The Deploy phase

Completed

In this phase, your objective is to execute the deployment. You'll do so by performing iterative monitoring and management across six areas of your environment:

• Operations
• Applications
• Infrastructure
• Configurations
• Devices
• Users

Let’s look at each of these areas one by one, outlining the tasks and deliverables that will help you accomplish the objective of this phase. For each deliverable, consider a format that's easy to share with others and collaboratively edit throughout the life of the project.

Tip

In practice, these six areas often require simultaneous or overlapping attention.

Phased or ring-based approach to deploying Windows

Throughout this module, we refer to deployment rings and various project phases. Some of these terms are often used interchangeably, but for this module, we use the following definitions:

• Proof of Concept (PoC): An optional phase often performed in a lab environment. It’s most helpful in the earliest stages of a project to test basic functionality and assumptions. This phase is sometimes called a limited pilot and is covered in the Prepare phase.
• Pilot: The first phase you perform in the production environment. Use it to test the wider infrastructure, connectivity, and application compatibility.
• Broad deployment: One or more further deployment phases in the production environment, called rings. In Windows Autopatch, these rings are named first, fast, and broad. Eventually they target most of the estate.

For this module, the focus is on the pilot and broad deployment phases.

Helpful reports across the deployment phases

Windows diagnostic data provides the information used in Windows update compatibility reports, so you don’t need to install agents. You can use Microsoft Intune or Microsoft Configuration Manager (as appropriate) to deploy diagnostic data settings to the devices you want to include in reporting.

Important

You might have to modify your diagnostic data settings to fully use the reports referenced throughout this module.

Suggested reports

Area of use	Report name	Source	Phase
Device readiness	Windows feature update device readiness report	Microsoft Intune	Plan, Prepare
Device readiness	Windows feature update compatibility risks report	Microsoft Intune	Prepare
Device readiness	Work from anywhere report	Endpoint analytics	Plan
Device readiness	Feature updates – device status	Windows Update for Business reports	Plan
Application inventory	Discovered apps report	Microsoft Intune	Plan
Device provisioning	Work from anywhere report	Endpoint analytics	Plan
Device identity	Work from anywhere report	Endpoint analytics	Plan
Deployment status	Feature update status report	Windows Autopatch	Deploy
Deployment status	Feature update trending report	Windows Autopatch	Deploy
Deployment status	Management status report	Windows Autopatch	Deploy
Deployment status	Windows quality and feature update reports	Windows Autopatch	Deploy
Deployment status	Feature update failures report (Organizational)	Microsoft Intune	Deploy
Deployment status	Windows feature update (Organizational)	Microsoft Intune	Deploy
Deployment status	Windows feature update report	Microsoft Intune	Deploy
Deployment efficiency	Delivery Optimization report	Windows Update for Business reports	Deploy

Prerequisites for report use

Report source	Prerequisites
Microsoft Intune	• Microsoft Entra joined or Microsoft Entra hybrid joined devices • Devices managed by Microsoft Intune, by Configuration Manager with tenant attach enabled, or co-managed • Windows diagnostic data enabled (minimum level: “Required”). • Enabled diagnostic data in processor • A valid license: Windows 10/11 Enterprise (E3, E5), Windows 10/11 Education (A3, A5), Windows Virtual Desktop Access (E3, E5), or Microsoft 365 Business Premium • Devices running Windows 10, version 1903 or later Use Windows Update for Business reports for Windows Updates in Microsoft Intune.
Endpoint analytics	Same prerequisites as Microsoft Intune. For more information, visit What is Endpoint analytics?.
Window Update for Business reports (Azure workbook)	• Azure subscription with Microsoft Entra ID • Microsoft Entra joined or Microsoft Entra hybrid joined devices • Log analytics workspace in a supported region • Devices running Windows 10/11 Professional, Education, or Enterprise edition • Windows diagnostic data enabled (minimum level: “Required”) Check out prerequisites for Windows Update for Business reports for more information.
Windows Autopatch	Same prerequisites as Microsoft Intune.

Tip

Are there any steps from the Prepare phase that you haven’t finished or still need help with? Have you addressed all stakeholder feedback for the plan and secured all necessary approvals? Review the checklist and your notes from the Prepare phase before moving forward.