Policy and Profile Manager Role in Microsoft Intune.Intune Admin Role in Azure Active Directory.Global Admin Role in Azure Active Directory.Once you have confirmed that your tenant and devices meet the deployment service prerequisites, ensure your user account has one of the following permissions configured:
Devices have installed the update described in KB4023057 - Update for Windows 10 Update Service components (or newer)Īssigning user roles for delegated permissions in PowerShell.Subscription service and device prerequisites for the Windows Update for Windows Update for Business deployment service.Prerequisitesīefore getting started, the following prerequisites must be met: With PowerShell and the Windows Update for Business deployment service, you can deploy an expedited update, which overrides your default steady-state update settings and deploys the latest available updates so that your managed devices meet the minimum required Windows revision as quickly as possible.
In this case, you may want to deploy this update faster than your default update ring configuration. Let's say that Microsoft releases an update addressing a a high-priority security vulnerability or a quality fix for a critical line of business application that is crucial for your organization.
Walkthrough: How to deploy an expedited quality update Now let's dive into a concrete example to demonstrate how you can leverage deployment service capabilities through PowerShell. It provides a simple way to get total control over how updates are deployed to your organization. In addition to Microsoft Graph APIs (currently in public preview), you can also use the Microsoft Graph PowerShell SDK to explore the latest functionality of the deployment service and quickly script and automate common update actions.
In case you aren't yet familiar with it, the Windows Update for Business deployment service provides cloud-based control over the approval, scheduling, and safeguarding of content delivered from Windows Update-enabling you to meet your organization's update and compliance goals no matter where your devices are on the planet. Starting today, you can use PowerShell in tandem with Microsoft Graph APIs to utilize the Windows Update for Business deployment service.