5.9 KiB
title, description, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author
title | description | ms.prod | ms.mktglfcycl | ms.sitesec | ms.pagetype | author |
---|---|---|---|---|---|---|
Get started with Update Compliance (Windows 10) | Explains how to configure Update Compliance. | w10 | deploy | library | deploy | greg-lindsay |
Get started with Upgrade Compliance
This topic explains the necessary steps to set up and prepare your environment for Windows Analytics: Update Compliance.
The steps are broken down into sections that follow the recommended setup process:
- Ensuring you meet the prerequisites
- Adding Update Compliance to Microsoft Operations Management Suite
- Deploying your Commercial ID to your organization’s devices
Update Compliance Prerequisites
There are a few prerequisites for getting the most out of Update Compliance.
-
Update Compliance is currently only compatible with Windows 10 devices. The solution is intended to be used with desktop devices (Windows 10 workstations and laptops).
-
The solution requires that Windows 10 telemetry is enabled on all devices that are intended to be displayed in the solution. These devices must have at least the basic level of telemetry enabled. To learn more about Windows telemetry, read this article on configuring Windows telemetry in your organization.
-
The telemetry of your organization’s Windows devices must make it to Microsoft. Microsoft has specified endpoints for different aspects of telemetry, which must be whitelisted by your organization so the data can make it to Microsoft. The following table was taken from the article on telemetry endpoints and summarizes what each endpoint is used for:
Service Endpoint Connected User Experience and Telemetry component v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.comWindows Error Reporting watson.telemetry.microsoft.com Online Crash Analysis oca.telemetry.microsoft.com
Add Update Compliance to Microsoft Operations Management Suite
Update Compliance is offered as a solution in the Microsoft Operations Management Suite (OMS), a collection of cloud-based servicing for monitoring and automating your on-premises and cloud environments. For more information about OMS, see Operations Management Suite overview.
If you are already using OMS, you’ll find Update Compliance in the Solutions Gallery. Select the Update Compliance tile in the gallery and then click Add on the solution's details page. Update Compliance is now visible in your workspace.
If you are not yet using OMS:
-
Go to Operations Management Suite’s page on Microsoft.com and click Sign in.
-
Sign in to Operations Management Suite (OMS). You can use either a Microsoft Account or a Work or School account to create a workspace. If your company is already using Azure Active Directory (Azure AD), use a Work or School account when you sign in to OMS. Using a Work or School account allows you to use identities from your Azure AD to manage permissions in OMS.
-
Create a new OMS workspace.
-
Enter a name for the workspace, select the workspace region, and provide the email address that you want associated with this workspace. Select Create.
-
If your organization already has an Azure subscription, you can link it to your workspace. Note that you may need to request access from your organization’s Azure administrator. If your organization does not have an Azure subscription, create a new one or select the default OMS Azure subscription from the list. If you do not yet have an Azure subscription, follow this guide to create and link an Azure subscription to an OMS workspace.
-
To add the Update Compliance solution to your workspace, go to the Solutions Gallery.
-
Select the Update Compliance tile in the gallery and then select Add on the solution’s details page. Note that you may need to scroll to find Update Compliance. The solution is now visible on your workspace.
-
Click the Update Compliance tile to configure the solution. The Settings Dashboard opens.
-
Click “Subscribe” to subscribe to OMS Update Compliance. You will then need to distribute your Commercial ID across all your organization’s devices. More information on the Commercial ID is provided below.
After you are subscribed to OMS Update Compliance and your devices have a Commercial ID, you will begin receiving data. It will typically take 24 hours for the first data to begin appearing. The following section explains how to deploy your Commercial ID to your Windows 10 devices.
Deploy your Commercial ID to your Windows 10 devices
For your devices to show up in Windows Analytics: Update Compliance, they must be configured with your organization’s Commercial ID. This is so that Microsoft knows that a given device is a member of your organization and to feed that device’s data back to you. There are two primary methods for widespread deployment of your Commercial ID: using Microsoft’s Group Policy (GP) and using Microsoft Mobile Device Management (MDM).
-
Using Microsoft Group Policy (GP) Deploying your Commercial ID using GP can be accomplished through Microsoft Group Policy Management Console (GPMC), or through an individual device’s Local Group Policy Editor.
- From the user interface, navigate to Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds
- Double-click Commercial ID
- In the Options box, provide the Commercial ID GUID provided to you, and then click OK.
-
Using Microsoft Mobile Device Management (MDM) Microsoft’s Mobile Device Management can be used to deploy your Commercial ID to your organization’s devices. The Commercial ID is listed under Provider/ProviderID/CommercialID. More information on deployment through MDM can be found here.