Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard
A global organization uses Microsoft Intune to manage its Windows devices. Due to regulatory requirements, devices in the European region must receive Windows feature updates only after a 60-day deferral period to allow for compatibility testing. Devices in other regions should receive updates after a 30-day deferral. How should an administrator configure this in Intune?
- ACreate two 'Feature update policies for Windows 10 and later,' each with a different deferral period, and assign them to respective regional device groups.
- BConfigure 'Delivery Optimization' settings to manage feature update deferrals based on network location for each region.
- CCreate a single 'Feature update policy for Windows 10 and later' with a 30-day deferral and use an 'Exclusions' group for European devices.
- DUse 'Update rings for Windows 10 and later,' create two rings with different deferral periods, and assign them to respective regional device groups.
Show answer & explanationAnswer & explanation
Correct answer: D. Use 'Update rings for Windows 10 and later,' create two rings with different deferral periods, and assign them to respective regional device groups.
Update rings are the primary method in Intune for managing the timing of Windows quality and feature updates. By creating separate update rings with different deferral periods and assigning them to specific regional device groups, the administrator can enforce the required update schedule for each region.
Why the other options are wrong
- A. Feature update policies are used for upgrading devices to a specific Windows version (e.g., from 21H2 to 22H2) and can set a deferral for that specific upgrade process, but 'Update rings' are generally used for ongoing feature update deferrals across versions.
- B. Delivery Optimization helps manage bandwidth for update delivery but does not control the deferral period or schedule of when updates are offered to devices.
- C. Using exclusions is not suitable for defining different deferral periods. Exclusions prevent a policy from applying, not apply a different version of the policy.
Intune Windows Update Rings
A Microsoft Intune feature that allows administrators to manage the timing and behavior of Windows 10/11 quality and feature updates for groups of devices.
- Defines deferral periods for both quality and feature updates.
- Allows for phased deployment of updates to different device groups.
- Can set maintenance windows and user experience settings for updates.
Memory trick: Update Rings: Defer, Schedule, Regionally Control.