Take the day off: Windows Autopatch is live and can even fix cloudy PCs
- Reference: 1657605793
- News link: https://www.theregister.co.uk/2022/07/12/windows_auopatch_live/
- Source link:
The software giant on Monday [2]announced Windows Autopatch is up and running.
Not all of you can put your feet up, today or for the foreseeable future. For starters, the service only applies to those customers that have paid for Windows Enterprise E3 and E5 licenses. You'll also need Azure Active Directory Premium and Microsoft Intune.
[3]
What's more, AD "must either be the source of authority for all user accounts, or user accounts must be synchronized from on-premises Active Directory using the latest supported version of Azure Active Directory Connect to enable Hybrid Azure Active Directory join," explains Microsoft's [4]deployment guide . Intune needs to be set as your Mobile Device Management (MDM) authority. Either that or co-management must be turned on and enabled on the target devices.
[5]
[6]
You'll also need a proxy or firewall that uses TLS 1.2, and to ensure that four Microsoft URLs are always available. One has the comforting address "logcollection.mmd.microsoft.com".
With all that in place, feel free to enroll your endpoints and watch patches start to implement themselves. Then put your feet up.
[7]Choosing a non-Windows OS on Lenovo Secured-core PCs is trickier than it should be
[8]Microsoft resorts to Registry hack to keep Outlook from using Windows 11 search
[9]Microsoft rolls back default macro blocks in Office without telling anyone
But don't relax too much. Microsoft has already acknowledged the service can't prevent glitches caused by bad patches.
"Because the Autopatch service has such a broad footprint, and pushes updates around the clock, we are able to detect potential issues among an incredibly diverse array of hardware and software configurations," states Microsoft's go-live announcement.
[10]
"This means that an issue that may have an impact on your portfolio could be detected and resolved before ever reaching your estate."
Or a patch could brick or bork your kit, as happened when Patch Tuesday for June 2022 [11]broke Wi-Fi and Windows on Arm for some users, and when the Windows 10 May 2022 update [12]caused authentication failures .
Microsoft's promised that as more customers use Autopatch, automation should improve matters beyond its current 99.6 percent app compatibility rate in software updates.
[13]
The go-live post acknowledges that some shops will already have automated and mature patch deployment practices in place, and that Autopatch may therefore have little appeal.
"In talking to customers, we're learning how to evolve the Autopatch service to meet more use cases and deliver more value and are excited for some of the developments which will be announced in the upcoming months in this blog," the post states.
One new development that's already landed is the applicability of Autopatch to Microsoft's [14]Windows 365 Cloud PCs . ®
Get our [15]Tech Resources
[1] https://www.theregister.com/2022/06/17/autopatch/
[2] https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-autopatch-has-arrived/ba-p/3570119
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/patches&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Ys1GQzw5k5PiNgfP3MMruwAAANE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://docs.microsoft.com/en-us/windows/deployment/windows-autopatch/prepare/windows-autopatch-prerequisites
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/patches&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Ys1GQzw5k5PiNgfP3MMruwAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/patches&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Ys1GQzw5k5PiNgfP3MMruwAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2022/07/11/lenovo_secured_core/
[8] https://www.theregister.com/2022/07/11/outlook_search/
[9] https://www.theregister.com/2022/07/08/office_macro_block_rollback/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/patches&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Ys1GQzw5k5PiNgfP3MMruwAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2022/06/20/windows_patch_issues/
[12] https://www.theregister.com/2022/05/20/microsoft_authentication_fix/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/patches&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Ys1GQzw5k5PiNgfP3MMruwAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://www.theregister.com/2021/08/03/windows_365_cloud_pc_pricing_and_first_look/
[15] https://whitepapers.theregister.com/
But, but, but .... there's three links in this chain.
1 - Bad patches from the source. Eg, insufficiently tested patches issued by Microsoft.
2 - Local Server that, with certain configurations, has TB of disk space caching patches and a DB that does not normally perform in any way optimally. (This is what MS are providing here). I wonder how this assists with the telemetry, i mean spying, I mean enhanced marketing experience? As bad as this is, it normally at least works.
3 - A WSUS client that falls over at the drop of a hat. That MS even had to write a support service to try and fix it.
Fix 1 and 3, THEN have a look at 2, please Microsoft.
Nearly Excited
For a moment I thought that AutoPatch would also patch other Apps - no such joy, basically it's windows update with a cloudy management layer isn't it?
If only ALL Apps were in the App Store, then they'd benefit from Auto Updates (Apple/Google style) - we've looked at patch management tools and they fail for large numbers of commercial applications I assume due to close source/licencing requirements - they can't patch something they don't buy?
I'm from Microsoft ...
"I'm from Microsoft and I'm here to help you" ?
The Cloud
One new development that's already landed is the applicability of Autopatch to Microsoft's Windows 365 Cloud PCs.
What? So there are only 365 Windows PCs in the cloud? I thought the cloud was much more popular than that with all the talk of it.
Shows you how much I know...
But
But you can already automate updates.. how is this different?