List

Patch management is more important than ever and sometimes you might end up with questions like “what is the difference between CB and CBB – and how many days should I defer?”

Together with questions like “what is the current best practice for DHCP servers” (which have changed twice the last ten years) you might stumble upon the update regime for Windows.
Those questions arise around people who still have the mindset of the traditional on-prem AD, Windows 7 and SCCM patch management. Let me tell you, Windows as a Service (WaaS) is something completely different.

Windows as a Service

As a general guideline, it is recommended that business customers follow the Current Branch for Business in favor of the consumer- oriented Current Branch. This way, all patches, security updates and feture upgrades are tested on a broader audience before hitting your organization a few weeks or months later. However, it is also recommended not to defer updates (set to 0 days). This will allow the business users to defer from some of the bugs that might occur in the earlier versions of a build or patch, but still get the zero- day hotfixes.

When Microsoft describes Windows as a Service, Windows servicing model is usually illustrated as having thousands of internal testers, before millions of Windows Insiders receive the same insight. The CB and hundreds of millions og users then gets the latest updates. Current Branch for Business will then wait for in-the-field feedback and experiences before shipping the same updates to CBB, ensuring high quality of service and stability to the business users (figure 1).

Figure 1 – 4/25/2017. Windows as a Service – rings. Picture illustraton: Microsoft

How?

For business customers who utilize Microsoft Intune, this might be configured with ease in the Azure portal

  • Navigate to http://portal.azure.com and log in to the tenant where the policy should be applied
  • Search for Microsoft Intune under “more services
  • In Microsoft Intune, select “Software updates“, this will open the “Software updates – Windows 10 Update Rings” pane
  • In the “Software updates – Windows 10 Update Rings” pane, click “Windows 10 Update Rings“, click “Create
  • Enter a name, and preferably a description before you click “Configure
  • Select CBB as Servicing branch, and edit the rest of the configuration settings acording to your flavor. Click OK
  • Click Create
  • When created, click “Assignments” and assign to “App deploy” by clicking “Select groups“, select the desired group and click Save

More info

Like mentioned above, please leave the deferral period to zero days, this way you will get the best of both worlds as most patches and updates are tested in-depth by millions of CB users before your organization hits the fan and issues gets spread all over. Microsoft have some resources that might be worth digging into – personally I find this one helpful when talking to peers and customers and one line is worth copy-paste:

Organizations are expected to initiate targeted deployment on Semi-Annual Channel releases, while after about 4 months, we will announce broad deployment readiness, indicating that Microsoft, independent software vendors (ISVs), partners, and customers believe that the release is ready for broad deployment. Each feature update release will be supported and updated for 18 months from the time of its release

Microsoft WaaS blog

Thank you!

  • Alex

Leave a Reply

  Posts

1 2 3 4 5
October 7th, 2014

Mark Minasi – confirmed keynote speaker for NIC 4th edition

One of the the industry’s best-selling author, popular technology columnist, commentator, keynote speaker, and IT consultant is confirmed as keynote for the Nordic Infrastructure Conference.

September 25th, 2014

Speaking at TechDays Stockholm – Shaping the future with Surface

During Stockholm TechDays conference in November, Magnus Haglund and I will be speaking about the Surface family

September 18th, 2014

Get ready for NIC; The Nordic region’s largest IT Conference

Nordic Infrastructure Conference (NIC) was held for the first time in 2012 as a major event on both national and international scale. In february 2015, NIC is ready for its 4th Edition – Northern Europe’s definitive event for IT-pros.

September 2nd, 2014

Students, don’t miss out on OneNote

As students you have the benefit of many special treats as vendors and providers offers a special treat for these particular customers. The Office 365 University is one you definately don’t want to miss out

August 26th, 2014

Spotify now free on Windows Phone

As of 26th of august, Spotify becomes a free music service for all Windows Phone 8 and 8.1 users

July 17th, 2014

Firmware update for the Surface Pro 3

Though the Surface- series normally has one driver and firmware Upgrade per month, the Pro 3 got its second this july

June 30th, 2014

Changes to “Windows update” announced

Microsoft recently announced a update, focusing on protection for customers that further enhances the security of Windows Update / Microsoft Update (WU/MU) Client

June 23rd, 2014

Increased storage for OneDrive users; 15 Gb – free!

Microsoft just announced that their cloud-service OneDrive get increased storage. For the free-riders it means an increase from 7GB to 15GB, while Office 365 subscribers will get 1TB of storage in the cloud.

June 11th, 2014

Firmware update for the Surface (Pro) 2

The first “patch tuesday” in june provided the Surface (Pro) 2 owners with a new firmware. These are the changes and improvements.

May 22nd, 2014

Interview: Jeffrey Snover

To develop an application or an entire system is not just all about bits and bytes. The human centric- view is the outmost important resource to have a successful development team. This is the man, and his story behind what we today know as Windows PowerShell.