November 18, 2023 at 10:32PM
Microsoft now allows admins to control the deployment of optional updates on Windows 10 enterprise endpoints. A new policy can be configured to choose how monthly preview updates are delivered to users across the organization. Users can automatically receive optional updates, receive only cumulative updates, or select which optional updates to receive. Quality update deferral settings will be respected, and devices will continue to receive regular security updates. This policy is also available for Windows 11.
Key Takeaways from the Meeting Notes:
– Microsoft has announced a new policy that enables admins to control the deployment of optional updates on Windows 10 enterprise endpoints.
– The policy will be available after installing the November optional update.
– Admins can configure the policy as a Group Policy Object (GPO) or a Configuration Service Provider (CSP) policy.
– The policy allows admins to choose how monthly preview updates will be delivered to users via Windows Update for Business.
– Users on Windows 10 devices with the configured policy can choose to automatically receive optional updates, automatically receive optional cumulative updates, or select which optional updates to receive.
– Configured quality update deferral settings will be respected regardless of the option chosen.
– The policy can be found under Group Policy: Computer Configuration\Administrative Templates\Windows Components\Windows Update\Windows Update for Business\Enable optional updates and Configuration Service Provider (CSP) Policy: /Policy/Config/Update/AllowOptionalContent.
– Windows 10 users also have the option to receive all the latest updates by toggling on “Get the latest updates as soon as they’re available.”
– Users who opt to do nothing will eventually receive the fixes and features in the optional updates as part of a security or feature update.
– Windows 11 admins have had similar control over optional update deployment since August, for devices managed with Windows Update for Business or Windows Server Update Services (WSUS).