diff --git a/windows/deployment/update/deployment-service-drivers.md b/windows/deployment/update/deployment-service-drivers.md index 76fa41480a..ca38f4ce00 100644 --- a/windows/deployment/update/deployment-service-drivers.md +++ b/windows/deployment/update/deployment-service-drivers.md @@ -15,13 +15,13 @@ ms.date: 02/14/2023 ***(Applies to: Windows 11 & Windows 10)*** - In this tutorial, you will: > [!div class="checklist"] -> * Do X -> * Do Y +> * [Open Graph Explorer](#open-graph-explorer) +> * [Run queries to identify test devices](#run-queries-to-identify-test-devices) +> * [Enroll devices](#enroll-devices) +> * Do Z > * Do Z - ## Open Graph Explorer diff --git a/windows/deployment/update/deployment-service-expedited-updates.md b/windows/deployment/update/deployment-service-expedited-updates.md index bce65e4707..c48849a5d0 100644 --- a/windows/deployment/update/deployment-service-expedited-updates.md +++ b/windows/deployment/update/deployment-service-expedited-updates.md @@ -17,8 +17,8 @@ ms.date: 02/14/2023 In this tutorial, you will: > [!div class="checklist"] -> * Do X -> * Do Y +> * [Open Graph Explorer](#open-graph-explorer) +> * [Run queries to identify test devices](#run-queries-to-identify-test-devices) > * Do Z @@ -34,4 +34,15 @@ In this tutorial, you will: ## Run queries to identify test devices -[!INCLUDE [Graph Explorer device queries](./includes/wufb-deployment-find-device-name.md)] \ No newline at end of file +[!INCLUDE [Graph Explorer device queries](./includes/wufb-deployment-find-device-name.md)] + +## Enroll devices + + +## List updates in the catalog that can be expedited + +1. Query the catalog to find updates that can be expedited, For example, query for all security updates that can be deployed as expedited updates by the deployment service. Using `$top=3` and ordering by `ReleaseDateTimeshows` displays the three most current updates. + +``` +GET https://graph.microsoft.com/beta/admin/windows/updates/catalog/entries?$filter=isof('microsoft.graph.windowsUpdates.qualityUpdateCatalogEntry') and microsoft.graph.windowsUpdates.qualityUpdateCatalogEntry/isExpeditable eq true&$orderby=releaseDateTime desc&$top=3 +``` \ No newline at end of file diff --git a/windows/deployment/update/deployment-service-feature-updates.md b/windows/deployment/update/deployment-service-feature-updates.md index 3f888d0fb9..690f7857af 100644 --- a/windows/deployment/update/deployment-service-feature-updates.md +++ b/windows/deployment/update/deployment-service-feature-updates.md @@ -17,8 +17,8 @@ ms.date: 02/14/2023 In this tutorial, you will: > [!div class="checklist"] -> * Do X -> * Do Y +> * [Open Graph Explorer](#open-graph-explorer) +> * [Run queries to identify test devices](#run-queries-to-identify-test-devices) > * Do Z ## Open Graph Explorer diff --git a/windows/deployment/update/includes/wufb-deployment-enroll-device.md b/windows/deployment/update/includes/wufb-deployment-enroll-device.md new file mode 100644 index 0000000000..e06d2d6f1f --- /dev/null +++ b/windows/deployment/update/includes/wufb-deployment-enroll-device.md @@ -0,0 +1,40 @@ +--- +author: mestew +ms.author: mstewart +manager: aaroncz +ms.technology: itpro-updates +ms.prod: windows-client +ms.topic: include +ms.date: 02/14/2023 +ms.localizationpriority: medium +--- + + +You enroll devices based on the types of updates you want them to recieve.Currently, you can enroll devices to receive feature updates (`feature`) or drivers (`drivers`). You can enroll devices to receive updates from multiple update classifications. + +- As long as a device remains enrolled in feature update management, the device doesn't receive any other feature updates from Windows Update unless explicitly deployed using the deployment service. +- When you enroll devices into driver management, the deployment service becomes the authority for driver updates coming from Windows Update. Devices don't receive drivers from Windows Update until a deployment is manually created or they're added to a driver update policy with approvals. + + +```rest + +POST https://graph.microsoft.com/beta/admin/windows/updates/updatableAssets/enrollAssets +Content-Type: application/json +{ + "updateCategory": "driver", + "assets": [ + { + "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", + "id": "01234567-89ab-cdef-0123-456789abcdef" + }, + { + "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", + "id": "01234567-89ab-cdef-0123-456789abcde0" + }, + { + "@odata.type": "#microsoft.graph.windowsUpdates.azureADDevice", + "id": "01234567-89ab-cdef-0123-456789abcde1" + } + ] +} +``` diff --git a/windows/deployment/update/includes/wufb-deployment-find-device-name.md b/windows/deployment/update/includes/wufb-deployment-find-device-name.md index 3dcb2f89cd..6dc2e06236 100644 --- a/windows/deployment/update/includes/wufb-deployment-find-device-name.md +++ b/windows/deployment/update/includes/wufb-deployment-find-device-name.md @@ -2,23 +2,27 @@ author: mestew ms.author: mstewart manager: aaroncz -ms.prod: w10 -ms.collection: M365-modern-desktop +ms.technology: itpro-updates +ms.prod: windows-client ms.topic: include -ms.date: 08/18/2022 +ms.date: 02/14/2023 ms.localizationpriority: medium --- You will need at least [Device.Read.All](/graph/permissions-reference#device-permissions) permission to display [device](/graph/api/resources/device) information. -Displays the AzureAD ID and name of all devices:
- `GET https://graph.microsoft.com/v1.0/devices?$select=deviceid,displayName` +Displays the AzureAD ID and name of all devices: -Displays the AzureAD ID for a device name that starts with `Test`:
- `GET https://graph.microsoft.com/v1.0/devices?$filter=startswith(displayName, 'Test')&$select=deviceid,displayName` +```rest +GET https://graph.microsoft.com/v1.0/devices?$select=deviceid,displayName +``` +Displays the AzureAD ID for a device name that starts with `Test`: +```rest +GET https://graph.microsoft.com/v1.0/devices?$filter=startswith(displayName,'Test')&$select=deviceid,displayName +``` ### Add a request header @@ -30,9 +34,14 @@ For the next requests, set the **ConsistencyLevel** header to `eventual`. For mo :::image type="content" source="../media/7512398-deployment-service-graph-modify-header.png" alt-text="Screenshot of the request headers tab in Graph Explorer"::: -Displays the name and operating system version for the device that has the AzureAD ID of `01234567-89ab-cdef-0123-456789abcdef`:
- `GET https://graph.microsoft.com/v1.0/devices?$search="deviceid:01234567-89ab-cdef-0123-456789abcdef"?$select=displayName,operatingSystemVersion` +Displays the name and operating system version for the device that has the AzureAD ID of `01234567-89ab-cdef-0123-456789abcdef`: -Find devices that don't have virtual machine listed as the model and that have a manufacturer listed:
-`GET https://graph.microsoft.com/v1.0/devices?$filter=model ne 'virtual machine' and NOT(manufacturer eq null)&$count=true&$select=deviceid,displayName,operatingSystemVersion` +```rest +GET https://graph.microsoft.com/v1.0/devices?$search="deviceid:01234567-89ab-cdef-0123-456789abcdef"?$select=displayName,operatingSystemVersion +``` +Find devices that don't have virtual machine listed as the model and that have a manufacturer listed: + +```rest +GET https://graph.microsoft.com/v1.0/devices?$filter=model ne 'virtual machine' and NOT(manufacturer eq null)&$count=true&$select=deviceid,displayName,operatingSystemVersion +``` diff --git a/windows/deployment/update/includes/wufb-deployment-graph-explorer.md b/windows/deployment/update/includes/wufb-deployment-graph-explorer.md index cef28edb38..468bd45373 100644 --- a/windows/deployment/update/includes/wufb-deployment-graph-explorer.md +++ b/windows/deployment/update/includes/wufb-deployment-graph-explorer.md @@ -2,10 +2,10 @@ author: mestew ms.author: mstewart manager: aaroncz -ms.prod: w10 -ms.collection: M365-modern-desktop +ms.technology: itpro-updates +ms.prod: windows-client ms.topic: include -ms.date: 08/18/2022 +ms.date: 02/14/2023 ms.localizationpriority: medium ---