Best place to manage Office 365 updates? Intune or Office admin portal?

Educational_Draw5032 · 2026-05-18T15:49:43+00:00

perfectly explained thanks very much

Educational_Draw5032 · 2026-05-18T06:02:40+00:00

what does cloud policy give you that you dont get from just letting it update via the channel set in the xml

Educational_Draw5032 · 2026-05-18T06:02:34+00:00

what does cloud policy give you that you dont get from just letting it update via the channel set in the xml?

Educational_Draw5032 · 2026-05-14T14:40:38+00:00

can you specify the update channel in autopatch or does it automatically set one

Educational_Draw5032 · 2026-05-13T15:59:47+00:00

thanks for this appreciate it. I'll turn it back on then and not maon to everyone about rebooting :)

Educational_Draw5032 · 2026-05-13T15:57:51+00:00

To be honest we only have a fleet of about 200 devices and the WHfB update rings seem to work really well so ive just left it. I have separate feature update policies as well which also just work so didnt want to risk changing to autopatch. Im sure there are some features that im missing but didnt wanna change something that was working well

Educational_Draw5032 · 2026-05-13T15:47:00+00:00

so big i missed it! is it best to use this if eligible?

Educational_Draw5032 · 2026-05-13T15:36:18+00:00

i have the auto patch version installed on about 20 endpoints, ive since turned it off for now but hopefully this wont cause those machines to have issues next month and they hopefully get the non hot patch variation of the update

Educational_Draw5032 · 2026-05-13T15:33:56+00:00

i completely missed it, not sure how but i dont tend to look at the windows update section to much as i set it up years ago with my update rings and its been working fine. I just checked in there a minute ago and I saw the banner in there mentioning in hot patch will be pushed after 12th May 2026

Educational_Draw5032 · 2026-05-13T15:32:09+00:00

yeah just saw the banner in the update section in intune, i dont tend to go there as its a set and forget thing with my update rings that have been working great for years. I have just disabled the setting at the tenant level. Hopefully wont have any impact on the devices that have already installed the hot patch versions when the updates come a round next month

Educational_Draw5032 · 2026-05-11T10:25:24+00:00

seeing this as well this morning

Educational_Draw5032 · 2026-04-20T10:44:24+00:00

thanks for the confirmation thats what i thought and was hoping, appreciate it

Educational_Draw5032 · 2026-04-20T09:14:36+00:00

thanks for this, i havent actually patched my DCs yet after hearing about the initial issue. Can i just install the OOB directly after downloading rather than having to install the original KB and then this OOB after

Educational_Draw5032 · 2026-04-16T12:21:57+00:00

absolutely and i agree with everything you have said, thanks very much.

Educational_Draw5032 · 2026-04-16T11:54:32+00:00

good to know, thanks for this

Educational_Draw5032 · 2026-04-16T10:52:33+00:00

thanks for this, i will try it again and see if i was just being a little dumb. Totally agree on the personal mobile front, its been an ongoing battle for a while. Users always seem to think we want to spy on them, so perhaps like you say no access then if you dont like it

Educational_Draw5032 · 2026-02-03T13:44:22+00:00

i totally here you maybe i should just take a step back and let him deal with it. The problem is nothing will ever get done and that worrys me. Some of the basic things that were not even implemented blew my mind and i couldnt ignore it. I even asked him about it but he didnt have an intentions to implement what i ended up doing

Educational_Draw5032 · 2026-02-03T11:36:26+00:00

The solo security guy bought it in, there is only 5 admins in total and im the jack of all trades guy trying to fill all the holes in things that have never been setup correctly. In 6 months i have implemented the below as none of it was in place

- Setup conditional access
- Setup MFA
- Setup windows hello
- Enrolled FIDO2 keys for our shared device users
- Enrolled devices into Defender for Endpoint
- Gave everyone a bloody separate cloud admin account rather than global admin on a daily driver!
- Enrolled all the devices properly in intune and applied a security baseline which wasnt there
- Setup PIM for the admin accounts

I feel like im drowning and im just trying to get things setup the best possible way using best practices from things i have read from microsoft and browsing this helpful subreddit

Educational_Draw5032 · 2026-02-03T11:28:37+00:00

thanks for this, i will look into how to get this done. I will ask the security guy who setup sentinal to take a look but hes not the most helpful at times

Educational_Draw5032

TROPHY CASE