Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard
A Microsoft 365 Endpoint Administrator is managing a fleet of corporate-owned Windows 11 devices. The company policy requires that all devices must automatically install all driver and firmware updates published by Microsoft, but with a deferral period of 7 days to allow for testing. Which Intune policy type should be used to configure this setting?
- ADevices > Update rings for Windows 10 and later > Windows drivers
- BEndpoint security > Driver and firmware updates > Driver updates
- CConfiguration profiles > Custom (OMA-URI) > AllowDriverUpdates
- DDevices > Feature updates for Windows 10 and later > Driver deferral
Show answer & explanationAnswer & explanation
Correct answer: A. Devices > Update rings for Windows 10 and later > Windows drivers
Management of driver and firmware updates, along with their deferral periods, is handled within the 'Update rings for Windows 10 and later' policy type in Intune. Specifically, the 'Windows drivers' setting controls this behavior.
Why the other options are wrong
- B. While 'Endpoint security' has a 'Driver and firmware updates' section, the actual deferral period for *Windows drivers* is managed within the 'Update rings' policy, not directly in this blade.
- C. While OMA-URI can configure many things, a dedicated setting exists in update rings for driver updates, making a custom profile unnecessary and less manageable.
- D. Feature updates are for OS version upgrades; driver deferral is a separate setting within the general update ring, not a dedicated feature update setting.
Intune Windows Driver/Firmware Updates
Intune policy settings within Windows Update Rings that control the automatic installation and deferral periods for driver and firmware updates on Windows 10/11 devices.
- Managed within 'Update rings for Windows 10 and later'.
- Includes settings for 'Windows drivers'.
- Allows deferral periods to be configured.
- Ensures device stability and compatibility with hardware.
Memory trick: Update Rings manage all Windows update streams.