Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings

FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings

Written By Anoop C Nair
Last Updated August 5, 2024
Posted In Azure
SHARE

This post will discuss how FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings. Are you an early adaptor of Intune? Intune custom policies configured using CSPs are very helpful in most scenarios.

But you can get into trouble with some custom CSPs if you don’t update them promptly. This post will read, “FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings.”

Windows 10 update ring policies define the behavior of Windows 10 software updates on Intune-managed devices. You can create different policies to define CBB (Semi-Annual) and CB (Semi-Annual Targeted) channels for Windows 10 machines.

You can also use the Windows 10 update ring policy to set quality updates and Delivery Optimization (DO) behaviors of Windows 10 machines.

Patch My PC

What are Intune Windows 10 Update Ring Policies? – FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings

When you set one machine into the CB/SAT ring, it will receive a Windows 10 upgrade notification whenever Microsoft releases a new version of Windows 10.

I have a post and video tutorial about Windows 10 update ring policies.  More details are available in “How to Setup Windows 10 Software Update Policy Rings in Intune Azure Portal“.

FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings

Issue Statement

The machines are supposed to get Windows 10 1709 update/upgrade through the Current Branch for Business (CBB/SA) channel and are getting the update as part of the Current Branch channel (CB/SAT).

  • CB = Semi-Annual Targeted (SAT)
  • CBB = Semi-Annual (SA)

For example, you have two custom policies in the Intune environment to define Windows 10 update rings. These policies define the Windows 10 feature update behavior for machines.

Profile NamePlatformProfile Type
Windows 10 BYOD Custom PolicyWindows 10Custom
Windows 10 CYOD Custom PolicyWindows 10Custom
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings – Table 1
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings - Fig,1
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings – Fig,1

Why are Windows 10 CBB Machines Getting CB Updates?

The CSPs used in the custom policies are NOT supported for Windows 10 1607 and later versions.

  • ./Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade  1 (CBB/SA)
  • ./Vendor/MSFT/Policy/Config/Update/RequireDeferUpgrade  0 (CB/SAT)
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings - Fig,2
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings – Fig,2

How to Fix the Windows 10 Update Ring Issue for Intune Managed Devices?

Creating new policies to define Windows 10 update rings would be best. This can be done using the Intune console, software updates, and Windows 10 Update Rings. One policy is for Windows 10 Current Branch/Semi-Annual Targeted channel. Another approach is for Windows 10’s current branch for the business/semi-annual channel.

You need to define a new policy in the Intune console for the Windows 10 CB/Semi-Annual Channel Targeted (SAT) channel. Software updates: Windows 10 Update Rings—Semi-Annual Channel Targeted (SAT).

FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings - Fig,3
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings – Fig,3

You need to define a new policy in the Intune console for the Windows 10 CBB/Semi-Annual Channel (SA) channel. Software updates: Windows 10 Update Rings—Semi-Annual Channel (SA).

FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings - Fig,4
FIX CBB Ring Devices are Getting CB Updates Intune Windows 10 Update Rings – Fig,4

Once newly created Windows 10 Update ring policies are deployed to respective Azure AD Device groups, remove or delete the Intune custom policies.

References

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Azure

Azure Files Goes Cloud-Native with Entra-Only Identities and Managed Identities

Key Takeaways Managed Identity and Entra-Only identities for Azure Files help organizations build a fully cloud-native and secure storage environment by removing the need for passwords, storage account keys, on-premises Active Directory, or hybrid identity infrastructure. With native Microsoft Entra ID authentication, applications, virtual machines, and users can securely access Azure Files using identity-based authentication […]

AC Anoop C Nair 4 min read
Azure

Microsoft Dev Box Moves to Maintenance Mode as Windows 365 Takes Lead for Developer Scenarios

key Takeaways: Let’s discuss about Microsoft Dev Box Moves to Maintenance Mode as Windows 365 Takes Lead for Developer Scenarios. Microsoft announced the Maintenance mode in Dev Box, and no additional features are planned. Microsoft’s investments for developer cloud environments are focused on Windows 365, which provides a unified, scalable solution for developer scenarios. Microsoft […]

AC Anoop C Nair 3 min read
Azure

Multi-Zone Management Platform Architecture for Windows Cloud Solutions

Key Takeaways Multi-Zone Management Platform Architecture for Windows Cloud Solutions! This architecture highlights the core MicrosoftMicrosoft Azure components used to host and deliver Cloud PC services. To ensure high availability and reliability, the infrastructure is distributed across multiple availability zones within each region. This design helps protect the service from zonal outages and keeps workloads […]

AC Anoop C Nair 4 min read
Azure

How to Protect and Recover your Infrastructure with Azure Site Recovery

Key Takeaways Azure Site Recovery is a disaster-recovery service in Microsoft Azure that helps keep your applications running if a cloud region fails. Normally, your virtual machines (VMs) run in one region. ASR creates a copy of those machines in another region so that if the main region goes down, your services can continue running […]

AC Anoop C Nair 4 min read