WufB - no updates for WIndows 10 2004

Question

Hello guys,

i really need your help with a really weird problem. In my environment we have set up Updaterings. Pretty easy, nothing to complicated just one Production and one Pilotpolicy. They assigned to seperate Usergroups and exclude each other so that there is not a conflict in case some users are in both groups. Anyway, the Policies are getting executed sucessfull on all devices. Here is the policy I set up:

Im pretty sure I have set up everything correctly, eventhough 99% all of the managed devices havent received any updates since 10.0.19041.804 which is quit a long time. They even pretend to be "up to date" :(

I was already thinking about a conflict WSUS Policy but as the problem is not only in Hybrid Environment but also on my Azure Only joined virtual machines im starting to believe, that I have to search in intune for a solution to this problem.

Today I compared with a machine from another test tenant and i could see, that theres a difference between the result of following command:

I dont know if that has to do something with my problem, but on my other test machine where WUfB is working, Microsoft Update is set to true and Windows Server Update Service is set to False.

Has anyone an idea on how to solve that problem? We already started to deploy patchfiles as App in Intune which I hope isnt the way I have to patch all my company devices in future...

Thank you :)

Answer 1

Hello,
no i havent used that Preview-Function to deploy Feature or Quality Update. In my opinion it should work without, i mean at least to get the latest quality updates. But even those quality updates are not deployed to the devices. Yesterday i tried it with enabling telemetry, setting feature update deferral to 0 and assigning the policy to same group like the update ring. But it was without any effect as well. So i deleted that policy again and tried the conventional way with update rings.

By the way I also read that its suggested to assign the updates to device-groups, not to usergroups. So i changed that as well but it again was without any success :(

Answer 2

@Halogeen Thanks for posting in our Q&A.

To clarify this issue, did you deploy the Windows 10 feature updates policy? As I know, we need to use Windows 10 update rings policy and the Windows 10 feature updates policy together.

And the setting "Feature update deferral period (days)" must be set to 0.
https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates#limitations-for-windows-10-feature-updates-policy

It is suggested to try and check if it works.

If there is anything update, feel free to let us know.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.