[Video] Windows Update Management Using Workspace ONE

April 20, 2018

When it comes to managing Windows patches, Workspace ONE Unified Endpoint Management (UEM) takes a modern, cloud-first approach. Windows Update Management using Workspace ONE delivers updates on a frequent and dynamic basis. This ensures end users always have access to up-to-date operating system features.

Today’s post consists of a video that explains how to create distribution rings and manage patches using Workspace ONE UEM. The video begins with an overview of servicing channels and Windows-as-a-service, and concludes with a demo. To skip straight to the configuration demo, fast-forward to 11:52.

Windows Update Management Using Workspace ONE

With update management, Workspace ONE acts as a man-in-the-middle – delivering policies, and providing detailed reports. To grab and apply updates, Workspace ONE relies on the Windows Update for Business and the Windows Update services.

[Related: Overview of Windows as a serviceServicing Tools]

The following image + the enumerated steps explain Workspace ONE’s role in more detail:Windows Update Management Using Workspace ONE

  1. Device sends a query for available updates
  2. Update service returns a list of updates in GUID format
  3. Device reports metadata (GUIDs) to Workspace ONE
  4. Workspace ONE sends metadata to the update service to obtain canonical information (update name, description, etc…)
  5. After obtaining the canonical data, Workspace ONE determines which updates apply to the device using assigned smart groups/distribution rings to
  6. Workspace ONE sends the list of authorized updates to the device
  7. Device fetches and applies approved updates
  8. Peer-to-peer delivery optimization shares updates to other devices – decreasing network traffic across the WAN to the update service

Create Windows Updates Distribution Rings Using Workspace ONE

Create Windows Updates Distribution Rings Using Workspace ONE

Deploying Windows 10 fixes, patches, and updates on a variety of client servicing plans creates overhead. By using branches, you can create a customized deployment schedule based on preference and update sensitivity. Review the following table of distribution rings to understand a suggested configuration for creating distribution rings in your organization.

Windows Update Management Using Workspace ONE



  • Workspace ONE UEM Console with Admin Credentials
  • (Optional but recommended) Integrate with Active Directory to use existing User Groups and Organization Units when creating distribution rings using smart groups

The post [Video] Windows Update Management Using Workspace ONE appeared first on VMware End-User Computing Blog.

Filter Tags

Workspace ONE Workspace ONE UEM Blog Announcement Overview Windows 10 Manage Modern Management

Josué Negrón

Read More from the Author

EUC Staff Architect, End-User Computing, VMware.
Josué Negrón serves as a End-User Computing Staff Architect at VMware. Currently, in his eight-year with VMware, Josué works with customers to define the best way to integrate the latest EUC technologies into their businesses to solve challenges associated with Windows 10 Modern Management deployment, management, and security. Josué started at VMware as a software consultant, then moved into sales engineering, and now develops enablement content within technical marketing. You can find his latest content on Tech Zone below, follow him on Twitter @josuejnegron, or subscribe to his RSS content feed by clicking Subscribe to Author. He holds a degree in Computer Engineering from Georgia Tech. Go Jackets!