I am deploying Windows 10 2004 feature upgrade to a pilot group(51 devices) in Endpoint manager via Windows 10 feature updates (Preview), all my device in the pilot group are co-managed. also the Windows Update for Business workload been switch to Intune managed. it's been 3-4 days, none of my devices start the upgrade. I even remoted in to one of the computer to manfully click "check for update", but it return and says up to date. I pulled out 1 device and took some screenshots of those component which I think could help for trouble shoot down below. please take look to see if you can help me identify what the problem is The computer property in Intune (1) The computer local Windows update screen shot: WUAHandler log screen shot:

If you click on "View configured update policies" (in your screenshot) does it show the policy? If not, can you check the Intune portal that its actually assigned to your device? (also check the Feature update policy in Intune and click on End user update status and review the device and update status) Do you have any WUfB update rings targetted to the device? If so, what are the settings? (including deferrals) Have you reviewed the prerequisites and limitations here? https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates Do the reports indicate any issues? https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-compliance-reports

@Nathan Li Thanks for posting in our Q&A. To clarify this issue, we appreciate your help to check if there is a windows 10 update ring deployed to the device group. If so, please check if the setting "Feature update deferral period (days)" is set to 0. We can also refer to the following link to find more information: https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-windows-10-update-ring-policies/ba-p/714046 If there is any update, feel free to let us know. If the response is helpful, please click "Accept Answer" and upvote it. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Windows 10 feature updates (Preview) deployement in Microsoft Endpoint Manager failed

Accepted answer

Nick Hogarth 3,436 Reputation points

2021-03-19T00:10:53.273+00:00

If you click on "View configured update policies" (in your screenshot) does it show the policy? If not, can you check the Intune portal that its actually assigned to your device? (also check the Feature update policy in Intune and click on End user update status and review the device and update status)

Do you have any WUfB update rings targetted to the device? If so, what are the settings? (including deferrals)

Have you reviewed the prerequisites and limitations here? https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates

Do the reports indicate any issues? https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-compliance-reports
Please sign in to rate this answer.
Nathan Li 61 Reputation points

2021-03-19T16:52:48.56+00:00

Hi Nick
Thanks very much for reply. for your questions:

"View configured update policies" does it show the policy? - There showing "No policy has been configured yet", which is kind of not true, because I can see the "Active hour" changed to our Intune "Active hour" setting.

Can you check the Intune portal that its actually assigned to your device? - Yes it is assigned to my device. and the status is up to date.

Do you have any WUfB update rings targetted to the device? If so, what are the settings? (including deferrals). - Yes we have deployed the WUFB update ring to the same device, With the link you sent to me about prerequisites and limitations, you may be right where our problem is. Our WUFB update ring Feature update deferral period is set 300 days (our think was if we dont set longer enought, our device may get 20H2 which we have not test yet).

So I am changing the deferral day to 0 and try it.
Thanks again.
Nathan

Nathan Li 61 Reputation points

2021-03-22T03:33:45.387+00:00

Hi Nick:

After change the deferral setting to 0 days, at 2 days ago. my devices able to pick up the Windows 10 2004 upgrade deployment manually by click "check for updates". but other devices are still not running update if I don't click "Check for updates". it's been 2 days now, not sure why those devices will not automatically check for update. Please advise. Also most device's "View configured update policies" still showing "No policy has been configured yet".

Thanks

Nick Hogarth 3,436 Reputation points

2021-03-22T03:36:06.5+00:00

It should scan for updates every 22 hours and pick them up. Have the devices done a sync or checked-in to get the policy changes you made?

Nathan Li 61 Reputation points

2021-03-22T03:52:45.42+00:00

The change was made Friday around noon Mar 19th, So far most of my devices last check in showing at Mar 20th. But out of 3 devices which i remoted in today still have not upgrade automatically. and show no policy has been configured yet. I was planning to check again tomorrow. hope changes start to come show.

Thanks
Nathan

Nathan Li 61 Reputation points

2021-03-23T17:10:16.813+00:00

Hi Nick:

My devices seems like not checking the update automatically, as my last mention by click "check for updates" manually, the device gets the update which I deployed. but if I dont click the update manually, the device will not go check for update. so there is my screen shoot down below for my WUFB update ring setting and MDMDiagReport on the device which would not update automatically, if you can take look and found out why:

WUFB update ring setting

MDMDiagReport

Thank you

Nick Hogarth 3,436 Reputation points

2021-03-23T21:29:49.953+00:00

It may be due to the Active hours being set (5AM to 4PM). Have you tried setting any deadlines? Does a device update if you leave it completely logged off and not used?

Nick Hogarth 3,436 Reputation points

2021-03-23T22:05:07.57+00:00

Also this new feature may help you in the future when its released https://learn.microsoft.com/en-us/mem/intune/fundamentals/in-development#use-intune-policy-to-expedite-installation-of-windows-10-quality-updates

Nathan Li 61 Reputation points

2021-03-25T15:30:15.537+00:00

Hi Nick, thanks for reply, there are my answers and questions for you reply down below:

I did have question on the active hours, so as our setting 5am-4pm, does that means our devices will not check for update during 5am-4pm? or just won't asking for reboot at 5am- 4pm. what's your recommend active hours?

No, we did not setup deadlines, if we setup ex. 2 days as the deadline for feature updates today, would that means my pilot devices which got the feature upgrade 2004 deployment will upgrade in 2 days? and also same time if i setup 2 days as grace period today, does that means all the pilot device will reboot in 4 days out of active hours?

So far, I have not see a devices in my pilot group completed Windows 10 2004 upgrade on it's own.

I went to look for "Windows 10 quality updates policy " in Intune\devices, It has not showup in our Intune as preview yet.

Thanks
Nathan

Lu Dai-MSFT 28,366 Reputation points

2021-03-26T09:16:36.057+00:00

@Nathan Li For these questions, I only can answer what I know. I'm sorry about that。

Q1: Yes, in Active Hours, devices will not update. The recommend active hours is work time.
Q4: The quality updates are included in update ring policy.

To confirm why there is no device completed Windows 10 2004 upgrade on it's own, it is suggested to open a case to check underground information. It is free. The following link describes how to open a case, we can refer to it:
https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-support

Hope this issue will be solved as soon as possible.

Nathan Li 61 Reputation points

2021-03-28T17:01:39.517+00:00

Hi LuDai:

I would love to get it solved as soon as possible as well, Thanks for all you guys help. Part of @Nick Hogarth advice, I setup feature update deadlines in 2 days at last Thursday and "Grace period" for 1 days to reboot. in that note, our pilot devices should all upgrade by Monday. hope it work out. If not, I will sure to put in a ticket for it.

Thanks again
Nathan

Nick Hogarth 3,436 Reputation points

2021-03-30T01:35:29.4+00:00

Because you have set the deadline, the updates should install during active hours, but the device should not restart based on the Grace period you have set, and also the restart Window. For example, I have a restart Window set to 4 hours, and Grace period of 3 days. Since the deadlines have passed, the updates have installed, and I get a notification to restart based on the 3 day Grace period I have set.

Nathan Li 61 Reputation points

2021-04-06T16:46:09.907+00:00

Thanks Nick, with your advice. we able to get our device to detect windows update manually by click check for update. but so far we still not able to get all our pilot device update Automatically, Even we had deadline and grace period setup. So we put in a MS support ticket, waiting for MS call.

Thanks again for you and LuDai's help.
Sign in to comment

Share via

Windows 10 feature updates (Preview) deployement in Microsoft Endpoint Manager failed

1 additional answer