Information Technology Reference
In-Depth Information
Microsoft Intune
Microsoft Intune provides you with an alternative method of managing software updates for
computers that are outside the perimeter network or in remote branch offices where deploy-
ing a WSUS server or Configuration Manager is impractical. In this section, you learn how you
can manage software updates with Intune.
This section covers the following topics:
■
Microsoft Intune update policies
■
Update categories and classifications
Approving updates
■
Automatic approval rules
■
Third-party updates
■
Intune can provide software updates to clients on which the Intune agent is installed. When
you install the Intune agent on a computer, the computer retrieves updates from Intune. You
should ensure that any Group Policy settings configuring an update server are removed prior
to deploying the Intune agent because the settings might interfere with the computer retriev-
ing updates.
How Intune clients retrieve updates is determined by Intune policies, which include set-
tings related to endpoint protection, network bandwidth, user device linking, and updates.
The updates settings enable you to configure settings around the installation of software
updates and applications.
To create an update policy, perform the following steps:
1.
In the Intune Administrator console, click Policy, click Overview, and then click Add
Policy under Tasks.
In the Create A New Policy dialog box, click Windows Intune Agent Settings, select
Create And Deploy A Custom Policy, as shown in Figure 3-12, and then click the Create
Policy button.
2.