For more information, see [Unlicensed admins](/mem/intune/fundamentals/unlicensed-admins). |
-### Windows 10 update rings
+### Update rings for Windows 10 or later
Your "Windows 10 update ring" policy in Intune must not target any Windows Autopatch devices.
From 71e4ce24d1efd46a54f55b43b6021cede7b62630 Mon Sep 17 00:00:00 2001
From: Andre Della Monica Devices successfully registered and healthy don't show up in the Not ready tab. |
+> [!WARNING]
+> The **Not Ready** tab will not be available during the first week of the Public preview.
+
## Built-in roles required for device registration
A role defines the set of permissions granted to users assigned to that role. You can use one of the following built-in roles in Windows Autopatch to register devices:
-- Global Administrator
+- Azure AD Global Administrator
- Intune Service Administrator
- Modern Workplace Intune Administrator
From 53fbd8b369eb9c8947219a5dccc44bdf6a185c28 Mon Sep 17 00:00:00 2001
From: Tiara Quan <95256667+tiaraquan@users.noreply.github.com>
Date: Tue, 31 May 2022 10:12:48 -0700
Subject: [PATCH 27/61] Reviewing Andre's changes
Reviewing Andre's changes. Made some corrections.
---
.../deploy/windows-autopatch-register-devices.md | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
index 7d549fcbea..8e01aec2b0 100644
--- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
+++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
@@ -28,7 +28,7 @@ Windows Autopatch to take over software updates management of supported devices
You must choose what devices to manage with Windows Autopatch by adding either devices through direct membership or by adding other Azure Active Directory (Azure AD) dynamic/assigned groups into the Azure Active Directory assigned **Windows Autopatch Device Registration** group. Windows Autopatch runs every hour to discover new devices added to this group. Once new devices are discovered, Windows Autopatch attempts to register these devices into its service.
> [!TIP]
-> You can also use the **Discover Devices** button in either the Ready or Not Ready tabs to discover devices from the Windows Autopatch Device Registration Azure AD group on demand.
+> You can also use the **Discover Devices** button in either the Ready or Not ready tabs to discover devices from the Windows Autopatch Device Registration Azure AD group on demand.
To be eligible for Windows Autopatch management, devices must meet a minimum set of required software-based prerequisites:
@@ -45,7 +45,7 @@ To be eligible for Windows Autopatch management, devices must meet a minimum set
For more information about each prerequisite check, see the [Prerequisites](../prepare/windows-autopatch-prerequisites.md) article.
-## About Devices Ready and Not Ready tabs
+## About Devices Ready and Not ready tabs
Windows Autopatch introduces a new user interface to help IT admins manage devices and troubleshoot device readiness statuses seamlessly with actionable in-UI device readiness reports for unregistered devices or unhealthy devices.
@@ -54,8 +54,8 @@ Windows Autopatch introduces a new user interface to help IT admins manage devic
| Ready tab | The purpose of the Ready tab is to show devices that were successfully registered to the Windows Autopatch service and that have met on-going device health requirements. |
| Not ready tab | The purpose of the Not ready tab is to show devices that didn't successfully register into the Windows Autopatch service, or didn't pass one of the device readiness checks. This tab is intended to help customers identify and remediate devices that don't meet device readiness checks. Devices successfully registered and healthy don't show up in the Not ready tab. |
-> [!WARNING]
-> The **Not Ready** tab will not be available during the first week of the Public preview.
+> [!IMPORTANT]
+> The **Not ready** tab will not be available during the first week of the public preview.
## Built-in roles required for device registration
From 1c17fbc36ed29b3cce84c1be329d0bfae875b46e Mon Sep 17 00:00:00 2001
From: Tiara Quan <95256667+tiaraquan@users.noreply.github.com>
Date: Tue, 31 May 2022 10:19:36 -0700
Subject: [PATCH 28/61] Moving note for discoverability
---
.../deploy/windows-autopatch-register-devices.md | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
index 8e01aec2b0..47c812ba6a 100644
--- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
+++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
@@ -49,14 +49,14 @@ For more information about each prerequisite check, see the [Prerequisites](../p
Windows Autopatch introduces a new user interface to help IT admins manage devices and troubleshoot device readiness statuses seamlessly with actionable in-UI device readiness reports for unregistered devices or unhealthy devices.
+> [!IMPORTANT]
+> The **Not ready** tab will not be available during the first week of the public preview.
+
| Tab | Purpose |
| ----- | ----- |
| Ready tab | The purpose of the Ready tab is to show devices that were successfully registered to the Windows Autopatch service and that have met on-going device health requirements. |
| Not ready tab | The purpose of the Not ready tab is to show devices that didn't successfully register into the Windows Autopatch service, or didn't pass one of the device readiness checks. This tab is intended to help customers identify and remediate devices that don't meet device readiness checks. Devices successfully registered and healthy don't show up in the Not ready tab. |
-> [!IMPORTANT]
-> The **Not ready** tab will not be available during the first week of the public preview.
-
## Built-in roles required for device registration
A role defines the set of permissions granted to users assigned to that role. You can use one of the following built-in roles in Windows Autopatch to register devices:
From a236ea828f91cda3753201f96e90b9376b111647 Mon Sep 17 00:00:00 2001
From: Tarun Maganur <104856032+Tarun-Edu@users.noreply.github.com>
Date: Tue, 31 May 2022 10:20:42 -0700
Subject: [PATCH 29/61] Update windows-11-se-overview.md
name change : Sensocloud test to Sensocloud
---
education/windows/windows-11-se-overview.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/education/windows/windows-11-se-overview.md b/education/windows/windows-11-se-overview.md
index be73736a92..c32223b772 100644
--- a/education/windows/windows-11-se-overview.md
+++ b/education/windows/windows-11-se-overview.md
@@ -82,7 +82,7 @@ Windows 11 SE comes with some preinstalled apps. The following apps can also run
|Safe Exam Browser |3.3.2.413 |Win32 |Safe Exam Browser|
|Secure Browser |14.0.0 |Win32 |Cambium Development|
|Secure Browser |4.8.3.376 |Win32 |Questar, Inc|
-|SensoCloud test |2021.11.15.0 |Win32|Senso.Cloud|
+|SensoCloud |2021.11.15.0 |Win32|Senso.Cloud|
|SuperNova Magnifier & Screen Reader |21.02 |Win32 |Dolphin Computer Access|
|Zoom |5.9.1 (2581)|Win32 |Zoom|
|ZoomText Fusion |2022.2109.10|Win32 |Freedom Scientific|
From de80eac3a953e3493af020ad47f464edef6b7fb8 Mon Sep 17 00:00:00 2001
From: tiaraquan Devices successfully registered and healthy don't show up in the Not ready tab. |
+| Ready tab | The purpose of the Ready tab is to show devices that were successfully registered to the Windows Autopatch service and that have met post-registration device health requirements. |
+| Not ready tab | The purpose of the Not ready tab is to show devices that didn't successfully register into the Windows Autopatch service, or didn't pass one of the post-registration health requirements. This tab is intended to help customers identify and remediate devices that don't meet either pre or post-registration device readiness checks. Devices successfully registered and healthy don't show up in the Not ready tab. |
## Built-in roles required for device registration
A role defines the set of permissions granted to users assigned to that role. You can use one of the following built-in roles in Windows Autopatch to register devices:
- Azure AD Global Administrator
+- Service Support Administrator
- Intune Service Administrator
- Modern Workplace Intune Administrator
+See [Azure AD built-in roles](https://docs.microsoft.com/azure/active-directory/roles/permissions-reference) and [Role-based access control (RBAC) with Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/role-based-access-control) for more details.
+
> [!NOTE]
-> The Modern Workplace Intune Admin role is a custom created role in Windows Autopatch. This role can assign administrators to Endpoint Manager roles, and allows you to create and configure custom Endpoint Manager roles.
+> The Modern Workplace Intune Admin role is a custom created role during the Windows Autopatch tenant enrollment process. This role can assign administrators to Endpoint Manager roles, and allows you to create and configure custom Endpoint Manager roles.
+
+## Details about the device registration process
+
+The process of registering your devices in Windows Autopatch does the following:
+
+1. Makes a record of devices in the service.
+2. Assign devices into the ring groups and other groups required for software updates management.
## Steps to register devices
@@ -93,7 +108,7 @@ A role defines the set of permissions granted to users assigned to that role. Yo
Once devices or Azure AD groups containing devices are added to the **Windows Autopatch Device Registration** group, Windows Autopatch discovers these devices and runs device-level prerequisite checks to try to register them.
> [!IMPORTANT]
-> It might take up to an hour for a device to change its statuses from **Ready for User** to **Active** in the Ready tab during the public preview.
+> It might take up to an hour for a device to change its status from **Ready for User** to **Active** in the Ready tab during the public preview.
## Other device lifecycle management scenarios
@@ -115,4 +130,5 @@ If you need to repair a device that was previously registered into the Windows A
When one of these hardware changes occurs, Azure AD creates a new device ID record for that device, even if it's technically the same device.
-Any device that needs to be registered into the Windows Autopatch service must be added into the **Windows Autopatch Device Registration** Azure AD assigned group. Devices can only be added to this group if they have an Azure AD device record ID. Windows Autopatch scans the Azure AD group to discover the new device and brings it in to be registered.
+> [!IMPORTANT]
+> If a new Azure AD device ID is generated for a device that was previously registered into Windows Autopatch, even technically being the same device, the new Azure AD device ID has to be added either through device direct membership or through nested Azure AD dynamic/assigned group into the Windows Autopatch Device Registration group. This process guarantees the newly generated Azure AD device ID is registered into the Windows Autopatch service and it can keep having its software updates managed by the service.
\ No newline at end of file
From e3cd67b1c788f6b2d746b5fc4446e99b8d851d1e Mon Sep 17 00:00:00 2001
From: Tiara Quan <95256667+tiaraquan@users.noreply.github.com>
Date: Tue, 31 May 2022 21:27:58 -0700
Subject: [PATCH 35/61] Update windows-autopatch-register-devices.md
Reviewed for grammar, and broken links.
---
.../deploy/windows-autopatch-register-devices.md | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
index 4a8b3060dc..31f250df19 100644
--- a/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
+++ b/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices.md
@@ -18,7 +18,7 @@ Before Microsoft can manage your devices in Windows Autopatch, you must have dev
## Before you begin
-Windows Autopatch can take over software updates management of supported devices as soon as an IT admin decides to have their tenant managed by the service. The Windows Autopatch software updates management scope includes:
+Windows Autopatch can take over software update management of supported devices as soon as an IT admin decides to have their tenant managed by the service. The Windows Autopatch software update management scope includes:
- [Windows quality updates](../operate/windows-autopatch-wqu-overview.md)
- [Microsoft 365 Apps for enterprise updates](../operate/windows-autopatch-microsoft-365-apps-enterprise.md)
@@ -72,7 +72,7 @@ Windows Autopatch introduces a new user interface to help IT admins manage devic
| Tab | Purpose |
| ----- | ----- |
| Ready tab | The purpose of the Ready tab is to show devices that were successfully registered to the Windows Autopatch service and that have met post-registration device health requirements. |
-| Not ready tab | The purpose of the Not ready tab is to show devices that didn't successfully register into the Windows Autopatch service, or didn't pass one of the post-registration health requirements. This tab is intended to help customers identify and remediate devices that don't meet either pre or post-registration device readiness checks. Devices successfully registered and healthy don't show up in the Not ready tab. |
+| Not ready tab | The purpose of the Not ready tab is to show devices that didn't successfully register into the Windows Autopatch service, or didn't pass one of the post-registration health requirements. This tab is intended to help customers identify and remediate devices that don't meet either pre or post-registration device readiness checks. Devices successfully registered and healthy don't appear in the Not ready tab. |
## Built-in roles required for device registration
@@ -83,14 +83,14 @@ A role defines the set of permissions granted to users assigned to that role. Yo
- Intune Service Administrator
- Modern Workplace Intune Administrator
-See [Azure AD built-in roles](https://docs.microsoft.com/azure/active-directory/roles/permissions-reference) and [Role-based access control (RBAC) with Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/role-based-access-control) for more details.
+For more information, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference) and [Role-based access control (RBAC) with Microsoft Intune](/mem/intune/fundamentals/role-based-access-control).
> [!NOTE]
> The Modern Workplace Intune Admin role is a custom created role during the Windows Autopatch tenant enrollment process. This role can assign administrators to Endpoint Manager roles, and allows you to create and configure custom Endpoint Manager roles.
## Details about the device registration process
-The process of registering your devices in Windows Autopatch does the following:
+Registering your devices in Windows Autopatch does the following:
1. Makes a record of devices in the service.
2. Assign devices into the ring groups and other groups required for software updates management.
@@ -131,4 +131,4 @@ If you need to repair a device that was previously registered into the Windows A
When one of these hardware changes occurs, Azure AD creates a new device ID record for that device, even if it's technically the same device.
> [!IMPORTANT]
-> If a new Azure AD device ID is generated for a device that was previously registered into Windows Autopatch, even technically being the same device, the new Azure AD device ID has to be added either through device direct membership or through nested Azure AD dynamic/assigned group into the Windows Autopatch Device Registration group. This process guarantees the newly generated Azure AD device ID is registered into the Windows Autopatch service and it can keep having its software updates managed by the service.
\ No newline at end of file
+> If a new Azure AD device ID is generated for a device that was previously registered into Windows Autopatch, even if it's the same device, the new Azure AD device ID must be added either through device direct membership or through nested Azure AD dynamic/assigned group into the **Windows Autopatch Device Registration** group. This process guarantees the newly generated Azure AD device ID is registered with Windows Autopatch and that the device continues to have its software updates managed by the service.
From ac861feda773673f657f7a8eadb6d5a666eb2e72 Mon Sep 17 00:00:00 2001
From: tiaraquan Windows Autopatch moves the burden from your IT to Microsoft. Windows Autopatch uses [Windows Update for Business](/windows/deployment/update/deployment-service-overview) and other service components to update devices. Both are part of Windows Enterprise E3. |
+| What is the difference between Windows Update for Business and Windows Autopatch? | Windows Autopatch is a service that removes the need for organizations to plan and operate the update process. Windows Autopatch moves the burden from your IT to Microsoft. Windows Autopatch uses [Windows Update for Business](/windows/deployment/update/deployment-service-overview) and other service components to update devices. Both are part of Windows Enterprise E3. |
| Is Windows 365 for Enterprise supported with Windows Autopatch? | Windows Autopatch supports Windows 365 for Enterprise. Windows 365 for Business isn't supported.|
| Does Windows Autopatch support Windows Education (A3) or Windows Front Line Worker (F3) licensing? | Autopatch isn't available for 'A' or 'F' series licensing. |
| Will Windows Autopatch support local domain join Windows 10? | Windows Autopatch doesn't support local (on-premise) domain join. Windows Autopatch supports [Hybrid AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or pure [Azure AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid). |
@@ -30,7 +30,7 @@ msreviewer: hathind
| Question | Answer |
| ----- | ----- |
| What are the prerequisites for Windows Autopatch? | After enrolling into Autopatch, make sure that any update ring policies you have exclude the **Modern Workplace Devices - All** Azure Active Directory (AD) group. For more information, see [Manage Windows 10 software updates in Intune](/mem/intune/protect/windows-update-for-business-configure). This advisory appears after enrolling into Autopatch. Check the following: Windows Autopatch moves the burden from your IT to Microsoft. Windows Autopatch uses [Windows Update for Business](/windows/deployment/update/deployment-service-overview) and other service components to update devices. Both are part of Windows Enterprise E3. |
-| Is Windows 365 for Enterprise supported with Windows Autopatch? | Windows Autopatch supports Windows 365 for Enterprise. Windows 365 for Business isn't supported.|
-| Does Windows Autopatch support Windows Education (A3) or Windows Front Line Worker (F3) licensing? | Autopatch isn't available for 'A' or 'F' series licensing. |
-| Will Windows Autopatch support local domain join Windows 10? | Windows Autopatch doesn't support local (on-premise) domain join. Windows Autopatch supports [Hybrid AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or pure [Azure AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid). |
-| Will Windows Autopatch be available for state and local government customers? | Windows Autopatch is available for all Windows E3 customers using Azure commercial cloud. However, Autopatch isn't currently supported for government cloud (GCC) customers. |
-
-## Requirements
-
-| Question | Answer |
-| ----- | ----- |
-| What are the prerequisites for Windows Autopatch? | This process is dependent on customer testing and verification of all updates during these rollout stages. The outcome is to ensure that registered devices are always up to date and disruption to business operations is minimized to free up your IT department from that ongoing task. |
-| What happens if there's an issue with an update? | Autopatch relies on the following capabilities to help resolve update issues. When you've onboarded with Windows Autopatch, you can [submit a support request](../operate/windows-autopatch-support-request.md) with the Windows Autopatch Service Engineering Team. |
-
-## Other
-
-| Question | Answer |
-| ----- | ----- |
-| Are there Autopatch specific APIs or PowerShell scripts available? | Programmatic access to Autopatch isn't currently available. |
diff --git a/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml b/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml
new file mode 100644
index 0000000000..31785f6f55
--- /dev/null
+++ b/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml
@@ -0,0 +1,106 @@
+### YamlMime:FAQ
+metadata:
+ title: Windows Autopatch - Frequently Asked Questions (FAQ)
+ description: Answers to frequently asked questions about Windows Autopatch.
+ ms.prod: w11
+ ms.topic: faq
+ ms.date: 06/02/2022
+ audience: itpro
+ ms.localizationpriority: medium
+ manager: dougeby
+ author: tiaraquan
+ ms.author: tiaraquan
+ ms.reviwer: hathind
+title: Frequently Asked Questions about Windows Autopatch
+summary: This article answers frequently asked questions about Windows Autopatch.
+sections:
+ - name: General
+ questions:
+ - question: What Windows versions are supported?
+ answer: |
+ Windows Autopatch works with all [supported versions of Windows 10 and Windows 11 Enterprise edition](/windows/release-health/supported-versions-windows-client).
+ - question: What is the difference between Windows Update for Business and Windows Autopatch?
+ answer: |
+ Windows Autopatch is a service that removes the need for organizations to plan and operate the update process. Windows Autopatch moves the burden from your IT to Microsoft. Windows Autopatch uses [Windows Update for Business](/windows/deployment/update/deployment-service-overview) and other service components to update devices. Both are part of Windows Enterprise E3.
+ - question: Is Windows 365 for Enterprise supported with Windows Autopatch?
+ answer: |
+ Windows Autopatch supports Windows 365 for Enterprise. Windows 365 for Business isn't supported.
+ - question: Does Windows Autopatch support Windows Education (A3) or Windows Front Line Worker (F3) licensing?
+ answer: |
+ Autopatch isn't available for 'A' or 'F' series licensing.
+ - question: Will Windows Autopatch support local domain join Windows 10?
+ answer: |
+ Windows Autopatch doesn't support local (on-premise) domain join. Windows Autopatch supports [Hybrid AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or pure [Azure AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid).
+ - question: Will Windows Autopatch be available for state and local government customers?
+ answer: |
+ Windows Autopatch is available for all Windows E3 customers using Azure commercial cloud. However, Autopatch isn't currently supported for government cloud (GCC) customers.
+ - name: Requirements
+ questions:
+ - question: What are the prerequisites for Windows Autopatch?
+ answer: |
+ - [Supported Windows 10/11 Enterprise edition versions](/windows/release-health/supported-versions-windows-client)
+ - [Azure Active Directory (Azure AD) Premium](/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses)
+ - [Hybrid Azure AD-Joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or [Azure AD-joined only](/azure/active-directory/devices/concept-azure-ad-join-hybrid)
+ - [Microsoft Intune](https://www.microsoft.com/cloud-platform/microsoft-intune)
+ - [Co-management](/prepare/windows-autopatch-prerequisites.md#co-management-requirements)
+ - [Configuration Manager version 2010 or later](/mem/configmgr/core/plan-design/changes/whats-new-in-version-2010)
+ - [Switch workloads for device configuration, Windows Update and Microsoft 365 Apps from Configuration Manager to Intune](/mem/configmgr/comanage/how-to-switch-workloads) (minimum Pilot Intune)
+ - question: What are the licensing requirements for Windows Autopatch?
+ answer: |
+ - Windows Autopatch is included with Window 10/11 Enterprise E3 or higher. For more information, see [More about licenses](../prepare/windows-autopatch-prerequisites.md#more-about-licenses).
+ - [Azure AD Premium](/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses) (for Co-management)
+ - [Microsoft Intune](/mem/intune/fundamentals/licenses) (includes Configuration Manager 2010 or greater via co-management)
+ - question: Are there hardware requirements for Windows Autopatch?
+ answer: |
+ No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/whats-new/windows-11-requirements). Windows devices must be supported by your hardware OEM.
+ - name: Device registration
+ questions:
+ - question: Can Autopatch customers individually approve or deny devices?
+ answer: |
+ No you can't individually approve or deny devices. Once a device is registered with Windows Autopatch, updates are rolled out to the devices according to its ring assignment. Individual device level control isn't supported.
+ - name: Update Management
+ questions:
+ - question: What systems does Windows Autopatch update?
+ answer: |
+ - Windows 10/11 quality updates: Windows Autopatch manages all aspects of update rings.
+ - Microsoft 365 Apps for enterprise updates: All devices registered for Windows Autopatch will receive updates from the Monthly Enterprise Channel.
+ - Microsoft Edge: Windows Autopatch configures eligible devices to benefit from Microsoft Edge's progressive rollouts on the Stable channel and will provide support for issues with Microsoft Edge updates.
+ - Microsoft Teams: Windows Autopatch allows eligible devices to benefit from the standard automatic update channels and will provide support for issues with Teams updates.
+ - question: What does Windows Autopatch do to ensure updates are done successfully?
+ answer: For information about the Microsoft Admin Center, see [Manage third-party app subscriptions for your organization](/microsoft-365/commerce/manage-saas-apps).
+ - question: What does Windows Autopatch do to ensure updates are done successfully?
+ answer: |
+ For Windows quality updates, updates are applied to device in the Test ring first. The devices are evaluated, and then rolled out to the First, Fast then Broad rings. There's an evaluation period at each progression. This process is dependent on customer testing and verification of all updates during these rollout stages. The outcome is to ensure that registered devices are always up to date and disruption to business operations is minimized to free up your IT department from that ongoing task.
+ - question: What happens if there's an issue with an update?
+ answer: |
+ Autopatch relies on the following capabilities to help resolve update issues:
+ - Pausing and resuming: If Windows Autopatch detects an issue with a Windows quality release, we may decide that it's necessary to pause that release. Once the issue is resolved, the release will be resumed. For more information, see [Pausing and resuming a Windows quality release](../operate/windows-autopatch-wqu-overview.md#pausing-and-resuming-a-release).
+ - Rollback: If Windows Autopatch detects issues between versions of Microsoft 365 Apps for enterprise, we might force all devices to roll back to the previous version. For more information, see [Update controls for Microsoft 365 Apps for enterprise](../operate/windows-autopatch-microsoft-365-apps-enterprise.md#update-controls).
+ - question: Will Windows quality updates be released more quickly after vulnerabilities are identified, or what is the regular cadence of updates?
+ answer: |
+ For zero-day threats, Autopatch will have an [expedited release cadence](../operate/windows-autopatch-wqu-overview.md#expedited-releases). For normal updates Autopatch uses a [regular release cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) starting with devices in the Test ring and completing with general rollout to the Broad ring.
+ - question: Can customers configure when to move to the next ring or is it controlled by Windows Autopatch?
+ answer: |
+ The decision of when to move to the next ring is handled by Windows Autopatch; it isn't customer configurable.
+ - question: Can you customize the scheduling of an update rollout to only install on certain days and times?
+ answer: |
+ No, you can't customize update scheduling. However, you can specify [active hours](../operate/windows-autopatch-wqu-end-user-exp.md#servicing-window) to prevent users from updating during business hours.
+ - question: Does Autopatch support include and exclude groups, or dynamic groups to define ring membership?
+ answer: |
+ Windows autopatch doesn't support managing update ring membership using your Azure AD groups. For more information, see [Move devices between rings](../operate/windows-autopatch-update-management.md#moving-devices-between-rings).
+ - question: Does Autopatch have two release cadences per update or are there two release cadences per-ring?
+ answer: |
+ The release cadences are defined based on the update type. For example, a [regular cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) (for a Windows quality update would be a gradual rollout from the Test ring to the Broad ring over 14 days whereas an [expedited release](../operate/windows-autopatch-wqu-overview.md#expedited-releases) would roll out more rapidly.
+ - name: Support
+ questions:
+ - question: What support is available for customers who need help with onboarding to Windows Autopatch?
+ answer: |
+ The FastTrack Center is the primary mode of support for customers who need assistance from Microsoft to meet the pre-requisites (such as Intune and Azure or Hybrid AD) for onboarding to Windows Autopatch. For more information, see [Microsoft FastTrack for Windows Autopatch](../operate/windows-autopatch-support-request.md#microsoft-fasttrack). When you've onboarded with Windows Autopatch, you can [submit a support request](../operate/windows-autopatch-support-request.md) with the Windows Autopatch Service Engineering Team.
+ - name: Other
+ questions:
+ - question: Are there Autopatch specific APIs or PowerShell scripts available?
+ answer: |
+ Programmatic access to Autopatch isn't currently available.
+additionalContent: |
+ ## Additional Content
+ [Provide feedback](https://go.microsoft.com/fwlink/?linkid=2195593) or start a discussion in our [Windows Autopatch Tech Community](https://aka.ms/Community/WindowsAutopatch
\ No newline at end of file
From 0ddd9c33ab959237b775d9274b6dd4cf480bb8ce Mon Sep 17 00:00:00 2001
From: Priscilla Madrigal <104532333+pmadrigalm@users.noreply.github.com>
Date: Thu, 2 Jun 2022 09:52:14 -0700
Subject: [PATCH 42/61] Update quick-assist.md
---
windows/client-management/quick-assist.md | 22 +++-------------------
1 file changed, 3 insertions(+), 19 deletions(-)
diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md
index 9591465cfc..30b7cf1123 100644
--- a/windows/client-management/quick-assist.md
+++ b/windows/client-management/quick-assist.md
@@ -14,7 +14,7 @@ ms.collection: highpri
# Use Quick Assist to help users
-Quick Assist is a Windows application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user's device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices.
+Quick Assist is a Microsoft Store application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user's device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices.
## Before you begin
@@ -42,7 +42,6 @@ Both the helper and sharer must be able to reach these endpoints over port 443:
| `*.api.support.microsoft.com` | API access for Quick Assist |
| `*.vortex.data.microsoft.com` | Used for diagnostic data |
| `*.channelservices.microsoft.com` | Required for chat services within Quick Assist |
-| `*.skype.com` | Skype requests may vary based on geography. If connection issues persist, test this endpoint. |
| `*.remoteassistanceprodacs.communication.azure.com` | Azure Communication Services (ACS) technology the Quick Assist app uses. |
| `*.turn.azure.com` | Protocol used to help endpoint. |
| `browser.pipe.aria.microsoft.com` | Required diagnostic data for client and services used by Quick Assist. |
@@ -105,23 +104,8 @@ Either the support staff or a user can start a Quick Assist session.
## If Quick Assist is missing
-If for some reason a user doesn't have Quick Assist on their system or it's not working properly, try to uninstall and reinstall it.
-
-### Uninstall Quick Assist
-
-1. Start the Settings app, and then select **Apps**.
-2. Select **Optional features**.
-3. In the **Installed features** search bar, type *Quick Assist*.
-4. Select **Microsoft Quick Assist**, and then select **Uninstall**.
-
-### Reinstall Quick Assist
-
-1. Start the Settings app, and then select **Apps**.
-2. Select **Optional features**.
-3. Select **Add a feature**.
-4. In the new dialog that opens, in the **Add an optional feature** search bar, type *Quick Assist*.
-5. Select the check box for **Microsoft Quick Assist**, and then select **Install**.
-6. Restart the device.
+If for some reason a user doesn't have Quick Assist on their system or it's not working properly, try to uninstall and reinstall it.
+[Install Quick Assist] (https://support.microsoft.com/en-us/windows/install-quick-assist-c17479b7-a49d-4d12-938c-dbfb97c88bca).
## Next steps
From af97d0ba7c5d28c57a0da8257749e08875c9b62c Mon Sep 17 00:00:00 2001
From: Anthony Swierkosz 2I{u)E9-?6E
zjIqHuIEQb-Mda4V;>fLh(XjZ|GD?w#IWH|KUcK0{AlEhirx8gYaxM{LhRa+IpHjrd
zk>NJIZ6Ucfqj|M*+<&w7QUQD;lT?ZZ8%hR$0onktRO|lT Kn}S2qKw
zf7{$iYf?I6
|
-| What are the licensing requirements for Windows Autopatch? |
|
+| What are the licensing requirements for Windows Autopatch? |
|
| Are there hardware requirements for Windows Autopatch? | No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/windows-11-specifications?r=1). Windows devices must be supported by your hardware OEM. |
## Device registration
diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
index 8dff734be5..9f65feb92f 100644
--- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
+++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
@@ -66,7 +66,7 @@ Windows Autopatch requires the following licenses:
| Result | Meaning |
| ----- | ----- |
-| Not ready | Windows Autopatch requires Windows 10/11 Enterprise E3 (or higher) to be assigned to your users. Additionally, Azure Active Directory Premium, Microsoft Intune and Windows 10/11 Enterprise are required. For more information, see [more about licenses](../prepare/windows-autopatch-prerequisites.md#more-about-licenses). |
+| Not ready | Windows Autopatch requires Windows 10/11 Enterprise E3 (or higher) to be assigned to your users. Additionally, Azure Active Directory Premium, and Microsoft Intune are required. For more information, see [more about licenses](../prepare/windows-autopatch-prerequisites.md#more-about-licenses). |
### Windows Autopatch service accounts
From 34bc2d44ae61657cdfa5c8f60eae692cab996215 Mon Sep 17 00:00:00 2001
From: tiaraquan
|
| What are the licensing requirements for Windows Autopatch? |
|
-| Are there hardware requirements for Windows Autopatch? | No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/windows-11-specifications?r=1). Windows devices must be supported by your hardware OEM. |
+| Are there hardware requirements for Windows Autopatch? | No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/whats-new/windows-11-requirements). Windows devices must be supported by your hardware OEM. |
## Device registration
diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
index 9f65feb92f..56770f8dd7 100644
--- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
+++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-fix-issues.md
@@ -45,7 +45,7 @@ Your "Windows 10 update ring" policy in Intune must not target any Windows Autop
| Result | Meaning |
| ----- | ----- |
| Not ready | You have an "update ring" policy that targets all devices, all users, or both. Change the policy to use an assignment that targets a specific Azure Active Directory (AD) group that doesn't include any Windows Autopatch devices.
For more information, see [Manage Windows 10 software updates in Intune](/mem/intune/protect/windows-update-for-business-configure). |
+| Advisory | Both the **Modern Workplace Devices - All** and **Modern Workplace - All** Azure AD groups are groups that we create after you enroll in Windows Autopatch. This advisory is flagging an action you should take after enrolling into the service:
For more information, see [Manage Windows 10 software updates in Intune](/mem/intune/protect/windows-update-for-business-configure). |
## Azure Active Directory settings
@@ -53,7 +53,7 @@ You can access Azure Active Directory (AD) settings in the [Azure portal](https:
### Conditional access policies
-Conditional access policies must not prevent Windows Autopatch from connecting to your Intune tenant.
+Conditional access policies must not prevent Windows Autopatch from connecting to your tenant.
| Result | Meaning |
| ----- | ----- |
From 3b0cfd0adb5aa87780fdf2eff07e78da1153990b Mon Sep 17 00:00:00 2001
From: tiaraquan
|
-| What are the licensing requirements for Windows Autopatch? |
|
-| Are there hardware requirements for Windows Autopatch? | No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/whats-new/windows-11-requirements). Windows devices must be supported by your hardware OEM. |
-
-## Device registration
-
-| Question | Answer |
-| ----- | ----- |
-| Can Autopatch customers individually approve or deny devices? | No you can't individually approve or deny devices. Once a device is registered with Windows Autopatch, updates are rolled out to the devices according to its ring assignment. Individual device level control isn't supported. |
-
-## Update management
-
-| Question | Answer |
-| ----- | ----- |
-| What systems does Windows Autopatch update? |
|
-| Will Windows quality updates be released more quickly after vulnerabilities are identified, or what is the regular cadence of updates? | For zero-day threats, Autopatch will have an [expedited release cadence](../operate/windows-autopatch-wqu-overview.md#expedited-releases). For normal updates Autopatch uses a [regular release cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) starting with devices in the Test ring and completing with general rollout to the Broad ring. |
-| Can customers configure when to move to the next ring or is it controlled by Windows Autopatch? | The decision of when to move to the next ring is handled by Windows Autopatch; it isn't customer configurable. |
-| Can you customize the scheduling of an update rollout to only install on certain days and times? | No, you can't customize update scheduling. However, you can specify [active hours](../operate/windows-autopatch-wqu-end-user-exp.md#servicing-window) to prevent users from updating during business hours. |
-| Does Autopatch support include and exclude groups, or dynamic groups to define ring membership? | Windows autopatch doesn't support managing update ring membership using your Azure AD groups. For more information, see [Move devices between rings](../operate/windows-autopatch-update-management.md#moving-devices-between-rings). |
-| Does Autopatch have two release cadences per update or are there two release cadences per-ring? | The release cadences are defined based on the update type. For example, a [regular cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) (for a Windows quality update would be a gradual rollout from the Test ring to the Broad ring over 14 days whereas an [expedited release](../operate/windows-autopatch-wqu-overview.md#expedited-releases) would roll out more rapidly. |
-
-## Support
-
-| Question | Answer |
-| ----- | ----- |
-| What support is available for customers who need help with onboarding to Windows Autopatch? | The FastTrack Center is the primary mode of support for customers who need assistance from Microsoft to meet the pre-requisites (such as Intune and Azure or Hybrid AD) for onboarding to Windows Autopatch. For more information, see [Microsoft FastTrack for Windows Autopatch](../operate/windows-autopatch-support-request.md#microsoft-fasttrack).xARFYWs~ZvoV#+iDKIGprWi?dm)a4)Wd)PZawP~Q_NHN!<^=F
zwaGN7!I+@x14SmQhK!4{(VUlm)rN>hlvh?g-TN9u_kCq2_U;d8eVjtx#9j+eX5W>+
zBC9lIr`!e6dwzdUnNXozN+0v!E0GWtRJt?lB=7@u{7F%&=C46NX}?
!)V0@7pgv082Cmo}x0N-BZra<=P!O
z9CXer!nNM$Jkh2vzmfuNaNG*R%_P;MLeHfRqx@~34k^^Rn`m~8sfOg^UZ|+uuQfFq
zWLAV6=#3Wy8+m0$2kY7##cN2327UzSTP-H3o~x@G4|KCL+T97S)Y;3zO;YhAI#ydF
zbWnN&Qg3pMb>pG|DGri!qco%O(-9`m>QO-^qv~QPqhm%~M=XVUx~5ip2ha_)L=Pkf
z`j_?4D_g}TP%D;rSQ2*yqG!owm+H-(`+456zr51Dw2!g1K9d04ros>_%T9TFK9BhB
zrhIKA-i>6`W26N}-*=Z4JU7|$*LK{lh7lQwQLulp00)A#Z?J`X2z4*L?7nU2Z-xwS
zPcwWWIVWDXZ?D|i=Mn#!N0(jdU-w1F`zCr=T~wx0{`|86){@lkK*uI5UdwAt8GX8|
zkS;hpGnB%@rPSv*b663yk8SR%Q8OkuteBk;tlKP6d8#B&0L)u0iRX
X^%}VI9C2G&&g^D_5>boZfRMHVFg@)
zX}HVerS}OJe0+SmXJQ?}6f{kBb#;$+p!<@Pgax2W?ZpNlLIVd+NT;oCG(<&3VM5QB
zRaI4;R8>}1*1Q01dKGnbWp#B4;LL?x7wCJhORv_4Tc%z+r6zzWR7({%|K7rMe@h3L
zZD`4R4E=_9_|8l#uv*Vd8`14%Vv6CXe4i91mYmmaezG}hzE_*8)E99%6
T%eC#C6mR7XARzX930F&QsdSs+L8A!<(
z1Cta@RGv}_`j!7_!e_;AT-Vy`77EXjuDE!ica-Zr8W7thw|@b8?$&xfx2iy+vH5z8
zk7qYQd7<6Mi{|!sM@RPCn{SrK9`2mbJ%1ETnMG;&W>@X_?jconZfRj!a0AwmCG8>e
zt
~U~Gvf@TVD+>9V=TC2r%WS?xB$c4MIm^*Qag{zP|)+5%>`}eOCqnFPkP`^@!
ziBEm`%~%-XsGQDIW?>G`>&
zxES!L`jyG&rlh7OE+YdkCnpyf6=lGhDt)UpJpGbHrt0J4Bawf~;M3rICQFH~tE*er
z*vQ7r{9Vh|qjU=&a-2CuzApDi%fI}+)ukJe%YJ26T|X+9+73>$wDfApiqHLOut-rg
z)6gMHgTC|O0W>bqm<7+&oN@}|#*ALQ5tVY;6yndm7>G#0Dy;U$u+aq#R^ejnZolaz
zY4)VJgd}M=c3>QR_A6}ai6W_t8fLCiI9w~H*#LwDS6``DHabI*M(lsJ0APBlGnB~j
zg_Nu`5+aBZJoth_*%+P{mm_Lq?RZ<#5?$dl^__PTH1@uG$lsC~w
z-FXMEa#+Jach=x>Y;rUybcMjnM_ur*PmZh*JIZic^PPNl40zdF1(vFjJc_sx*+|2B
z*==WD)Gz*$AQ5VePk`$P06?S>J&meya=ybVV(
rb`>cgcvTaBv;(;Q3laK!*y@OjLxzW*(Q`P465dQ{}J5aAr(d
zn;98>3Cx%BgcG%Iiv-Q-KdGrZhetUzZHX!Qh&?P5pqDSuC;-mXF7ujb1=`?lle`S$
zkZjPZ1W7ghMJGB4cMsnA1qDD^F1Mf{sHlj67(=@My3@P{9Q1N6)rg3Q1Y~5rCRI-r
zx}6;h=y3z=8-rBnTR)UCSpncy9pA@lnA4T8!=-jXo^ET4-n1CeZDI^AEF*&y6bp`g
z#9@(<6LWL@Bk6*&d1`#=BWmX?nXvV<8xSnA0KD+~w+@#gljJCfDIoUL%qal25{Nxv
z5fNDEh|8`Mp}2jYeg2e@%R{s-ou_Z4C8{ItbBsM@Efth?XaD|Yt!r*fx6?J;j!*n~
z`e*B)xzY)nt))45=IU_e!fT$MZCUo9!;4EJLAAvPf78Rj0=7i5Up_nBF-=rQy3hsO
zug{ZvUpW(Q-0zzV509n3dVEhVudcBM>B8{VieRThr5_OT6H#VNd^?6cgd&Mr