Changes made at tenant enrollment
The following configuration details explain the changes made to your tenant when enrolling into the Windows Autopatch service.
Important
The service manages and maintains the following configuration items. Don't change, edit, add to, or remove any of the configurations. Doing so might cause unintended configuration conflicts and impact the Windows Autopatch service.
Windows Autopatch enterprise applications
Enterprise applications are applications (software) that a business uses to do its work.
Windows Autopatch creates an enterprise application in your tenant. This enterprise application is used to run the Windows Autopatch service.
| Enterprise application name | Usage | Permissions |
|---|---|---|
| Modern Workplace Management | The Modern Workplace Management application:
|
|
Microsoft Entra groups
Windows Autopatch will create the required Microsoft Entra groups to operate the service.
The following groups target Windows Autopatch configurations to devices and management of the service by our first party enterprise applications.
| Group name | Description |
|---|---|
| Modern Workplace-All | All Modern Workplace users |
| Modern Workplace - Windows 11 Pre-Release Test Devices | Device group for Windows 11 Pre-Release testing. |
| Modern Workplace Devices-All | All Autopatch devices |
| Modern Workplace Devices-Virtual Machine | All Autopatch virtual devices |
| Modern Workplace Devices-Windows Autopatch-Test | Deployment ring for testing update deployments prior production rollout |
| Modern Workplace Devices-Windows Autopatch-First | First production deployment ring for early adopters |
| Modern Workplace Devices-Windows Autopatch-Fast | Fast deployment ring for quick rollout and adoption |
| Modern Workplace Devices-Windows Autopatch-Broad | Final deployment ring for broad rollout into the organization |
| Modern Workplace Roles - Service Administrator | All users granted access to Modern Workplace Service Administrator Role |
| Modern Workplace Roles - Service Reader | All users granted access to Modern Workplace Service Reader Role |
| Windows Autopatch Device Registration | Group for automatic device registration for Windows Autopatch |
Device configuration policies
- Windows Autopatch - Set MDM to Win Over GPO
- Windows Autopatch - Data Collection
| Policy name | Policy description | Properties | Value |
|---|---|---|---|
| Windows Autopatch - Set MDM to Win Over GPO | Sets mobile device management (MDM) to win over GPO Assigned to:
|
MDM Wins Over GP |
|
| Windows Autopatch - Data Collection | Windows Autopatch and Telemetry settings processes diagnostic data from the Windows device. Assigned to:
|
|
Deployment rings for Windows 10 and later
- Modern Workplace Update Policy [Test]-[Windows Autopatch]
- Modern Workplace Update Policy [First]-[Windows Autopatch]
- Modern Workplace Update Policy [Fast]-[Windows Autopatch]
- Modern Workplace Update Policy [Broad]-[Windows Autopatch]
| Policy name | Policy description | OMA | Value |
|---|---|---|---|
| Modern Workplace Update Policy [Test]-[Windows Autopatch | Windows Update for Business Configuration for the Test Ring Assigned to:
|
|
|
| Modern Workplace Update Policy [First]-[Windows Autopatch] | Windows Update for Business Configuration for the First Ring Assigned to:
|
|
|
| Modern Workplace Update Policy [Fast]-[Windows Autopatch] | Windows Update for Business Configuration for the Fast Ring Assigned to:
|
|
|
| Modern Workplace Update Policy [Broad]-[Windows Autopatch] | Windows Update for Business Configuration for the Broad Ring Assigned to:
|
|
|
Windows feature update policies
- Windows Autopatch - DSS Policy [Test]
- Windows Autopatch - DSS Policy [First]
- Windows Autopatch - DSS Policy [Fast]
- Windows Autopatch - DSS Policy [Broad]
- Modern Workplace DSS Policy [Windows 11]
| Policy name | Policy description | Value |
|---|---|---|
| Windows Autopatch - DSS Policy [Test] | DSS policy for Test device group | Assigned to:
Exclude from:
|
| Windows Autopatch - DSS Policy [First] | DSS policy for First device group | Assigned to:
|
| Windows Autopatch - DSS Policy [Fast] | DSS policy for Fast device group | Assigned to:
Exclude from:
|
| Windows Autopatch - Policy [Broad] | DSS policy for Broad device group | Assigned to:
Exclude from:
|
| Modern Workplace DSS Policy [Windows 11] | Windows 11 DSS policy | Assigned to:
|
Microsoft Office update policies
- Windows Autopatch - Office Configuration
- Windows Autopatch - Office Update Configuration [Test]
- Windows Autopatch - Office Update Configuration [First]
- Windows Autopatch - Office Update Configuration [Fast]
- Windows Autopatch - Office Update Configuration [Broad]
| Policy name | Policy description | Properties | Value |
|---|---|---|---|
| Windows Autopatch - Office Configuration | Sets Office Update Channel to the Monthly Enterprise servicing branch. Assigned to:
|
|
|
| Windows Autopatch - Office Update Configuration [Test] | Sets the Office update deadline Assigned to:
|
|
|
| Windows Autopatch - Office Update Configuration [First] | Sets the Office update deadline Assigned to:
|
|
|
| Windows Autopatch - Office Update Configuration [Fast] | Sets the Office update deadline Assigned to:
|
|
|
| Windows Autopatch - Office Update Configuration [Broad] | Sets the Office update deadline Assigned to:
|
|
|
Microsoft Edge update policies
- Windows Autopatch - Edge Update Channel Stable
- Windows Autopatch - Edge Update Channel Beta
| Policy name | Policy description | Properties | Value |
|---|---|---|---|
| Windows Autopatch - Edge Update Channel Stable | Deploys updates via the Edge Stable Channel Assigned to:
|
|
|
| Windows Autopatch - Edge Update Channel Beta | Deploys updates via the Edge Beta Channel Assigned to:
|
|
|
PowerShell scripts
| Script | Description |
|---|---|
| Modern Workplace - Autopatch Client Setup v1.1 | Installs necessary client components for the Windows Autopatch service |
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for