Simple Guidance (Hopefully) on Moving From WSUS to WUfB

[Miscbrah]

Afternoon all - it's time to tackle this...

 

As per title really, I think I've dug out what to do but not found a good step-by-step out there on it so cobbling this together!

 

So, think I'll probably be first turning off the WSUS server. Ding dong the witch is dead etc. Then referencing this: https://www.ajtek.ca/wsus/how-to-reset-windows-update-gpo-settings/ and then this: https://gal.vin/posts/old/get-started-with-windows-update-for-business/

 

To the first article then and removing anything from GP regarding WSUS policies, so afterwards also remove that reg key at HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate

 

Next to the second article, I’m thinking we go with finding some nice people to be in my testing ring. Once I’ve made some friends they can be in that. Active Directory group for their PCs and laptops (call that “wufb_testers” or something) and then a group for everything else (call that “wufb_everyone” or somesuch.) Reason for this is the nice people will be nice when their machines get duff updates and it b0rks them, and I can defer that for the “wufb_everyone” lot. Set all policies as per that article, with of course options to defer when I fancy.

 

Hopefully all that looks sane so far.

 

Question I have is where do I view any reporting on updates for machines after this? We don't use Intune (which I have read can do something along those lines) but is there anything else in just the regular Azure admin centre or Entra admin? Have heard they can take a number of days to show up and report in to wherever it is.

 

Thanks anyone passing for any help/pointers!

[mavhc]

https://www.edugeek.net/forums/windows-10/207846-update-compliance.html is what I wrote when I set it up

[Miscbrah]

Thanks mavhc.

 

Just got to the link to Katy's blog in it, that thing's GREAT tbh: https://katystech.blog/mem/wufb-and-update-compliance

 

Definitely recommended reading for anyone (like me) after the basics in plain English! The logging/reporting is going to take me a moment or three to get my head around but lots to read. I'll try and keep this updated as I go as either a step-by-step or can turn into a cautionary tale!

 

Thanks again all for any pointers or anything as I go.

[mavhc]

Note they've rewritten it all since I did it, seems less useful now, just give me a list of computers that failed to install updates or haven't updated in ages for me to manually check

[Miscbrah]

Oh awesome thanks Microsoft.