S01E30 - Configuring Windows 10 Feature Update Policies in Intune - (I.T)

[@mikegaudreau5853]

wufb and feature packs in Intune are amazing! I've seen what my colleague is doing for the 1909 Feature Pack deployment in ConfigMan and this seemed to good to be true so I had to try it. :) Great video guys - thanks!

[@Mac-pluto]

When you set it to 0 days for the Feature update Deferral Period you said that it goes off of the Feature update policy... but nowhere do we specify that configuring the feature update policy?

[@JacquesFrenchFryJordaan]

Great video! Thanks guys!

[@jamesbarber4312]

Keep up the good work these videos are great. Would be nice to see Desktop Analytics in more detail and also migration scenarios away from android device administrator to android enterprise as this is something that may hit people soon.

[@michaelwaterman3553]

Good explanation again. Getting hyped to put it all in production. So many ideas on how to change the smb scene using this. PS just wondering if you’re planning to do a video on the reporting functionality and integrating it with Power bi? Did some fiddling around with the feature today (yes I have a life 😎) seems really great on creating fancy reports.

[@philbowden78]

Firstly thanks for your videos they having been invaluable in my Intune migration Setting up Update rings and feature updates and getting a message on client within windows update stating ‘your organisation has turned off automatic update’ Am I being really daft and missing something?

[@IntuneTraining]

Sounds like something isn’t right. Is this an Azure AD Joined machine or is it Hybrid? If it’s hybrid, you may have GPO or ConfigMgr settings applying to it that are causing issues. These settings are in the HKLM\Software\Microsoft\Policies\Microsoft\Windows\WindowsUpdate key and should show whether you’ve got something applying. Also in the Windows Updates Settings pane on the client there should be a notice at the top stating that your org is managing settings. There should be a link to see which policies are being applied. Check the first picture in this post. View Configured Update policies. techcommunity.microsoft.com/t5/windows-10/how-to-remove-quot-some-settings-are-managed-by-your/td-p/1982968

[@ITLiSys]

I agree with Ehab Galal. It doesn't take much to confuse me, but what is the benefit of the Feature Update Policy over a ring policy, if a ring policy will push updates anyway? Also, you state that the Features Update needs Telemetry to be on but I'm not sure that's a pre-requisite with a ring policy, is it? If it is required, a quick vid on how to do it via Intune would be cool as I can't seem to get policy CSPs to work.

[@ITLiSys]

Ah I should have watched the vid all the way to end, I get it now about sticking to a version whilst the rings have moved. However, some security accreditations want systems to be on the latest versions asap as they deem that to be less of a security risk.

[@astonish1109]

Hi Guys, is there a way is samsung smart switch blocked by default with Intune? I really need to transfer over data e.g. contacts, photos, sms messages on to the new mobile but this seems to not sync at ll. I've also tried google sync but the account back up and restore are greyed out after INTUNE enrollment. Is there a workaround?

[@maciejkrynica6638]

Hey guys, I love your videos! You're helping so much! I have one more question to you. If I have few machines that still have 1909 and I want to jump straight to 21H1 should I create different profiles for each of the feature release in between or can I just make one latest profile for 21H1 and let windows update install all of the versions? I don't know if I can jump like that from older version to the latest one. Thanks a lot!

[@IntuneTraining]

Thanks for reaching out, you should be able to fast forward to the latest build without the steps in between, obviously your mileage may vary so always test with a small subset of devices first.

[@Sladeofdark]

You guys are killing it. Do you want to do any advanced thigns, or things that don't quite 'work' yet?

[@brewdir]

Do you guys know when 2004 will be added? Was going to set the baseline to that but 1909 is the latest I see.

[@IntuneTraining]

I don’t know when it will appear, however, if you don’t set a baseline, you’ll get the latest version. Setting the baseline PREVENTS clients from going to a newer OS before you’re ready.

[@IvanRosaT]

Another interesting feature that has moved out of the 'ring updates' is "Optimization" , this is now found separately in "Profiles"... Long topic there Also on a side note , about a year ago I had to upgrade some PC's (7-10) and at that time SCCM was down, so I discovered another method: upgrade one machine then capture the traffic, then push that traffic via scripting, then trigger it, Ufff! I know tedious...but worth the gain... Moral of the story: If SCCM ain't broken don't fix it. #sccmUpgradesAlwaysBreak 😄

[@ehabgalal9181]

Sorry but I confused now. Can I configure feature update policy without windows update ring policy??

[@IntuneTraining]

They can be implemented independent of each other according to the docs. docs.microsoft.com/en-us/intune/protect/windows-update-for-business-configure#limitations-for-windows-10-feature-updates

[@KhromTX]

Pushing feature updates can be done independently now, it's a relatively new feature that's still in preview.

[@cuRe8814]

Set my IT Devices to pull 2004, and they just keep ignoring it since weeks. Updated drivers and everything, and they just wont update. No error message, no nothing.

[@IntuneTraining]

They may be blocked from MS.

[@amritsubedi5810]

I have tried implementing this Windows Feature update but it always pulls the latest version even when I have set this to 1903. Is this working for anyone. Since this is preview, I assume its not working.

[@IntuneTraining]

Our results have also been hit-or-miss. We've heard from others that it is working, but we've also reached out to the developers and are actively investigating why some folks (us included) aren't being successful with this feature.

[@amritsubedi5810]

@@IntuneTraining I have built more than 20 VMs to test this out but it just doesn't work at all. When you normally apply configuration profile to device, this will appear under device configuration but Windows Feature Configuration profile doesn't appear in the list. I can only see Windows Update ring configuration policy under device itself. Telemetry is turned on, done every possible thing I could think of. Anyone who had successful result, share any special configuration we need to do apart from MS documentation.

[@amritsubedi5810]

@@IntuneTraining Have you got any update from developers?

[@devilmaycry10001]

@@amritsubedi5810 Exactly my same problem. The feature profile I create seems not to be applied to the computer. Incredible how a year later this policy is still in preview.

[@chrgeorgeson]

This is just plain broken. Windows 2004 just randomly gets pushed out to people and other get 1909. I set my base to be 1909 and now 2004 is being pushed to some. Really pathetic on MS. However I recognize that MS has this in preview but it's funny that it's been in preview for a long time. They have no idea how to fix this reliably.

[@sUwU]

Hey Guys, I really have to max my volume out to hear you guys. The audio isn't the worst but definitely isn't great either.

[@coderedex]

Sounds so easy except for it does not work despite all the steps provided.

[@IntuneTraining]

Which part doesn’t work? It has changed a little bit since the video but it’s pretty simple config.