
close
close
In this Ask the Admin, I will explain what Windows Update for Business (WUfB) is and how it is different from Windows Update, Windows Server Update Services (WSUS), and System Center Configuration Manager (SCCM).
advertisment
Windows pulls updates directly from Microsoft’s Windows Update servers. There are some limited options that users can set to determine when and how updates are downloaded and applied. But if organizations wanted to take control of the update process in Windows 8.1 or earlier, it involves installing some local infrastructure. This would be in the form of WSUS with or without SCCM integration. WSUS allows administrators to create deployment rings, download updates from Microsoft for distribution on a local area network, and decide when updates are applied to devices.
WUfB makes it easier for organizations to manage updates in Windows 10 Pro, Enterprise, and Education SKUs. Unlike the update mechanisms that most organizations are familiar with, WUfB does not require any infrastructure to be installed. Instead, it allows IT to control how updates are applied using Group Policy or Mobile Device Management (MDM). WUfB relies on the peer-to-peer technology in Windows 10 to efficiently distribute updates amongst devices on the local area network. A local server is not required. It is worth noting that WUfB does not include the reporting facilities provided by WSUS.
advertisment
To configure WUfB using MDM, a mobile-device management solution such as Microsoft Intune is required. And while Intune could manage updates for Windows 7 devices, it requires a client to be installed on each endpoint. WUfB is a clientless and serverless solution. The best way to configure WUfB using Group Policy is with Active Directory Group Policy. But WUfB can also be configured using local policy.
Windows Update for Business Group Policy Settings in Windows 10 (Image Credit: Russell Smith)
The Group Policy settings for WUfB can be found under Computer Configuration > Administrative Templates > Windows Components > Windows Update. The available settings are below. They apply to Windows 10 version 1607 or above:
The first two options allow IT to set updates to be deferred or paused. Feature updates can be deferred between 1 and 180 days or paused for up to 60 days. Quality updates can be deferred between 1 and 35 days or paused for up to 35 days.
In this article, I explained what WUfB is and how it can be configured using Group Policy or MDM.
advertisment
More from Russell Smith
advertisment
Petri Newsletters
Whether it’s Security or Cloud Computing, we have the know-how for you. Sign up for our newsletters here.
advertisment
More in Windows Client OS
Best Practices for Installing Active Directory Domain Controllers in a Virtual Machine
Apr 15, 2022 | Michael Taschler
Most popular on petri
Log in to save content to your profile.
Article saved!
Access saved content from your profile page. View Saved
Join The Conversation
Create a free account today to participate in forum conversations, comment on posts and more.
Copyright ©2019 BWW Media Group