News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Review Your Windows Update for Business Deferral Values

    Home Forums Admin IT Lounge Managing updates in organizations Review Your Windows Update for Business Deferral Values

    This topic contains 4 replies, has 4 voices, and was last updated by

     b 1 month, 3 weeks ago.

    • Author
      Posts
    • #348614 Reply

      Kirsty
      Da Boss

      Call to action: review your Windows Update for Business deferral values

      By John Wilcox | April 3, 2019

       
      With Windows Update for Business, an organization can take advantage of cloud-delivered updates, while still creating and managing a ring-based deployment approach. Using Windows Update for Business deferrals, you can group devices into deployment rings to control and manage the deployment of both monthly quality updates and semi-annual feature updates.

      If devices under your management are still running Windows 10 Pro or Windows 10 Pro for Workstation, version 1703, your devices will reach end of service on April 9, 2019 if you have configured both of the following Windows Update for Business policies:

      Branch readiness is configured as Semi-Annual Channel (SAC)
      Feature update deferral is configured as 274 days or more

      In order avoid this, you need to set your feature update deferral policy to 273 days or less.

      To calculate the maximum number of deferral days you can configure and remain in service…

       
      Read the full article here (link updated, thx @netdef)

      2 users thanked author for this post.
    • #348692 Reply

      NetDef
      AskWoody_MVP

      URL changed:  https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Call-to-action-review-your-Windows-Update-for-Business-deferral/ba-p/394244

      (Don’t you hate it when MS Blog does that?)

       

      ~ Group "Weekend" ~

      2 users thanked author for this post.
    • #348696 Reply

      woody
      Da Boss

      Permit me to translate:

      When we announced Windows Update for Business – not really an update branch, but a hodge-podge of individual settings – we didn’t think through the implications of all of the available options.

      Although we’ve changed the meanings of the terms, and deprecated the “SAC” branch entirely, our arbitrarily applied 60-day waiting period for SAC, coupled with a moderately large feature update deferral setting (between 274 and 365) means that you won’t get updates at all, and your Win10 1709 machines will sit unpatched forever.

      Please correct our mistake by changing your update deferral setting.

      1 user thanked author for this post.
      • #348703 Reply

        NetDef
        AskWoody_MVP

        That’s pretty much aligned with how I translated it.  Specific to the big change is V.1709’s status – it got caught right in the waste-land in between.

         

        Note that the MS Blogs advice does NOT apply to other W10 versions at this time.

        For those that miss the deadline – don’t stress out.  You can upgrade those workstations anytime you want – you just won’t be getting 1709 cumulative/security patches after April 9th – which should be the last patch for 1709 released.

        ~ Group "Weekend" ~

        2 users thanked author for this post.
      • #348778 Reply

        b
        AskWoody Plus

        Although we’ve changed the meanings of the terms, and deprecated the “SAC” branch entirely, our arbitrarily applied 60-day waiting period for SAC, coupled with a moderately large feature update deferral setting (between 274 and 365) means that you won’t get updates at all, and your Win10 1709 machines will sit unpatched forever.

        Recent changes like the three you mention haven’t affected this situation with 1709, and couldn’t do so. SAC-T didn’t disappear for previous versions, and +60 days only applies for 1903. It’s the same situation for 1709 now that Susan Bradley highlighted with 1703 six months ago:

        And note that you can set a deferral for longer than the platform is supported on the Pro version. For example Windows 10 pro only gets an 18 month window of support for security updates until you have to upgrade to the next feature release. So you could put in place a 365 day deferral and then end up where your version (Windows 10 1703 for example) fell out of support last month.

        But as noted at the end of yesterday’s blog entry, this situation will not apply to future versions, because of the elimination of SAC-T; “… which will also prevent a device from reaching end of service due to a deferral policy.

        Knuckle dragger Cannon fodder Chump Daft glutton Idiot Sucker More intrepid Crazy/ignorant Toxic drinker Saluted blockhead "Unwashed mass" (Group ASAP) Win10 v.1903

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Review Your Windows Update for Business Deferral Values

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.