this%20toolset%2C%20we've%20focused%20on%20collecting%20real-world%20best%20practices%20to%20share%20with%20you%E2%80%94practices%20that%20can%20help%20you%20and%20your%20organization%20increase%20update%20velocity%20while%20keeping%20your%20devices%20protected%20and%20productive.%20It's%20now%20easier%20than%20ever%20to%20simplify%20the%20way%20you%20roll%20out%20updates%20across%20your%20organization.%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fdownload%2Fdetails.aspx%3Fid%3D101056%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDownload%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FA%3E%20today%20and%20start%20evaluating%20the%20proposed%20baselines.%20We%20hope%20you%20find%20this%20new%20resource%20helpful%20and%20look%20forward%20to%20any%20feedback%20you'd%20like%20to%20leave%20in%20the%20comments%20section%20below.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1468950%22%20slang%3D%22en-US%22%3E%3CP%3EDownload%26nbsp%3Brecommended%20configuration%20settings%20plus%20guidance%20on%20customizations%20to%20help%20you%20increase%20update%20velocity.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22update-baseline.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F199086i878A19EBDFDDCE2A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22update-baseline.PNG%22%20alt%3D%22update-baseline.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1468950%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EServicing%20and%20updates%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1469379%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1469379%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F316649%22%20target%3D%22_blank%22%3E%40TJ_Devine%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20would%20be%20great%20if%20it%20also%20included%20a%20script%20or%20other%20on%20applying%20this%20setting%20to%20an%20Intune%20policy%20for%20managing%20remote%20devices%20as%20well.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20there%20plans%20to%20release%20an%20intune%20version%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1470021%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1470021%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F316649%22%20target%3D%22_blank%22%3E%40TJ_Devine%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhoever%20has%20created%20this%20wasted%20their%20time.%20This%20document%20contains%20the%20same%20old%20things%20that%20Microsoft%20has%20been%20parroting%20for%20the%20last%20ten%20years%2C%20plus%20some%20stuff%20that%20Microsoft%20has%20been%20parroting%20in%20the%20last%20five%20years.%20They%20are%20inapplicable%2C%20now%20that%20we%20don't%20use%20the%20workplace%20computers%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20the%20meantime%2C%20COVID-19%20and%20Microsoft%20seem%20to%20have%20entered%20a%20partnership%20and%20put%20up%20a%20joint%20effort%20to%20drive%20us%20insane.%20These%20days%2C%20were%20are%20running%2012%20computers%20at%20my%20place%20of%20residence!%20Installing%20Windows%20updates%20on%20them%20is%20very%20costly%2C%20considering%20to%20the%20consumer-grade%20Internet%20bandwidth%20that%20I%20can%20afford%20to%20buy.%20If%20KB4557957%20is%20to%20be%20downloaded%2012%20times%2C%20it%20is%20204MB%C3%9712%3D2448MB.%20This%20nothing%20for%20the%20enterprise-grade%20Internet.%20In%20the%20workplace%2C%20we%20consumed%20double%20this%20number%20daily%2C%20but%20at%20home%2C%20I%20cannot%20in%20good%20conscience%20call%20it%20cheap.%20If%20only%20I%20could%20schedule%20the%20%3CSTRONG%3Edownloading%3C%2FSTRONG%3E%20(not%20installing)%20to%20take%20place%20at%20certain%20ISP-designated%20hours%2C%20my%20costs%20would%20have%20been%20zero.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20the%20past%2C%20I%20configured%20all%20computers%20to%20delay%20automatic%20updating%20for%20a%20week.%20I%20received%20update%20notification%20via%20email.%20Then%20I%20downloaded%20those%20updates%20manually%20once%20and%20installed%2012%20times.%20Enter%20Windows%2010%20version%2020H1%3A%20This%20ability%20has%20been%20silently%20removed.%20Do%20you%20know%20how%20frustrating%20it%20is%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1470720%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1470720%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F256269%22%20target%3D%22_blank%22%3E%40MasterMysterious%3C%2FA%3E%26nbsp%3BDelivery%20optimization%20is%20a%20technology%20built%20into%20Windows%2010%20that%20helps%20with%20the%20bandwidth%20issue.%26nbsp%3B%20Your%20home%20PCs%20should%20have%20downloaded%20the%20updates%20%3CEM%3Eonce%3C%2FEM%3E%20and%20then%20shared%20it%20among%20themselves.%26nbsp%3B%20You%20can%20see%20if%20this%20is%20working%20by%20launching%20Settings%20%26gt%3B%26gt%3B%20Updates%20%26gt%3B%26gt%3B%20Delivery%20Optimization%20(in%20the%20left%20side%20menu)%20%26gt%3B%26gt%3B%20(scroll%20down)%20%26gt%3B%26gt%3B%20Activity%20Monitor.%3CBR%20%2F%3E%3CBR%20%2F%3EMy%20PC%20is%20the%20only%202004%20machine%20on%20my%20home%20LAN%2C%20so%20it's%20not%20a%20good%20example%2C%20but%20here%20is%20what%20it%20looks%20like.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Elizabeth_Greene_0-1592401976663.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F199221iF941FB486CD4F76F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Elizabeth_Greene_0-1592401976663.png%22%20alt%3D%22Elizabeth_Greene_0-1592401976663.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%20id%3D%22vidyowebrtcscreenshare_is_installed%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20id%3D%22vidyowebrtcscreenshare_is_installed%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1471085%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1471085%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F316649%22%20target%3D%22_blank%22%3E%40TJ_Devine%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20struggling%20to%20figure%20out%20how%20to%20defer%20Feature%20Updates%20for%20longer%20than%20365%20days.%26nbsp%3B%20If%20versions%20of%20Windows%2010%20are%20supported%20for%2018%2F30%20months%2C%20shouldn't%20we%20be%20able%20to%20defer%20for%20that%20amount%20of%20time%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1471411%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1471411%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F252184%22%20target%3D%22_blank%22%3E%40torquetechit_tonyd%3C%2FA%3E%26nbsp%3B%E2%80%93%20Yes!%20We%20had%20the%20exact%20same%20thought.%20Intune%20integration%20is%20a%20priority%20and%20on%20our%20roadmap.%20Appreciate%20the%20feedback%2C%20and%20let%20us%20know%20how%20it%20works%20for%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1471481%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1471481%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F227837%22%20target%3D%22_blank%22%3E%40Brandon%20Robert%3C%2FA%3E%26nbsp%3B%20%26nbsp%3B%E2%80%93%20Actually%20as%20of%20last%20month%2C%20you%20can!%20The%20new%20target%20version%20policy%20will%20let%20you%20stay%20on%20a%20release%2C%20so%20long%20as%20it%20is%20supported%2C%20until%20you%20change%20the%20policy.%20This%20can%20be%20done%20via%20Intune%2C%20Group%20Policies%2C%20or%20some%20other%20MDMs.%26nbsp%3B%26nbsp%3BI%20know%20this%20isn%E2%80%99t%20the%20same%20approach%20as%20%E2%80%9Cdefer%20update%E2%80%9D%20but%20will%20hopefully%20give%20you%20the%20same%20result%20with%20as%20much%20or%20more%20control.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20Group%20Policy%2C%20the%20policy%20can%20be%20found%20under%20the%20Windows%20Update%20node%20%26gt%3B%20Windows%20Update%20for%20Business%20%26gt%3B%20Target%20Release%20Version.%20To%20do%20this%2C%20you%20will%20need%20to%20download%20the%20new%202004%20ADMX%20template%20that%20was%20just%20published%20and%20apply%20the%20new%20policy%2C%20which%20will%20work%20for%20all%20devices%20on%201803%20and%20above%20who%20took%20the%20May%20security%20update.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E*note%3A%20This%20policy%20will%20take%20precedence%20over%20Feature%20Update%20deferrals%2C%20meaning%20that%20if%20Target%20Release%20Version%20is%20set%20Feature%20Update%20deferrals%20are%20irrelevant.%20%3C%2FEM%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1472883%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1472883%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F316649%22%20target%3D%22_blank%22%3E%40TJ_Devine%3C%2FA%3E%26nbsp%3B%20-%20I%20am%20thinking%20this%20can%20be%20done%20using%20a%20Custom%20policy%20based%20on%20ingesting%20the%20relevant%20ADMX%20into%20Intune%20and%20then%20apply%20the%20settings%20using%20OMA-URI.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1475329%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1475329%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F256269%22%20target%3D%22_blank%22%3E%40MasterMysterious%3C%2FA%3E%26nbsp%3BTake%20a%20look%20at%20configuring%20Delivery%20Optimization%20on%20your%20systems%20(assuming%20they're%20not%20corporate%20devices)%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4468254%2Fwindows-update-delivery-optimization-faq%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4468254%2Fwindows-update-delivery-optimization-faq%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20they're%20corporate%20devices%2C%20that%20configuration%20may%20need%20to%20be%20managed%20by%20your%20IT%20Group%2C%20and%20may%20already%20be%20configured%20(and%20not%20optimally%20for%20you%20at%20home)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1471048%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1471048%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F299731%22%20target%3D%22_blank%22%3E%40Elizabeth_Greene%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20last%20five%20years%2C%20I%20have%20tried%20to%20be%20polite%20and%20refrain%20from%20using%20unkind%20sentences.%20But%20I'm%20done%20being%20nice.%20I%20am%20going%20crazy.%20Delivery%20Optimization%20is%20nothing%20but%20fraud.%20It%20does%20nothing.%20It%20never%20did.%20The%20truth%20is%2C%20I%20wish%20anyone%20inside%20Microsoft%20who%20had%20a%20hand%20in%20creating%20and%20advertising%20this%20Delivery%20Optimization%20nonsense%20die%20a%20gruesome%2C%20slow%20death!%3C%2FP%3E%3CP%3E%3CSTRONG%3EEdit%2C%202020-06-18%3A%3C%2FSTRONG%3E%20Or%20maybe%20I%20don't%20wish%20for%20anyone's%20death%20and%20don't%20say%20anything%20that%20violates%20Microsoft%20Code%20of%20Conduct.%20In%20exchange%2C%20you%20Microsoft%20guys%20simply%20tone%20down%20your%20incessant%20and%20sometimes%20out-of-context%20mention%20of%20Delivery%20Optimization%2C%20which%20borderlines%20on%20harassment.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1475716%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1475716%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F314857%22%20target%3D%22_blank%22%3E%40TheOtherJosh%3C%2FA%3ENo%2C%20thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1477677%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1477677%22%20slang%3D%22en-US%22%3E%3CP%3EAm%20I%20the%20only%20one%20noticing%20that%20the%20download%20is%20missing%20the%20%22Tools%22%20folder%20which%20includes%20the%20necessary%20%22MapGuidsToGpoNames.ps1%22%20Script%3F%3C%2FP%3E%3CP%3EIts%20part%20of%20the%20Security%20Baselines...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1477765%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1477765%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F212279%22%20target%3D%22_blank%22%3E%40Brian%20Steingraber%3C%2FA%3E%26nbsp%3B-%20That%20should%20have%20been%20fixed%20Wednesday%20afternoon.%26nbsp%3B%20Can%20you%20check%20and%20let%20me%20know%20if%20you%20still%20have%20an%20issue%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1477891%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1477891%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F316649%22%20target%3D%22_blank%22%3E%40TJ_Devine%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20tried%2C%20still%20not%20there.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1477991%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1477991%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20tools%20folder%20was%20removed%20because%20it%20wasn't%20needed%20and%20the%20script%20runs%20without%20the%20folder%20(the%20original%20file%20did%20refer%20to%20but%20not%20depend%20on%20a%20tools%20folder).%26nbsp%3B%20Please%20do%20let%20me%20know%20if%20you%20have%20any%20problems%20with%20the%20script.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1495619%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1495619%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%22disable%22%20and%20%22do%20not%20configure%22%20of%20the%20%22Turn%20off%20auto-restart%20notification%20for%20update%20installation%22%20works%20not%20the%20same.%3C%2FP%3E%3CP%3EIf%20you%20%22do%20not%20configure%22%20the%20policy%20than%20%22Show%20a%20notification%20when%20your%20PC%20requires%20a%20restart%20to%20finish%20updating%22%20in%20%22Update%20notification%22%20is%20%22On%22%20and%20the%20user%20can%20change%20it.%20If%20you%20%22disable%22%20the%20policy%20%22Show%20a%20notification%20when%20your%20PC%20requires%20a%20restart%20to%20finish%20updating%22%20is%20%22Off%22%20and%20the%20user%20is%20not%20able%20to%20change%20it.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505740%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505740%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F61308%22%20target%3D%22_blank%22%3E%40Kazimierz%20Popinski%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENot%20Configured%20and%20Disabled%20will%20have%20the%20same%20notification%20behavior%20(default).%20That%20being%20said%2C%20when%20the%20policy%20is%20explicitly%20set%20to%20Disabled%2C%20the%20admin%20has%20chosen%20the%20explicit%20value%20of%20the%20policy%20and%20therefore%20the%20user%20does%20not%20get%20a%20choice%20(so%20the%20toggle%20is%20taken%20away).%20When%20the%20policy%20is%20only%20Not%20Configured%2C%20the%20user%20is%20still%20offered%20the%20choice%20(defaulting%20to%20Off).%20In%20general%2C%20Disable%20prevents%20end%20users%20from%20actually%20changing%20the%20setting%20while%20Not%20Configured%20gives%20end%20users%20the%20option%20of%20changing%20the%20setting.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505784%22%20slang%3D%22en-US%22%3ERe%3A%20Roll%20out%20updates%20faster%20with%20the%20Update%20Baseline%20for%20Windows%2010%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505784%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F594993%22%20target%3D%22_blank%22%3E%40KayToma%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3Edoes%20it%20mean%20that%20it%20is%20not%20possible%20to%20show%20the%20notifications%20and%20not%20allow%20the%20user%20to%20change%20it%3F%3C%2FP%3E%3CP%3EBecause%20if%20I%20set%20the%20policy%20to%20Disable%20it%20will%20reset%20the%20choice%20to%20Off.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20it%20exist%20the%20possibility%20to%20set%20per%20policy%20the%20choice%20to%20On%20or%20better%20to%20set%20the%20choice%20to%20On%20and%20to%20prevent%20the%20user%20to%20change%20it%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EKazimierz%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Earlier this year, we released an in-depth guide to Windows 10 update adoption, providing you with best practices and tips on how to more effectively manage updates. The guide included recommended strategies and tactics as well as detailed discussions on tradeoffs and tools to help you make the best decision for your organization. We’ve received great feedback on the guide so far and I'm glad to hear that these recommendations and discussions were useful to many of you.

Today we published the Update Baseline for Windows 10, a toolset that builds on our in-depth guide to further simplify the process. Like the Windows security baselines, the Update Baseline for Windows 10 includes recommended configuration settings plus guidance on customizing those settings to meet your organization’s unique needs. And, like the Windows security baselines, you can get to an optimized approach that’s right for you with just a few clicks.

Today there are over 3,000 Group Policy settings for Windows 10. Although Microsoft provides extensive guidance on different security features, exploring each one can take a long time. You would have to determine the impact of each setting on your own and then determine the appropriate value for each setting. The Update Baseline for Windows 10 includes recommended policy settings across a number of areas, including:

  • Configuring deadlines
  • Restart behavior
  • Accounting for low activity devices
  • Delivery optimization
  • Power policies

In creating this toolset, we've focused on collecting real-world best practices to share with you—practices that can help you and your organization increase update velocity while keeping your devices protected and productive. It's now easier than ever to simplify the way you roll out updates across your organization. Download the Update Baseline for Windows 10 today and start evaluating the proposed baselines. We hope you find this new resource helpful and look forward to any feedback you'd like to leave in the comments section below.

16 Comments
Occasional Contributor

Hi @TJ_Devine 

This would be great if it also included a script or other on applying this setting to an Intune policy for managing remote devices as well.

 

Are there plans to release an intune version?

 

Cheers

 

Occasional Contributor

@TJ_Devine 

Whoever has created this wasted their time. This document contains the same old things that Microsoft has been parroting for the last ten years, plus some stuff that Microsoft has been parroting in the last five years. They are inapplicable, now that we don't use the workplace computers anymore.

 

In the meantime, COVID-19 and Microsoft seem to have entered a partnership and put up a joint effort to drive us insane. These days, were are running 12 computers at my place of residence! Installing Windows updates on them is very costly, considering to the consumer-grade Internet bandwidth that I can afford to buy. If KB4557957 is to be downloaded 12 times, it is 204MB×12=2448MB. This nothing for the enterprise-grade Internet. In the workplace, we consumed double this number daily, but at home, I cannot in good conscience call it cheap. If only I could schedule the downloading (not installing) to take place at certain ISP-designated hours, my costs would have been zero.

 

In the past, I configured all computers to delay automatic updating for a week. I received update notification via email. Then I downloaded those updates manually once and installed 12 times. Enter Windows 10 version 20H1: This ability has been silently removed. Do you know how frustrating it is?

@MasterMysterious Delivery optimization is a technology built into Windows 10 that helps with the bandwidth issue.  Your home PCs should have downloaded the updates once and then shared it among themselves.  You can see if this is working by launching Settings >> Updates >> Delivery Optimization (in the left side menu) >> (scroll down) >> Activity Monitor.

My PC is the only 2004 machine on my home LAN, so it's not a good example, but here is what it looks like.

Elizabeth_Greene_0-1592401976663.png

 

 
 
Senior Member

@TJ_Devine 

I'm struggling to figure out how to defer Feature Updates for longer than 365 days.  If versions of Windows 10 are supported for 18/30 months, shouldn't we be able to defer for that amount of time?

Microsoft

@torquetechit_tonyd – Yes! We had the exact same thought. Intune integration is a priority and on our roadmap. Appreciate the feedback, and let us know how it works for you.

Microsoft

@Brandon Robert   – Actually as of last month, you can! The new target version policy will let you stay on a release, so long as it is supported, until you change the policy. This can be done via Intune, Group Policies, or some other MDMs.  I know this isn’t the same approach as “defer update” but will hopefully give you the same result with as much or more control.

 

For Group Policy, the policy can be found under the Windows Update node > Windows Update for Business > Target Release Version. To do this, you will need to download the new 2004 ADMX template that was just published and apply the new policy, which will work for all devices on 1803 and above who took the May security update.

 

*note: This policy will take precedence over Feature Update deferrals, meaning that if Target Release Version is set Feature Update deferrals are irrelevant.

Occasional Contributor

@TJ_Devine  - I am thinking this can be done using a Custom policy based on ingesting the relevant ADMX into Intune and then apply the settings using OMA-URI.

Occasional Contributor

@MasterMysterious Take a look at configuring Delivery Optimization on your systems (assuming they're not corporate devices) https://support.microsoft.com/en-us/help/4468254/windows-update-delivery-optimization-faq

 

If they're corporate devices, that configuration may need to be managed by your IT Group, and may already be configured (and not optimally for you at home)

Occasional Contributor

@TheOtherJoshNo, thanks.

New Contributor

Am I the only one noticing that the download is missing the "Tools" folder which includes the necessary "MapGuidsToGpoNames.ps1" Script?

Its part of the Security Baselines...

Microsoft

@Brian Steingraber - That should have been fixed Wednesday afternoon.  Can you check and let me know if you still have an issue? 

New Contributor

@TJ_Devine 

Just tried, still not there.

Microsoft

The tools folder was removed because it wasn't needed and the script runs without the folder (the original file did refer to but not depend on a tools folder).  Please do let me know if you have any problems with the script. 

Occasional Contributor

Hi,

"disable" and "do not configure" of the "Turn off auto-restart notification for update installation" works not the same.

If you "do not configure" the policy than "Show a notification when your PC requires a restart to finish updating" in "Update notification" is "On" and the user can change it. If you "disable" the policy "Show a notification when your PC requires a restart to finish updating" is "Off" and the user is not able to change it. 

Microsoft

Hi @Kazimierz Popinski ,

 

Not Configured and Disabled will have the same notification behavior (default). That being said, when the policy is explicitly set to Disabled, the admin has chosen the explicit value of the policy and therefore the user does not get a choice (so the toggle is taken away). When the policy is only Not Configured, the user is still offered the choice (defaulting to Off). In general, Disable prevents end users from actually changing the setting while Not Configured gives end users the option of changing the setting.

Occasional Contributor

Hi @KayToma 

does it mean that it is not possible to show the notifications and not allow the user to change it?

Because if I set the policy to Disable it will reset the choice to Off.

 

Does it exist the possibility to set per policy the choice to On or better to set the choice to On and to prevent the user to change it?

 

Regards,

Kazimierz