Update Rings
Windows Update rings define when and how devices receive quality and feature updates from Windows Update for Business. Create multiple rings to stage update deployment across your device fleet.
Note: Update rings apply to Windows 10/11 devices managed through Intune. Updates delivered directly from Microsoft without WSUS.
Ring Strategy
Pilot Ring
| Setting | Value |
|---|---|
| Target | IT team and early adopters |
| Quality Deferral | 0 days |
| Feature Deferral | 0 days |
| Deadline | 3 days |
| Grace Period | 2 days |
First to receive updates. Validates no issues before broader deployment.
Fast Ring
| Setting | Value |
|---|---|
| Target | General users |
| Quality Deferral | 7 days |
| Feature Deferral | 30 days |
| Deadline | 7 days |
| Grace Period | 2 days |
Main deployment wave after pilot validation.
Slow Ring
| Setting | Value |
|---|---|
| Target | Critical systems |
| Quality Deferral | 14 days |
| Feature Deferral | 90 days |
| Deadline | 14 days |
| Grace Period | 5 days |
Conservative deployment for mission-critical devices.
Ring Settings
Quality Update Deferral
Days to defer monthly cumulative updates (0-30 days). Patches deferred from release date.
Feature Update Deferral
Days to defer feature updates (0-365 days). Major Windows versions like 22H2 to 23H2.
Update Deadline
Days after update offered before forced install and restart.
Grace Period
Additional days after deadline before automatic restart.
Active Hours
Time range when restarts are blocked (e.g., 8 AM to 5 PM).
Servicing Channel
- General Availability — Standard production releases
- Windows Insider — Preview builds for testing only
Creating an Update Ring
- Navigate to Updates then Update Rings
- Select Create Profile
- Name the ring and set description
- Configure deferral, deadline, and grace period
- Set active hours and servicing channel
- Assign to a device group
Update Behavior Settings
| Setting | Description |
|---|---|
| Auto-restart before deadline | Allow restart outside active hours |
| User notification level | Default, dismiss, or force restart |
| Pause updates | Temporarily pause for up to 35 days |
| Uninstall window | Days to allow update rollback |
| Delivery optimization | P2P update sharing settings |
Monitoring
- Devices by compliance per ring
- Installation success and failure rates
- Devices pending restart
- Paused rings and expiration
- Stale devices not checking for updates
Troubleshooting
- Updates not applying — Verify group assignment and sync
- Forced restart complaints — Increase grace period or active hours
- Ring conflict — Ensure one ring per device
Best Practices
- Use at least three rings (Pilot, Fast, Slow)
- Keep pilot at 0 deferral for earliest testing
- Allow 7+ day gap between ring deferrals
- Configure active hours matching working hours
- Monitor pilot results before broader deployment
API Reference
GET /api/devices/updates/rings— List update ringsPOST /api/devices/updates/rings— Create ringGET /api/devices/updates/rings/:id/status— Get ring compliancePUT /api/devices/updates/rings/:id/pause— Pause updates