Windows 10 business users face new update restrictions

The timeframe in which enterprise customers can delay feature updates has been slashed from 365 days to 35

Microsoft has restricted the capacity for Windows 10 enterprise customers to defer major updates for up to a year with the rollout of the May 2020 Update, slashing the deferral time to 35 days.

Starting with the latest major update, enterprise customers must by default adhere to the deferral regime offered to all Windows 10 customers, reducing the time they can pause updates from 365 days to 35.

Normally, Windows 10 users are able to pause updates for up to 35 days through the advanced options page of the Windows Update settings menu, with recent versions allowing users to pause updates for seven days at a time. 

Customers using Windows 10 Pro, or even more enterprise-oriented editions of the flagship OS, could also choose to ‘defer’ both feature and quality updates to dates of their choosing. Feature updates could be deferred one day at a time for up to a year, while quality updates could be delayed for up to 30 days.

The latest changes mean Microsoft is removing the ability to defer updates by choosing when they’re installed, with all Windows 10 users, regardless of version, adhering to the same update regime and delaying options.

“Last year, we changed update installation policies for Windows 10 to only target devices running a feature update version that is nearing end of service. As a result, many devices are only updating once a year,” according to a Microsoft support document.

“To enable all devices to make the most of this policy change, and to prevent confusion, we have removed deferrals from the Windows Update settings Advanced Options page starting on Windows 10, version 2004. If you wish to continue leveraging deferrals, you can use local Group Policy.” 

Power users are still able to use the Local Group Policy to set update deferrals by selecting ‘Edit group policy’, then navigating to Computer Configuration; Administrative Templates; Windows Components; Windows Update; Windows Update for Business. Users can then set ‘Select when Preview Builds and Feature Updates are received’ and ‘Select when Quality Updates are received’ to ‘Enabled’.

Additional changes to Windows Update procedures include allowing IT administrators to specify which versions of Windows 10 they want devices to move to. This also enables them to keep devices on their current version until they reach end of service.

Validation improvements also ensure devices and end-users stay productive and protective, Microsoft says, with safeguards deployed to block devices from updated when there are known issues that would affect that device. 

Featured Resources

Four cyber security essentials that your board of directors wants to know

The insights to help you deliver what they need

Download now

Data: A resource much too valuable to leave unprotected

Protect your data to protect your company

Download now

Improving cyber security for remote working

13 recommendations for security from any location

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

Most Popular

Cisco acquires container security startup Banzai Cloud
Security

Cisco acquires container security startup Banzai Cloud

18 Nov 2020
macOS Big Sur is bricking some older MacBooks
operating systems

macOS Big Sur is bricking some older MacBooks

16 Nov 2020
46 million Animal Jam accounts leaked after comms software breach
Security

46 million Animal Jam accounts leaked after comms software breach

13 Nov 2020