Windows OS Patching - Pilot

Overview

The Windows OS Patching - Pilot template provides configuration to ensure Windows endpoints are receiving updates in a timely manner. Feature and Quality updates will be automatically installed within two days. Quality updates are deployed upon release; Feature updates are deferred for 30 days. Windows drivers and Microsoft product updates are also deployed, where possible.

Intune Description:

Windows updates. Quality 0-day deferral, Feature 30-day deferral.

Scope:

This baseline should be applied to devices.

Policy Impact Areas:

When deployed, this policy will impact:

• Enforcing Windows updates. Enforced within 2 days. Quality updates with 0 day deferral period, feature updates with 30 day deferral period. A reboot will be forced aligned to the update deadlines.

Deployment Notes

1. Pre-Deployment Considerations:

   • Consider risk appetite for Windows update time to delivery. Alternate templates may be used with different timelines

2. Post-Deployment Validation:

   • Verify Windows active hours are set to 8am-5pm

Known Issues and Resolutions

• Issue 1: 

  • Resolution: 

Configuration Settings: