Aug 20 2019

Here’s How to Keep Up with the Faster Cadence of Windows 10 Updates

Updates aren’t optional for IT teams, but planning can help them go smoothly.

Windows 10, delivered as a service, features monthly quality updates and biannual feature updates that are not optional. 

The new, quicker delivery model can cause challenges during and after migration if an IT department is unprepared

Users of Windows 10 Pro or higher products can delay updates, but not forever: The ­twice-yearly updates, in spring and fall, are supported for just 18 and 30 months, respectively. Here are four ideas for handling the new cadence.

MORE FROM BIZTECH: Read more about the facts and fallacies around Windows 10 migration.

1. Choose a Servicing Tool

Windows Update for Business is configured in Group Policy. Users can receive updates as they are publicly released or wait for the twice-yearly cadence, known as the Semi-Annual Channel (SAC). 

Feature updates can be delayed for up to a year. For more control, use Windows Server Update Services (WSUS) or System Center Configuration Manager (SCCM)

Windows Update for Business pulls updates from Microsoft’s online update servers or neighboring devices; WSUS uses a local repository.

2. Create Deployment Rings to Test Updates

Test the updates on a limited group of computers before rolling them out to all devices. Some devices might update on the SAC as soon as a monthly update is released, and others might use the SAC to test updates before wider distribution.

Use Windows Update for Business settings or the SCCM to create deployment rings

Each Group Policy object can contain unique settings, which are applied to a given ring. SCCM collections can target devices with specific updates. 

MORE FROM BIZTECH: Check out why and how nonprofits should upgrade to Windows 10.

3. Test Critical Apps in Advance

Line-of-business applications should be tested before a feature update is installed. 

New features and other changes can break applications, so develop a test for each app to ensure critical functionality isn’t affected

Consider joining the Windows Insider Program for Business to get advance access to builds in active development. The Security Update Validation Program provides access to updates three weeks before release. 

4. Use New Technology

Consider modern deployment options, such as mobile device management and Windows Autopilot; the latter makes use of the image installed by the vendor, but it can be configured with additional software and settings using MDM. Deployments can be cloud or IT-driven, letting businesses use Windows Configuration Designer to create provisioning packages that can be deployed locally


Learn from Your Peers

What can you glean about security from other IT pros? Check out new CDW research and insight from our experts.