Management

Here’s How to Keep Up with the Faster Cadence of Windows 10 Updates

Updates aren’t optional for IT teams, but planning can help them go smoothly.

Twitter

Russell Smith is a technology consultant and trainer specializing in management and security of Microsoft server and client technologies. He is a Microsoft Certified Systems Engineer with more than 15 years of experience.

Windows 10, delivered as a service, features monthly quality updates and biannual feature updates that are not optional.

The new, quicker delivery model can cause challenges during and after migration if an IT department is unprepared.

Users of Windows 10 Pro or higher products can delay updates, but not forever: The twice-yearly updates, in spring and fall, are supported for just 18 and 30 months, respectively. Here are four ideas for handling the new cadence.

1. Choose a Servicing Tool

Windows Update for Business is configured in Group Policy. Users can receive updates as they are publicly released or wait for the twice-yearly cadence, known as the Semi-Annual Channel (SAC).

Feature updates can be delayed for up to a year. For more control, use Windows Server Update Services (WSUS) or System Center Configuration Manager (SCCM).

Windows Update for Business pulls updates from Microsoft’s online update servers or neighboring devices; WSUS uses a local repository.

2. Create Deployment Rings to Test Updates

Test the updates on a limited group of computers before rolling them out to all devices. Some devices might update on the SAC as soon as a monthly update is released, and others might use the SAC to test updates before wider distribution.

Use Windows Update for Business settings or the SCCM to create deployment rings.

Each Group Policy object can contain unique settings, which are applied to a given ring. SCCM collections can target devices with specific updates.

3. Test Critical Apps in Advance

Line-of-business applications should be tested before a feature update is installed.

New features and other changes can break applications, so develop a test for each app to ensure critical functionality isn’t affected.

Consider joining the Windows Insider Program for Business to get advance access to builds in active development. The Security Update Validation Program provides access to updates three weeks before release.

4. Use New Technology

Consider modern deployment options, such as mobile device management and Windows Autopilot; the latter makes use of the image installed by the vendor, but it can be configured with additional software and settings using MDM. Deployments can be cloud or IT-driven, letting businesses use Windows Configuration Designer to create provisioning packages that can be deployed locally.