Zavelix IT Practice Tip: Deploying Windows Updates Reliably in Your Company

What this practice tip covers

This is a general Zavelix IT practice tip, not a news item about a current event. It applies to Windows 10 and Windows 11. It is based on a Microsoft Learn overview page that states it was last updated on 28 August 2023. The concrete recommendations below are Zavelix suggestions, not statements from the source.

How Windows Update works at its core

Since Windows 10, Microsoft uses the Unified Update Platform (UUP). It is one common model for publishing, hosting, scanning and downloading all update types, from monthly quality updates to new feature updates.

A component called the Update Session Orchestrator controls the order in which the different updates are downloaded and installed. On the device, an update client works out which data is needed to bring the system up to date.

Which update types exist

The source names four types delivered through Windows Update: feature updates, security updates, device drivers and Defender definition updates. Other updates, such as Office desktop updates, are only installed if users opt into Microsoft Update. Store apps are not installed by this component and are handled separately.

For businesses this means that looking only at Windows Update does not automatically cover Office or Store apps. The source does not say how this behaves in management tools such as WSUS or Intune.

Prepare for troubleshooting

The Microsoft page points to log files, troubleshooting guidance and a list of common errors with an error code reference. Knowing these resources in advance saves time when an update fails.

Recommended routine for small businesses (Zavelix suggestion)

The following steps are a pragmatic routine and are not taken from the source:

• Inventory devices: keep a list of all Windows machines with their version and owner.
• Clarify update types: decide how Windows, driver, Defender, Office and Store app updates are each delivered.
• Use a test group: install updates on a few representative devices first, then roll out to everyone.
• Plan fixed time windows: agree on regular installation and restart times and tell staff.
• Verify results: after each cycle, check which devices are not up to date and investigate causes using the logs and the error code reference.
• Document: record exceptions and recurring errors so they can be fixed permanently.