With the general availability of Windows 10 Anniversary Update a.k.a Redstone, Microsoft has published guidelines to help customers deploy the Redstone on their ConfigMgr 1606 SUP servers.
To this end, the Windows Team has released two updates that are needed for the ConfigMgr Windows 10 servicing feature to deploy Windows 10 feature upgrades starting with the Windows 10 Anniversary Update.
First, an update KB3159706 is released that enables the provisioning of decryption keys in WSUS for Windows Server 2012 and 2012 R2. "This update is necessary for WSUS to be able to natively decrypt the encrypted Windows 10 Anniversary Update packages, and any subsequent Windows 10 feature upgrades," the team said.
Additionally, "the 1606 update for the current branch of Configuration Manger contains new client support that allows these types of packages to install correctly using the Configuration Manager Windows 10 servicing feature," added the Windows team.
"1606 is full of new features and enhancements in security and data protection, application management, content distribution, deployment and provisioning, end user experience, and includes loads of new functionality for customers using Configuration Manager in hybrid mode with Microsoft Intune."
Here's a at a glance of what you'll get after upgrade:
- "Windows Information Protection (formerly EDP) help you create and deploy information protection policy, including ability to choose protected apps and define EDP-protection level.
- Windows Defender Advanced Threat Protection let you enable on-board and off-board Windows 10 clients to the cloud service and view agent health in the monitoring dashboard (requires a Windows Defender ATP tenant in Azure).
- Windows Store for Business Integration allows managing and deploy applications purchased through Windows Store for Business portal for both online and offline licensed apps.
- Windows Hello for Business policies for domain-joined Windows 10 devices managed by the Configuration Manager client," explained enterprise team.
The team further recommend customers to install KB3159706 on their Software Update Point (SUP) servers before starting deployments of the Windows 10 Anniversary Update.
The team further notes, that until customers update their SUP servers, they can use the ConfigMgr Operating System Deployment (OSD) feature as an alternative to the SUM/Windows 10 servicing feature to deploy the Windows 10 Anniversary Update.
For those new, the Redmond company notes that it now has over 16,000 organizations managing 30 million devices with Configuration Manager version 1511 or later.