List

Patch management is more important than ever and sometimes you might end up with questions like “what is the difference between CB and CBB – and how many days should I defer?”

Together with questions like “what is the current best practice for DHCP servers” (which have changed twice the last ten years) you might stumble upon the update regime for Windows.
Those questions arise around people who still have the mindset of the traditional on-prem AD, Windows 7 and SCCM patch management. Let me tell you, Windows as a Service (WaaS) is something completely different.

Windows as a Service

As a general guideline, it is recommended that business customers follow the Current Branch for Business in favor of the consumer- oriented Current Branch. This way, all patches, security updates and feture upgrades are tested on a broader audience before hitting your organization a few weeks or months later. However, it is also recommended not to defer updates (set to 0 days). This will allow the business users to defer from some of the bugs that might occur in the earlier versions of a build or patch, but still get the zero- day hotfixes.

When Microsoft describes Windows as a Service, Windows servicing model is usually illustrated as having thousands of internal testers, before millions of Windows Insiders receive the same insight. The CB and hundreds of millions og users then gets the latest updates. Current Branch for Business will then wait for in-the-field feedback and experiences before shipping the same updates to CBB, ensuring high quality of service and stability to the business users (figure 1).

Figure 1 – 4/25/2017. Windows as a Service – rings. Picture illustraton: Microsoft

How?

For business customers who utilize Microsoft Intune, this might be configured with ease in the Azure portal

  • Navigate to http://portal.azure.com and log in to the tenant where the policy should be applied
  • Search for Microsoft Intune under “more services
  • In Microsoft Intune, select “Software updates“, this will open the “Software updates – Windows 10 Update Rings” pane
  • In the “Software updates – Windows 10 Update Rings” pane, click “Windows 10 Update Rings“, click “Create
  • Enter a name, and preferably a description before you click “Configure
  • Select CBB as Servicing branch, and edit the rest of the configuration settings acording to your flavor. Click OK
  • Click Create
  • When created, click “Assignments” and assign to “App deploy” by clicking “Select groups“, select the desired group and click Save

More info

Like mentioned above, please leave the deferral period to zero days, this way you will get the best of both worlds as most patches and updates are tested in-depth by millions of CB users before your organization hits the fan and issues gets spread all over. Microsoft have some resources that might be worth digging into – personally I find this one helpful when talking to peers and customers and one line is worth copy-paste:

Organizations are expected to initiate targeted deployment on Semi-Annual Channel releases, while after about 4 months, we will announce broad deployment readiness, indicating that Microsoft, independent software vendors (ISVs), partners, and customers believe that the release is ready for broad deployment. Each feature update release will be supported and updated for 18 months from the time of its release

Microsoft WaaS blog

Thank you!

  • Alex

Leave a Reply

  Posts

1 2 3 4 5
February 24th, 2015

Watch our session: Optimizing Surface deployment and connected standby

Did you miss Olav and my session at NIC earlier in february?
Don’t be sad, now you can catch up on your Surface skills

February 13th, 2015

Brush up your Surface skills with MVA

Are you and your company investing in Surface Pro 3? This is your online training session. All for free!

February 12th, 2015

NIC 2015 winners

Are you feeling lucky?

February 12th, 2015

How-to: Fix PowerShell window on Surface

Have you ever tried to open PowerShell on a high-resolution, small-screen device? This is how you make the font readable.

February 12th, 2015

Power your Surface with LTE broadband

As Surface MVP I often get these question related to mobile broadband. My reply is something you oughta know!

February 11th, 2015

NIC Special: Binary converter

Every geek knows that computers runs on binary, not text.
This is a round up on how you decipher decimals, hex and binary to ASCII.

January 28th, 2015

It’s here! The Microsoft Ignite Session Catalog

The Microsoft Ignite Session Catalog is public! Be sure to take a look at the hundreds of sessions at one of the biggest enterprise technology event of the year

January 1st, 2015

Congratulations 2015 Microsoft MVP!

Congratulations, You’re an Surface ITpro MVP!

January 1st, 2015

NIC2015 – The agenda is out

The impressive agenda for NIC 4th edition is publicly announced, and it is risen above any doubts whats the IT-pros “must-attend-to”-conference in 2015

November 26th, 2014

Ben Armstrong to NIC

With TechDays Sweden in the rear-view Mirror, I’m excited to know another world-leading speaker, Ben Armstrong, Is attending in Oslo.
Ben Armstrong is a Principle Program Manager at Microsoft who works on the Hyper-V development team.