WufB on Hybrid devices.

[Theldron]

Hi all,

 

Hope you are well.

 

Trying to setup WufB on Hybrid joined devices. I can see the devices in intune and have created Upgrade rings and added the test device groups into assignment. But the policies are not being downloaded to the devices. All I see in Windows Update -> Advanced -> Configured Policies is

 

I have setup MDM in GPO.

 

 

I have also checked our Sophos XGS is not getting in the way. Any ideas? Thanks

 

[Olliedawg]

Are there any lingering policies for WSUS on the devices by chance?

 

What licences do you have?

 

 

[Theldron]

I have looked I cannot see any other policies, I have removed all WSUS ones. We are using A3 licenses.

[Theldron]

If I go to device configuration in intune should the upgrade ring policy show up in there, as I only have default admx policies?

[psydii]

Is there any chance there are members of a group that has and exclusion rule applied to it?

Are they members of more than one group and both groups have separate policies that apply? You (I think) need to exclude the group-you-want-your-policy-to-apply-to from all the other policies.

[mullet_man]

Check the registry for any old entries relating to Windows Updates.  I moved to WUfB a while back and found that some devices were still pointing to our SCCM server to look for updates. 

 

There is a remmediation script that clears out registry so Intune can work properly, I can find it if you need it?

[Theldron]

Thanks for the replies both. I have found the issue. The MDM authority wasn't set to intune. As soon as I clicked and saved that, and sync and restarted a machine it downloaded the policies.