Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
A Microsoft 365 Endpoint Administrator needs to ensure that all corporate-owned Windows 11 devices receive quality updates within 7 days of release, but feature updates should be deferred by 60 days. Devices must restart automatically outside of active hours to apply updates. Which Intune policy configuration should the administrator use?
- AConfigure a 'Windows Update for Business' policy within an Update ring.
- BDeploy a custom OMA-URI profile to manage Windows Update settings.
- CUse a PowerShell script deployed via Intune to set Windows Update Group Policy settings.
- DCreate a 'Device restrictions' profile and configure Windows Update settings.
Show answer & explanationAnswer & explanation
Correct answer: A. Configure a 'Windows Update for Business' policy within an Update ring.
Intune's 'Windows Update for Business' policies, configured within an 'Update ring', are specifically designed to manage both quality and feature update deferrals, as well as active hours and restart behavior for Windows devices.
Why the other options are wrong
- B. Custom OMA-URI profiles can be used for very specific settings, but Update rings provide a more user-friendly and complete interface for common update management tasks.
- C. PowerShell scripts can achieve this, but it's less efficient and harder to manage than using the built-in Update ring policies for standard update management.
- D. While 'Device restrictions' can configure some update settings, 'Update rings' offer more granular control over deferrals and restart behavior.
Intune Windows Update Rings
Intune policies that configure Windows Update for Business settings on managed Windows devices, allowing administrators to manage update deferrals, installation behavior, and restart options for both quality and feature updates.
- Manages both quality (monthly) and feature (semi-annual) updates.
- Allows deferral periods for different update types.
- Configures active hours and restart options to minimize user disruption.
Memory trick: Update Rings are the 'scheduling manager' for Windows updates.