Update management settings
The Update management settings configure automatic update settings for a Windows device. These settings are independent of the MaaS360® Advanced Patch Management service for Laptops and Desktops, which is a stand-alone cloud-based patch management service provided by MaaS360.
| Policy setting | Description | Supported devices |
|---|---|---|
| Configure update settings | Enable this setting to configure the update management settings. |
|
| Configure automatic update settings | ||
| Update service channel | Specifies when and how Windows devices receive feature updates and quality updates. A service channel is a new method provided by Microsoft to deliver feature updates and quality updates to Windows 10+ devices. For more information on Windows as a service and service channels, see https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview#servicing-channels. The following service channels are available:
Note: You cannot set the Semi-Annual Channel option for Windows 10 version 1903 and later devices. Setting this option
might cause other settings to not work properly on a device.
|
|
| Allow automatic updates | Configures automatic update behavior for device firmware updates. |
|
| Configure install options | Choose from the options about update installation and user notification behavior to scan, download, and install updates. |
|
| Installation day | Select the update installation day for the auto installation and restart without user interaction and the auto installation and restart at specific time settings. |
|
| Installation time | Set the time to install the update. This option applies to the auto installation and restart without user interaction and the auto installation and restart at specific time settings. |
|
| Active hours start time | Set the start time where update reboots are not scheduled on the device. There is a 12 hour
maximum from the end time. Note: In Windows 10 version
1703, the default maximum difference from the end time increased to 18. In this version of Windows 10, you can now configure the maximum range of active
hours.
The supported values are 0 - 23, where 0 is 12 AM, 1 is 1 AM. The default value is 8 (8 AM). This option applies to the auto installation and restart without user interaction and the auto installation and restart at specific time settings. Note: This option is supported on Windows 10 version 1607 and later.
|
|
| Active hours end time | Set the end time where update reboots are not scheduled on the device. There is a 12 hour
maximum from the start time. Note: In Windows 10 version
1703, the default maximum difference from the start time increased to 18. In this version of Windows 10, you can now configure the maximum range of active
hours.
The supported values are 0 - 23, where 0 is 12 AM, 1 is 1 AM. The default is 17 (5 PM). This option applies to the auto installation and restart without user interaction and the auto installation and restart at specific time settings. Note: This option is supported on Windows 10 version 1607 and later.
|
|
| Update drivers as part of quality updates | Drivers are updated during a scheduled update. Note: This option is supported on Windows 10 version 1607 and later.
|
|
| Restart prompt duration | Specifies the period of time that restart reminder notifications are automatically sent to
the administrator after the update on the devices is complete. The supported values are 15, 30, 60, 120, and 240 minutes. The default value is 15 minutes. Note: This option is supported on Windows 10 version 1703 and later.
|
|
| Patch scan frequency (every) | Specifies the frequency of a patch scan on the device from every 1 to 22 hours. The default value is 22 hours. Note: This option is supported on Windows 10 version 1703 and later.
|
|
| Defer quality updates (days) | Specifies the number of days (0 - 30 days) to defer quality updates on Windows devices. The default value is 7 days. |
|
| Defer feature updates (days) | Specifies the number of days (0 - 365 days) to defer feature updates on Windows devices. |
|
| Allow update service | Enabling this setting disables public updates from Microsoft updates or the Microsoft Store. |
|
| Configure URL for update service | Specify the intranet update service or WSUS URL to check for updates from the WSUS server
instead of from a Microsoft update. Use this option to
update devices that cannot connect to the internet. Note: If you want to change the URL to check for
updates, you cannot reset this value over-the-air (OTA). You must initiate MDM control removal on
the device.
|
|
| Configure rollback settings | ||
| Rollback quality update | Rolls back the latest quality update if the following conditions are met for the device:
If these conditions are not met, the device will not roll back to the latest quality update. Note: This option is supported on Windows 10
version 1803 and later.
|
|
| Rollback feature update | Rolls back the latest feature update if the following conditions are met for the device:
If these conditions are not met, the device will not roll back to the latest feature update. Note: This option works for Semi-Annual Channel devices only and is supported on Windows 10 version 1803 and later.
|
|