20H2 drivers not installed/updated (Windows Update For Business)

Pavel yannara Mirochnitchenko 12,371 MVP

Using Intune, Win10 cloud only machines which are installed via clean USB media and all drivers are picked up via Microsoft Updates. This is controlled via Intune. With 1909 and 2004 everything was fine and entire Device Manager is covered. With 20H2, many devices are not installed. And they are not discovered during Update manual scan. Devices are 3-5 years old.

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-07T01:20:56.777+00:00
@Pavel yannara Mirochnitchenko , Thanks for uploading in Intune Q&A.

To clarify our issue, I would like to collect the following information to clarify:

Could you check a device without being enrolled into intune to see if we can get the 20H2 drivers?

How did we configure the windows 10 update ring policy for these affected devices? Could you get a screen shot?

Thanks and I look forward to your reply.
Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-07T11:32:01.867+00:00
Will take me 1-2 weeks to get it done :D
2.

4 answers

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-08T02:07:17.887+00:00

@Pavel yannara Mirochnitchenko , Thanks for letting us know the latest status. For the first test, I know it still need some time. We will wait for it. Because this is a very important test to clarify our issue.

For the Windows update ring setting, we find the windows drivers are set as allow which means the driver updates via Windows Update is allowed. Could you check the deployment status under the windows update ring policy we created to see if it is successful.

If there's any update, feel free to let us know.
Please sign in to rate this answer.
Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-08T18:40:10.36+00:00

Please understand, that this problem lies only in 20H2 build. If I re-install it with 1909 and 2004, there will be no problem.

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-09T01:48:55.257+00:00

@Pavel yannara Mirochnitchenko ,, Thanks for the reply. I will prepare a Windows 10 20H2 device to test. It needs to take some days. If there's any progress, I will update here.

Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-09T08:10:15.543+00:00

Excelent, thanks. Take your time and post here with results. If you do not experience the problem, look for internal change log in 20H2 what MS have done, because if you now create new USB media with Media Creation Tool, it probably will be newer than mine. There is documented change that in 20H2, behavior of signed drivers by OEM has changed, and I suspect you have a bug in that new feature or something.

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-10T01:33:55.747+00:00

@Pavel yannara Mirochnitchenko ,,Thanks for the reply. I have updated my VM machine from the previous version to Windows 10 20H2. And find the driver update is not updated on this device. I check on my other VM machines. It seems driver update will not be applied on these VM machines. Currently, I didn’t have any Physical machine at hand. I regret to tell you that I unable to do this test.

For our issue, my suggestion is that, we can follow the steps in the following link to confirm whether the issue is Intune-related or Windows-related.
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-windows-10-update-ring-policies/ba-p/714046

If the Windows updates Ring policy is deployed successfully, that means the issue is on Windows client. If so, we can contact Windows support to check on this issue:
https://learn.microsoft.com/en-us/answers/topics/windows-10-general.html

Thanks for the understanding and have a nice day!

Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-11T06:47:49.92+00:00

I am sure you could bring this information to a product group and someone could test it propertly. Forget about the Intune rings settings because 1909 and 2004 works fine, in 20H2 no. There is a known change made in 20H2 about OEM releated drivers and now it has negative side effect.
Sign in to comment
Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-13T19:28:41.747+00:00

The difference between 1909 and 20H2 is like a night and day. I installed one Lenovo laptop with 20H2 manually, no Intune. Device manager had lot of missing devices. Then I installed same device with 1909 manually. While checking updates, it does offer lot of drivers to be installed. 20H2 doesn't do that.
Please sign in to rate this answer.
Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-14T07:09:38.41+00:00

@Pavel yannara Mirochnitchenko , Thanks for letting us know the latest status. I fully understand your feeling.

From the testing, it seems the related driver updates for windows 10 20H2 is not downloaded and installed. As Intune support, we are not familiar with it. To troubleshoot it, we suggest to involve windows support engineer to double confirm on this. For log analysis case, Phone support can be more efficient. Here is a link to get the Phone support.
https://support.microsoft.com/en-us/help/4051701/global-customer-service-phone-numbers

But if you prefer to support it on Q&A, we will try our best to involve the window support Q&A engineer for you. Or you can submit the issue on windows 10 support directly which will be quicker.
https://learn.microsoft.com/en-us/answers/topics/windows-10-general.html

Thanks for the understanding and have a nice day!

Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-14T15:05:03.48+00:00

Please push this via Q&A and involve Windows support. There is no rush, but I would like at some point to get the info, when this will be fixed. So far, we halt 20H2 deployment.

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-15T01:47:50.453+00:00

@Pavel yannara Mirochnitchenko , Thanks for the reply. We have created a collaboration task to windows support team. Windows client Q&A support will be involved in our thread when the resource is found. Thanks and have a nice day!
Sign in to comment
Teemo Tang 11,366 Reputation points

2020-12-15T02:08:51.977+00:00

Hi yannara,
Smart as you, I think you have searched automatically for driers in Device Manager on those 20H2 PCs, if this way no help, the only way we could do now is finding drivers on manufacturer website.
You know the drivers come from OEM, Microsoft itself doesn’t write or release drivers, once we can’t get drivers from Update or Intune, it means that Microsoft doesn’t have drivers for this device now, we can do nothing on Windows side.
In your scenario, please go to Lenovo website and find out the type of your laptop, download the latest drivers then install, check the situation of devices in device manager.
Good luck.
Please sign in to rate this answer.
Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-16T07:19:02.377+00:00

Are you serious? :D

Please read this story and understand, that in 1909 drivers are installed but not in 20H2. So this is clearly build difference. All drivers should come from Microsoft Update Catalog. Also I have used 2004 and there was no problem in that build. We have found an article that in 20H2 there is a change of OEM driver handling, signed drivers but it doesn't explain clearly what is changed. My best bet is, that there is a some kind of a bug in 20H2 around this driver matching.

Teemo Tang 11,366 Reputation points

2020-12-17T08:32:46.99+00:00

It is not a bug but a new driver installation strategy.

Driver vendors are allowed to publish these drivers in Windows Update with two values – Automatic and Manual.
Windows 10 is prioritized to look for the highest highest-ranking driver marked as “Automatic” by the vendor. If the automatic driver is not available, Windows 10 version 1909 or older proceeds to get the Manual driver to get the peripheral up and running.
Starting in Windows 10 version 2004 and 20H2, Microsoft says it will not install drivers marked “Manual” automatically and this will break your device.

Understanding Windows Update rules for driver distribution
https://learn.microsoft.com/en-au/windows-hardware/drivers/dashboard/understanding-windows-update-automatic-and-optional-rules-for-driver-distribution

Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-18T08:06:42.367+00:00

Thanks. Finally a decent explanation to this behavior. Is there any registry key or some method to change this behavior back, so 20H2 would install "Manual" drivers automatically? This is a huge problem to us right now.

Teemo Tang 11,366 Reputation points

2020-12-22T02:35:06.757+00:00

Unfortunately, because this is a system-level design change, there is not a registry method to roll back to previous strategy, maybe you could try the following group policy to ensure Including Driver Updates in Windows Update.
Computer Configuration/Administrative Templates/Windows Components/Windows Update
Disable Do not include drivers with Windows Updates
Sign in to comment
Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-16T13:26:20.767+00:00

@Crystal-MSFT I found the root cause. 20H2 does offer drivers from MS catalog, via new Settings Updates -> optional updates -> drivers. I can download and install drivers from there, but they are not installed automatically via Intune / Autopilot. In Intune I cannot find any new settings to control that behavior. MMC Device Manager can't find drivers either, but via Settings yes.

How we can go from here? Should I open another thread only with Intune tags to explain current situation?
Please sign in to rate this answer.
Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-17T02:54:50.217+00:00

@Pavel yannara Mirochnitchenko , Actually, Windows Update Ring policies make use of the Windows Policy CSP to configure the update policies on the Windows clients. Once Intune deploys the Windows Update Ring policy to an assigned device, Policy CSP will write the appropriate values to the Windows registry to make the policy take effect. After the policy is applied successfully, it starts to obtain the update which use the existing update solution such as Windows Update or WSUS. for our issue, we can firstly clarify if the Intune policy has been deployed successfully.

For the Windows drivers setting, when it is set as allow in Intune policy, the type of "Exclude drivers from Windows quality updates" will shows as Mobile Device Management. And the registry key "ExcludeWUDriversInQualityUpdate" under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Update with value 0. We can check if it is the same in our environment.

Hope it can help.

Pavel yannara Mirochnitchenko 12,371 Reputation points MVP

2020-12-17T07:02:46.193+00:00

Hi,

Update Ring status is successfull for devices

Exclude drivers from Windows quality updates is set to 0 on all 20H2 machines.

Thanks for help so far, waiting for your response.

Crystal-MSFT 44,851 Reputation points Microsoft Vendor

2020-12-18T01:51:50.207+00:00

@Pavel yannara Mirochnitchenko , Thanks for checking the information. From the information we checked, it shows that the policy is applied successfully. It can be that the windows 10 20H2 has some behavior change that stops this. We can refer to Teemo's suggestions on this.
Sign in to comment

Share via

20H2 drivers not installed/updated (Windows Update For Business)

4 answers