Building your update rings – including feature and quality updates

With fully managed machines, the last thing you want is them updating themselves without any control over when they receive updates and which updates to receive, and you especially do not want users opting into insider builds themselves.

If you do not have Windows Enterprise licensing to utilize Autopatch (covered in the next recipe) or would just rather manage the updates yourself, you are going to need to configure some update rings.

Getting ready

Before building the rings, navigate to the Entra ID portal and create some Entra ID (static) groups. We will populate these with devices to assign to each of the rings.

Create four groups:

• 1 for Preview devices.
• 1 for Pilot devices.
• 1 for VIP devices.
• 1 for everything else (broad ring). This could be a dynamic group to save on admin overhead.

Once you have created these groups, navigate to the Intune portal; we will be using...