Delivery Optimization Setting Intune-Local Cache Server

Question

Delivery Optimization Setting Intune-Local Cache Server

Saad Farooq 71

Hi

We have a co-managed environment however recently we configured Intune to manage Window Update due to the large organization size and control bandwidth we configured a Local Cache Server. So I am wondering if we need to configure any Delivery Optimization Profile via Intune so that Devices are routed to the Local Cache Server instead of getting Windows updated from the Internet.

Any recommended setting in delivery optimization via Intune for Local Cache Server?

2 answers

Your answer

Answer 1

@Saad Farooq, Thanks for posting in Q&A. Based on my researching, Yes, we can configure Delivery Optimization settings via Intune to route devices to the Local Cache Server instead of getting Windows updates from the internet.

https://learn.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings

To do this, you can create an Intune Delivery Optimization profile

https://learn.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings

You can also configure the following settings to optimize Delivery Optimization for your environment:

Restrict peer selection to computers on the same subnet by setting the "Restrict peer selection – Subnet" option.
Configure Group IDs to restrict Delivery Optimization clients to only share content with devices in the same group.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-10-25T01:59:21.13+00:00

@Saad Farooq, Hope things are going well. If there's anything else we can help, feel free to let us know.

Answer 2

Saad Farooq 71

Dear @Crystal-MSFT

Thanks for your response and guide. However, i would like to ask about more do I need to configure both settings on Intune or Only mention local Cache Server

a. Download Mode with Local Cache Server Hostname DO-Setting

DO-Setting1

b. Only Mentioned Local Cache Server Hostname

DO-Setting1

Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-10-27T02:19:55.3333333+00:00

@Saad Farooq, Thanks for the reply. Based on my understanding, we need to configure both Download Mode with Local Cache Server Hostname
Saad Farooq 71 Reputation points

2023-10-27T09:29:56.3633333+00:00
@Crystal-MSFT

Thanks for your response. We will check it out by configuring both settings also it would be great if you could share your experience with which Download Mode is more suitable for corporate hybrid AAD join environment, as currently in our scenario Delivery optimization managed via GPO with below settings.

HTTP blended with peering behind the same NAT (1): Get updates from the internet and from other computers on your network that are behind the same Network Address Translation (NAT) IP addresses.

I would appreciate any suggestions and recommendations since we need to remove GPO and goal is to manage Delivery Optimization via Intune along with Local Cache Server.
Saad Farooq 71 Reputation points

2023-10-27T09:33:58.46+00:00

@Crystal-MSFT

Thanks for your suggestion. We will try to configured both settings and then verify. However based on your experience any recommendation t select Download Mode Value as currently we have Hybrid AAD join and Delivery Optimization managed via GPO with below setting

HTTP blended with peering behind the same NAT (1): Get updates from the internet and from other computers on your network that are behind the same Network Address Translation (NAT) IP addresses.

End goal is to managed Delivery Optimization along with Local Cache Server with Intune. Any recommendation.
Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-10-30T02:35:55.9066667+00:00

@Saad Farooq, Thanks for the reply. Based on my researching, the recommended download mode for a corporate hybrid AAD join environment is HTTP blended with peering across a private group (2). This mode uses boundary groups to determine which devices should be considered peers, which can save you from having to define new peer groups for Delivery Optimization to use. But from your description, we use HTTP blended with peering behind the same NAT in GPO before. you can also keep using the previous one.
Saad Farooq 71 Reputation points

2023-10-30T06:51:02.7666667+00:00

@Crystal-MSFT Thanks for your recommendations. However, currently, we have a plan to configure HTTP, No Peering along with Local Cache Server and will share our experience. Since our target is to use Intune standalone without any dependency of GPOs /SCCM for Window Update Ring and control bandwidth. Is the mentioned option is also workable based on your experience or recommendation best practice!! Currently we only configured Local Cache Server and plan to control bandwidth via Intune Delivery Optimization Configuration Profile.
Saad Farooq 71 Reputation points

2023-10-30T06:59:24.4566667+00:00

@Crystal-MSFT Thanks for your recommendations. However, currently, we have a plan to configure HTTP, No Peering along with Local Cache Server and will share our experience. Since our target is to use Intune standalone without any dependency of GPOs /SCCM for Window Update Ring and control bandwidth as we only configured Local Cache Server. Is the mentioned option is also workable based on your experience or recommendation best practice!!
Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-10-31T05:17:19.7066667+00:00
@Saad Farooq, Thanks for the reply. Based as I know, it is not possible to configure HTTP and No Peering along with Local Cache Server in Delivery Optimization. Delivery Optimization is a peer-to-peer distribution method in Windows that allows Windows clients to source content from other devices on their local network that have already downloaded the updates or from peers over the internet. For HTTP only, no peering (0), it only gets updates from the internet

HTTP only, no peering (0): Get updates only from the internet. Don't get updates from other computers on your network (peer-to-peer).

https://learn.microsoft.com/en-us/mem/intune/configuration/delivery-optimization-settings#delivery-optimization
Saad Farooq 71 Reputation points

2023-11-02T04:46:46.62+00:00

@Crystal-MSFT Thanks for sharing your response. We will review that and will share expereince.
Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-11-02T04:59:58.3866667+00:00

@Saad Farooq, OK!
Saad Farooq 71 Reputation points

2023-11-09T03:29:56.8233333+00:00
Hi @Crystal-MSFT , Thanks for your suggestion so far we tested and verified that after configuring the below option along with the local cache server Window Update fetches a large chunk from the Internet and also it shows same on the Microsoft cache server based on 2 test devices which seems not a feasible option

HTTP only, no peering (0): Get updates only from the internet. Don't get updates from other computers on your network (peer-to-peer).

I would share our end goal is

Whenever End User is on the Corporate Network i.e. Office devices get windows updates either from Microsoft Cache Server or Peer to Peer Only instead of the internet

Whenever End User is on the Open Network i.e. at Home or some other location devices get Windows updates directly from Internet

Based on our requirements which Download Mode is the best recommendation/practice , also do we need Local Cache Server to configure to achieve both goals.
Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-11-09T05:22:27.1166667+00:00
@Saad Farooq, Thanks for your reply. For your requirement, based on my understanding, you can try the following download mode.

HTTP blended with peering behind the same NAT (1): Get updates from the internet and from other computers on your network that are behind the same Network Address Translation (NAT) IP addresses.

HTTP blended with peering across a private group (2): Peering occurs on devices in the same Active Directory Site (if it exists) or the same domain. When this option is selected, peering crosses your NAT IP addresses.
Saad Farooq 71 Reputation points

2023-11-09T05:37:47.46+00:00

@Crystal-MSFT , Yes as per our findings Option 1 seems suitable, thanks for support. Also if we specify local cache server along with using HTTP blended with peering behind the same NAT (1): Get updates from the internet and from other computers on your network that are behind the same Network Address Translation (NAT) IP addresses.

Does that workable approach. Any experience of configuring DO same (HTTP blended with peering behind the same NAT (1)_ with Cache Server?
Crystal-MSFT 54,191 Reputation points Microsoft External Staff

2023-11-09T06:20:50.9466667+00:00

@Saad Farooq, Thanks for the reply. Based on my understanding, the cached server we can set when the download mode set as you mentioned.

https://jannikreinhard.com/2022/10/09/deep-dive-into-delivery-optimization/

Note: Non-Microsoft link, just for the reference.

Share via

Delivery Optimization Setting Intune-Local Cache Server

2 answers

Your answer