In this post, we will discuss the FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings. Are you an early adaptor of Intune? Intune custom policies configured using CSPs are very helpful in most scenarios.
But, you can get into trouble with some of the custom CSPs if you don’t update them promptly. In this post, we will see “FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings.”
What are Intune Windows 10 Update Ring Policies?
Windows 10 update ring policies define the Windows 10 software update behavior of Intune managed devices. You can create different policies to define CBB (Semi-Annual) and CB (Semi-Anual Targeted) channels for Windows 10 machines.
You can also use Windows 10 update ring policy to set quality updates and Delivery Optimization (DO) behaviors of Windows 10 machines.
When you set one machine into CB/SAT ring, that machine will get Windows 10 upgrade notification whenever Microsoft releases a new version of Windows 10.
I have a post and video tutorial about Windows 10 update ring policies. More details are available in “How to Setup Windows 10 Software Update Policy Rings in Intune Azure Portal“.
Issue Statement
- CB = Semi-Annual Targeted (SAT)
- CBB = Semi-Annual (SA)
The machines supposed to get Windows 10 1709 update/upgrade through the Current Branch for Business (CBB/SA) channel are getting the update as part of the Current Branch channel (CB/SAT).
For example, you have two custom policies in the Intune environment to define Windows 10 update rings. These policies define the Windows 10 feature update behavior for machines.
Why is Windows 10 CBB machines getting CB Updates?
The CSPs used in the custom policies are NOT supported for Windows 10 1607 and later versions.
- ./Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade 1 (CBB/SA)
- ./Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade 0 (CB/SAT)
How to Fix the Windows 10 Update Ring Issue for Intune Managed Devices?
You should create new policies to define Windows 10 update rings. This can be done using Intune console – Software updates – Windows 10 Update Rings.
One policy is for Windows 10 Current Branch/Semi-Annual Targeted channel. And another approach is for Windows 10 Current Branch for Business/Semi-Annual channel.
For Windows 10 CB/Semi-Annual Channel Targeted (SAT) channel, you need to define a new policy in Intune console. Software updates – Windows 10 Update Rings – Semi-Annual Channel Targeted (SAT).
For Windows 10 CBB/Semi-Annual Channel (SA) channel, you need to define a new policy in Intune console. Software updates – Windows 10 Update Rings – Semi-Annual Channel (SA).
Once newly created Windows 10 Update ring policies are deployed to respective Azure AD Device groups, remove or delete the Intune custom policies.
References
Author
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc……………