Hello Setua, Chiitaranjan,
Thanks for raising this question in Q&A forum.
I understand that you are seeing both a Feature Update and an SBE Update (Setup, Boot, Event) listed for the same Windows version (likely Windows 11, version 23H2 or similar) and are unsure if both are needed or if they are duplicates.
This is expected behavior due to the Unified Update Platform (UUP) architecture used for on-premises (WSUS/ConfigMgr) and cloud management.
- What is the SBE Update?
- SBE stands for Setup, Boot, and Event.
- It is a specialized update package that updates the Windows Recovery Environment (WinRE) and the servicing stack before the main OS update installs.
- This is critical for ensuring that if the Feature Update fails, the device can recover successfully. It also patches vulnerabilities in the boot/recovery partition (like recent BitLocker bypass fixes).
- Why do I see both?
- Microsoft separated these components in the metadata to allow for more granular servicing.
- The Feature Update contains the actual OS upgrade payload.
- The SBE Update is a prerequisite dependency.
- Action Required:
- In WSUS/MECM: You typically see them listed separately. The best practice is to ensure both are approved/available. However, the Windows Update client on the device is intelligent enough to detect the dependency. When you deploy the Feature Update, the client will automatically identify that it needs the SBE update and install it first (or concurrently) as part of the UUP process.
If helps, approve the answer.
Best Regards,
Jerald Felix