Digital Workspace

4 Ways to Manage the Faster Updates in Windows 10

Keep Windows 10 campus devices up to date with these notable best practices.

Twitter

Russell Smith is a technology consultant and trainer specializing in management and security of Microsoft server and client technologies. He is a Microsoft Certified Systems Engineer with more than 15 years of experience.

Universities that use Windows 10 operating systems on campus will need to ensure enabled devices are consistently up to date to keep student and administrative services running smoothly.

Windows 10, delivered as a service, features monthly quality updates and biannual feature updates that are not voluntary. The new delivery model can cause challenges during and after migration if an IT department isn’t well prepared. Users of Pro Education can delay updates, but not forever; the twice-yearly updates, in spring and fall, are supported for just 18 and 30 months, respectively. Here are ways to handle the new cadence.

1. Choose a Servicing Tool for Windows 10 Updates

Windows Update for Business (WUfB) is configured in Group Policy. Users can receive updates as they are publicly released or wait for the twice-yearly releases via the Semi-Annual Channel (SAC). Feature updates can be delayed for up to a year. For more control, use Windows Server Update Services (WSUS) or System Center Configuration Manager (SCCM). WUfB pulls updates from Microsoft’s online update servers or neighboring devices; WSUS uses a local repository.

2. Create Deployment Rings for Testing Windows Updates

Test the updates on a limited group of computers before rolling them out to all devices. Some devices might update on the SAC as soon as a monthly update is released, and others might use the SAC to test updates before wider distribution. Use WUfB settings or SCCM to create deployment rings. Each Group Policy object can contain unique WUfB settings, which are applied to a given ring. SCCM collections can target devices with specific updates.

3. Test Critical Apps in Advance

Education applications should be tested before a feature update is installed. New features and other changes can break applications, so develop a test for each app to ensure critical functionality isn’t affected. Universities can join the Windows Insider Program to get advance access to builds in active development. The Security Update Validation Program provides access to updates three weeks before release.

4. Use New Technology to Roll Out Windows 10

Consider modern deployment options, such as mobile device management and Windows Autopilot. Windows Autopilot makes use of the image installed by the vendor, but it can be configured with additional software and settings using MDM. Deployments can be cloud or IT-driven, letting universities use Windows Configuration Designer to create provisioning packages that can be deployed locally.

ngkaki/Getty Images