diff --git a/windows/deployment/update/deployment-service-drivers.md b/windows/deployment/update/deployment-service-drivers.md index c8a29a1586..97384994e0 100644 --- a/windows/deployment/update/deployment-service-drivers.md +++ b/windows/deployment/update/deployment-service-drivers.md @@ -28,7 +28,7 @@ In this tutorial, you will: ### Permissions -[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)] +[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md)] ## Open Graph Explorer diff --git a/windows/deployment/update/deployment-service-expedited-updates.md b/windows/deployment/update/deployment-service-expedited-updates.md index 7a21b4a50f..b91cc15f39 100644 --- a/windows/deployment/update/deployment-service-expedited-updates.md +++ b/windows/deployment/update/deployment-service-expedited-updates.md @@ -29,7 +29,7 @@ In this tutorial, you will: ### Permissions -[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)] +[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md)] ## Open Graph Explorer diff --git a/windows/deployment/update/deployment-service-feature-updates.md b/windows/deployment/update/deployment-service-feature-updates.md index 18c90eb594..d69fee53cf 100644 --- a/windows/deployment/update/deployment-service-feature-updates.md +++ b/windows/deployment/update/deployment-service-feature-updates.md @@ -26,7 +26,7 @@ In this tutorial, you will: ### Permissions -[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md.md)] +[!INCLUDE [Windows Update for Business deployment service tutorial permissions](./includes/wufb-deployment-tutorial-permissions.md)] ## Open Graph Explorer diff --git a/windows/deployment/update/deployment-service-overview.md b/windows/deployment/update/deployment-service-overview.md index 7ef4804c87..f74ac54e66 100644 --- a/windows/deployment/update/deployment-service-overview.md +++ b/windows/deployment/update/deployment-service-overview.md @@ -15,10 +15,7 @@ ms.date: 12/31/2017 # Windows Update for Business deployment service -**Applies to** - -- Windows 10 -- Windows 11 +***(Applies to: Windows 11 & Windows 10)*** The Windows Update for Business deployment service is a cloud service within the Windows Update for Business product family. It provides control over the approval, scheduling, and safeguarding of updates delivered from Windows Update. It's designed to work in harmony with your existing Windows Update for Business policies. @@ -58,8 +55,11 @@ The deployment service exposes these capabilities through Microsoft [Graph REST To work with the deployment service, devices must meet all these requirements: -- Be running Windows 10, version 1709 or later (or Windows 11) -- Be joined to Azure Active Directory (AD) or Hybrid AD +- Devices must be [Azure AD joined](/azure/active-directory/devices/concept-azure-ad-join) or [hybrid Azure AD joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid) +- Run one of the following operating systems: + - Windows 11 + - Windows 10, version 1709 or later + - Have one of the following Windows 10 or Windows 11 editions installed: - Pro - Enterprise @@ -68,6 +68,7 @@ To work with the deployment service, devices must meet all these requirements: - Pro for Workstations Additionally, your organization must have one of the following subscriptions: + - Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) - Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 or A5) - Windows Virtual Desktop Access E3 or E5 diff --git a/windows/deployment/update/deployment-service-troubleshoot.md b/windows/deployment/update/deployment-service-troubleshoot.md index f584bbae71..e97748686c 100644 --- a/windows/deployment/update/deployment-service-troubleshoot.md +++ b/windows/deployment/update/deployment-service-troubleshoot.md @@ -15,10 +15,7 @@ ms.date: 12/31/2017 # Troubleshoot the Windows Update for Business deployment service -**Applies to** - -- Windows 10 -- Windows 11 +***(Applies to: Windows 11 & Windows 10)*** This troubleshooting guide addresses the most common issues that IT administrators face when using the Windows Update for Business [deployment service](deployment-service-overview.md). For a general troubleshooting guide for Windows Update, see [Windows Update troubleshooting](/troubleshoot/windows-client/deployment/windows-update-issues-troubleshooting?toc=/windows/deployment/toc.json&bc=/windows/deployment/breadcrumb/toc.json). diff --git a/windows/deployment/update/includes/wufb-deployment-enroll-device-graph-explorer.md b/windows/deployment/update/includes/wufb-deployment-enroll-device-graph-explorer.md index 70eaace55a..24f11868a3 100644 --- a/windows/deployment/update/includes/wufb-deployment-enroll-device-graph-explorer.md +++ b/windows/deployment/update/includes/wufb-deployment-enroll-device-graph-explorer.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium You enroll devices based on the types of updates you want them to recieve.Currently, you can enroll devices to receive feature updates (`feature`) or drivers (`driver`). You can enroll devices to receive updates from multiple update classifications. -1. To enroll devices, you'll POST to [updatableAssets](/graph/api/resources/windowsupdates-updatableasset) using [enrollAssets](/graph/api/windowsupdates-updatableasset-enrollassets). The following example enrolls three devices to receive driver updates: +1. To enroll devices, POST to [updatableAssets](/graph/api/resources/windowsupdates-updatableasset) using [enrollAssets](/graph/api/windowsupdates-updatableasset-enrollassets). The following example enrolls three devices to receive driver updates: 1. In Graph Explorer, select **POST** from the drop-down list for the HTTP verb. 1. Enter the following request into the URL field:
`https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/enrollAssets` @@ -43,33 +43,3 @@ You enroll devices based on the types of updates you want them to recieve.Curren 1. Select the **Run query** button. The results will appear in the **Response** window. In this case, the status code of [202 Accepted](/troubleshoot/developer/webapps/iis/www-administration-management/http-status-code#2xx---success). :::image type="content" source="../media/7512398-deployment-enroll-asset-graph.png" alt-text="Screenshot of successfully enrolling assets through Graph Explorer." lightbox="../media/7512398-deployment-enroll-asset-graph.png" ::: - - - - - - - - -```rest - -POST https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/enrollAssets -Content-Type: application/json -{ - "updateCategory": "driver", - "assets": [ - { - "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", - "id": "01234567-89ab-cdef-0123-456789abcdef" - }, - { - "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", - "id": "01234567-89ab-cdef-0123-456789abcde0" - }, - { - "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", - "id": "01234567-89ab-cdef-0123-456789abcde1" - } - ] -} -``` diff --git a/windows/deployment/update/includes/wufb-deployment-find-device-name-graph-explorer.md b/windows/deployment/update/includes/wufb-deployment-find-device-name-graph-explorer.md index 8be06bc49a..3e64a0ecf5 100644 --- a/windows/deployment/update/includes/wufb-deployment-find-device-name-graph-explorer.md +++ b/windows/deployment/update/includes/wufb-deployment-find-device-name-graph-explorer.md @@ -10,7 +10,7 @@ ms.localizationpriority: medium --- - +Use the [device](/graph/api/resources/device) resource type to find clients to enroll into the deployment service. Change the query parameters to fit your specific needs. For more information, see [Use query parameters](/graph/query-parameters). Displays the **AzureAD Device ID** and **Name** of all devices: @@ -40,7 +40,7 @@ Displays the **Name** and **Operating system version** for the device that has t GET https://graph.microsoft.com/v1.0/devices?$search="deviceid:01234567-89ab-cdef-0123-456789abcdef"?$select=displayName,operatingSystemVersion ``` -Find devices that don't have virtual machine listed as the model and that have a manufacturer listed. Display the **AzureAD Device ID**, **Name**, and **Operating system version** for each device: +To find devices that likely aren't virtual machines, filter for devices that don't have virtual machine listed as the model but do have a manufacturer listed. Display the **AzureAD Device ID**, **Name**, and **Operating system version** for each device: ```rest GET https://graph.microsoft.com/v1.0/devices?$filter=model ne 'virtual machine' and NOT(manufacturer eq null)&$count=true&$select=deviceid,displayName,operatingSystemVersion diff --git a/windows/deployment/update/includes/wufb-deployment-tutorial-permissions.md b/windows/deployment/update/includes/wufb-deployment-tutorial-permissions.md index b1f494a758..f2da67046b 100644 --- a/windows/deployment/update/includes/wufb-deployment-tutorial-permissions.md +++ b/windows/deployment/update/includes/wufb-deployment-tutorial-permissions.md @@ -10,7 +10,9 @@ ms.localizationpriority: medium --- -The following permissions are needed for the tutorial: +The following permissions are needed for the tutorial: - [WindowsUpdates.ReadWrite.All](/graph/permissions-reference#windows-updates-permissions) for [Windows Update for Business deployment service](/graph/api/resources/windowsupdates) operations. -- At least [Device.Read.All](/graph/permissions-reference#device-permissions) permission to display [device](/graph/api/resources/device) information. \ No newline at end of file +- At least [Device.Read.All](/graph/permissions-reference#device-permissions) permission to display [device](/graph/api/resources/device) information. + +Some roles, such as the [Windows Update deployment administrator](/azure/active-directory/roles/permissions-reference#windows-update-deployment-administrator), already have these permissions.