List

Patch management is more important than ever and sometimes you might end up with questions like “what is the difference between CB and CBB – and how many days should I defer?”

Together with questions like “what is the current best practice for DHCP servers” (which have changed twice the last ten years) you might stumble upon the update regime for Windows.
Those questions arise around people who still have the mindset of the traditional on-prem AD, Windows 7 and SCCM patch management. Let me tell you, Windows as a Service (WaaS) is something completely different.

Windows as a Service

As a general guideline, it is recommended that business customers follow the Current Branch for Business in favor of the consumer- oriented Current Branch. This way, all patches, security updates and feture upgrades are tested on a broader audience before hitting your organization a few weeks or months later. However, it is also recommended not to defer updates (set to 0 days). This will allow the business users to defer from some of the bugs that might occur in the earlier versions of a build or patch, but still get the zero- day hotfixes.

When Microsoft describes Windows as a Service, Windows servicing model is usually illustrated as having thousands of internal testers, before millions of Windows Insiders receive the same insight. The CB and hundreds of millions og users then gets the latest updates. Current Branch for Business will then wait for in-the-field feedback and experiences before shipping the same updates to CBB, ensuring high quality of service and stability to the business users (figure 1).

Figure 1 – 4/25/2017. Windows as a Service – rings. Picture illustraton: Microsoft

How?

For business customers who utilize Microsoft Intune, this might be configured with ease in the Azure portal

  • Navigate to http://portal.azure.com and log in to the tenant where the policy should be applied
  • Search for Microsoft Intune under “more services
  • In Microsoft Intune, select “Software updates“, this will open the “Software updates – Windows 10 Update Rings” pane
  • In the “Software updates – Windows 10 Update Rings” pane, click “Windows 10 Update Rings“, click “Create
  • Enter a name, and preferably a description before you click “Configure
  • Select CBB as Servicing branch, and edit the rest of the configuration settings acording to your flavor. Click OK
  • Click Create
  • When created, click “Assignments” and assign to “App deploy” by clicking “Select groups“, select the desired group and click Save

More info

Like mentioned above, please leave the deferral period to zero days, this way you will get the best of both worlds as most patches and updates are tested in-depth by millions of CB users before your organization hits the fan and issues gets spread all over. Microsoft have some resources that might be worth digging into – personally I find this one helpful when talking to peers and customers and one line is worth copy-paste:

Organizations are expected to initiate targeted deployment on Semi-Annual Channel releases, while after about 4 months, we will announce broad deployment readiness, indicating that Microsoft, independent software vendors (ISVs), partners, and customers believe that the release is ready for broad deployment. Each feature update release will be supported and updated for 18 months from the time of its release

Microsoft WaaS blog

Thank you!

  • Alex

  Posts

1 2 3 5
March 27th, 2018

Guide: Retrofit your Office 365 groups- and Teams name

Needless to say, creative naming of Groups and Team sites is a never-ending story. This guide, however, let you retrofit the name of those badly named groups

February 4th, 2018

Get my slides from NIC Future Edition 2018

Like always, NIC is one of the most awesome conferences with speakers from the entire world and a technical level […]

January 4th, 2018

Congratulations – Microsoft OneDrive Expert (MODE) member

Congratulations and welcome as a charter member to the Microsoft OneDrive Expert (MODE) program. You have been identified as one of the top IT pro influencers in the world due to your knowledge and impact on the IT pro community around Microsoft technologies.

November 24th, 2017

Get AirServer for Xbox One (Black Friday discount)

Turn your Xbox One into a Apple TV

October 25th, 2017

Get our slides from TechDays 2017

First of all, I would like to thank you each and every one of awesome people for joining Olav and mine sessions at TechDays 25th of October in Stockholm

September 1st, 2017

CB or CBB for your clients?

Patch management is more important than ever and sometimes you might end up with questions like “what is the difference between CB and CBB – and how many days should I defer?”

August 10th, 2017

Say hello to the new PowerShell Module Browser

Ever since I started scripting and programming, features like “Get-Help” and javadoc have been my lifesaver – now I welcome a new tool: PowerShell Module Browser

July 12th, 2017

Meet me at TechDays Stockholm

I am honored to be invited to TechDays as a speaker for the third time. For those of you who […]

February 3rd, 2017

Get my slides from NIC 2017

For those who could, and those who couldn’t join my sessions – here are my slides

January 27th, 2017

Use PowerShell to generate driver- and batteryreport

Every now and then I get these questions regarding power management, sluggish performance in general. As a cheat-sheet, I’ve come up with this PowerShell script that gives you all you need in one run