SCCM to Deploy and Install Office 365 ProPlus Updates

SCCM latest version (SCCM 1902) introduced loads of new ways for managing Office 365 ProPlus updates in a better way. SCCM uses the existing Software Update workflow to update Office 365 ProPlus update management.

***Updated on 29th April 2019

IMP – Office 365 ProPlus Bandwidth Consideration PostsLean/HybridBuilding dynamic, lean & universal packages for Office 365 ProPlus & Office 365 ProPlus Deployment and Proxy Server Guidance

Introduction

SCCM latest version has a special dashboard for Office 365 Client management. You can use this dashboard to manage your organization’s office 365 ProPlus apps.

In this post, we will see How to Deploy Install Office 365 Software Updates with SCCM Automatic Deployment Rule (ADR). More details are available in the video tutorial here.

Learn How to Create & Install Office 365 ProPlus Client Package

What is the High-level Workflow of O365 ProPlus Updates Deployment via SCCM?

SCCM Office 365 ProPlus Automatic Deployment rule can create an end-to-end workflow. This will help us to automate Office 365 app installation and management. I have another post on How to Deploy and Install Office 365 Applications via SCCM CB.

How to Deploy and Install Office 365 ProPlus Updates with SCCM CB ADR

1. Office publishes Office 365 app updates metadata to Microsoft Update service
2. SCCM gets the notification about the updates from Microsoft update services via scheduled WSUS sync
3. SCCM refers to office CDN for file list and downloads required files to on-prem SCCM server share. This can be done using SCCM ADR (Automatic Deployment Rule) or a normal Software update process.
4. SCCM Clients get a new policy to deploy the latest updates for Office 365 apps as per the scheduled deployment

What are the prerequisites to Manage Office 365 ProPlus Updates via SCCM CB?

There are 3 prerequisites to manage Office 365 updates/patches via SCCM CB at a high level. I assume that all the devices are already managed via SCCM CB, and all the SCCM client prerequisites are already met.

#1 and #2 – Enable Classification and Product for Office 365 Updates

To manage Office 365 updates via SCCM CB, we need to enable the following classification and product. Navigate via SCCM console – \Administration\Overview\Site Configuration\Sites. Click on Settings – Configure Site Components – Software Update point component – Properties. Go to the Classification tab and enable Updates.

Once updates from the classification tab are enabled (to support Office 365 updates), you can go to the Products tab to enable “Office 365 Client”. More details are available in the video tutorial here.

How to Deploy and Install Office 365 Software Updates with SCCM CB ADR

#3 – Enable Client Settings for Office 365 updates 

To manage Office 365 updates via SCCM CB, we need to enable the following settings. Navigate the SCCM console via \Administration\Overview\Client Settings. Go to Client Settings – Software Updates tab – Enable Management of Office 365 Clients = YES.

How to Create Automatic Deployment Rule for Office 365 ProPlus Updates?

Use Automatic Deployment Rule Wizard (from Office 365 Client Management node) to automate Office 365 application updates/patches through SCCM CB. Using ADR, you can eliminate the repetitive process of creating a Software Update Group, Packages, and Deployments.

You can automatically deploy software updates by adding new software updates to an update group associated with an active deployment. You can use an automatic deployment rule (ADR) to create a new deployment for complex scenarios.

Be very careful before creating and implementing SCCM ADR. I would recommend testing ADR in pre-prod environment before implementing this in production. The video tutorial here has end-to-end details about this process.

How to Deploy and Install Office 365 ProPlus Updates with SCCM CB ADR

What should be the search criteria for Office 365 ProPlus Updates?

Search Criteria is the brain of SCCM ADR. You should be careful while selecting the criteria to add new updates to the existing Software Updates group. In this post, I said search criteria to include Monthly channel updates for the last month.

The software updates that meet the specified criteria are added to the associated software update group. Following are the details of the requirements which I selected.

Date Released or Revised ==> Last Month
Product ==> Office 365 Client
Title ==> Update – Monthly Channel

You can use other Office 365 update channels as well in the criteria. 

  1. Monthly Channel (formerly Current Channel)
  2. Monthly Channel (Targeted)
  3. Semi-Annual Channel (Differed Channel)
  4. Semi-Annual Targeted (formerly First Release for Deferred Channel)

Don’t forget to hit the PREVIEW button to check whether you are getting expected results of the search. More details available in the video tutorial here.

How to Deploy and Install Office 365 ProPlus Updates with SCCM CB ADR

Specify the settings for the Automatic Deployment Rule and automatically deploy all software updates found and approve any license agreement.

Specify the Recurring schedule for the Office 365 ProPlus Updates ADR

You can select either of the options “Run the rule after any software update point synchronization,” or you can select to run SCCM CB ADR as per your schedule.

Configure Schedule Details for the Deployment

In this ADR wizard, you need to confirm whether ADR rule for Office 365 App update is completed. The package is deployed to DPs, Scheduled the deployment, etc.. I selected all the default settings.

Specify the scheduled deployment time there are 2 options to set the deployment time. The time can be the client’s local time or Universal Coordinated Time (UTC). The default setting is Local client Time. More details available in the video tutorial here.

How to Deploy and Install Office 365 Software Updates with SCCM CB ADR

Configure Office 365 ProPlus update available Time 

Specify when software updates should be available for users in Software Center. Once this ADR rule is run, software updates will be distributed to the DP servers.

Office 365 ProPlus Updates are available to install as soon as possible or as per the schedule. I normally set this as ASAP so that the user can go into SCCM CB software center and run.

Installation Deadline for SCCM CB Office 365 ProPlus Updates

You can specify a deadline for required Office 365 updates in this section of ADR wizard. The deadline is determined by adding the deadline time to the installation time.

When the deadline is reached, required office 365 software updates will get installed on the device. I have selected the Deadline 7 days from the deployment available time. Or you can have a deadline As Soon As Possible, which will help you deploy apps at the earliest time on the device.

You have another granular option while setting up installation deadline. According to user preferences, this deployment is delayed up to the grace period defined in client settings.

More details available in the video tutorial here.

User Experience – SCCM ADR for Office 365 ProPlus Updates

The default user experience behavior is Hide in Software Center and All notifications. There are loads of granularity options in setting up the deadline behavior, Device restart behavior, Write filter handling for Windows Embedded (IoT) devices, and Software updates deployment re-evaluation behavior upon restart.

If any Office 365 software update in this deployment requires a system restart, run the updates deployment evaluation cycle after the restart.

How to Deploy and Install Office 365 software Updates with SCCM CB ADR

As you can see in the above picture, the office 365 updates are stuck at 50% downloading on Windows 10 machines. I couldn’t find a solution for it while writing this post. I will keep this post updated whenever I have an update on the resolution or fix for this issue.

References

  • Ignite Video Deploy Microsoft Office 365 Client using SCCM – here
  • Manage Office 365 ProPlus with SCCM – here
  • Manage updates to Office 365 ProPlus with SCCM – here
  • Troubleshooting Office 365 ProPlus patching through SCCM – here

Author

Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc……………