For our Windows 10 clients, we’re making the following changes to how we handle updates. First of all, we’re going to be changing to use Windows 10 CB (Current Branch) for updates and servicing, instead of Windows 10 LTSB (Long Term Servicing Branch). LTSB is generally intended to be used in cases where feature updates are undesirable (e.g. medical equipment, lab equipment, or other specialized + sensitive hardware is attached to the machine), but it also removes many features that customers may want to use (Built in photo viewer, edge browser, Cortana, etc).

Windows 10 updates fall into one of two categories:

• Updates are security updates and fixes to existing components/features.
• Upgrades are additional features/functionality (which may also include security updates).

Both categories are set to be immediately available to Client Services internal machines (once they’re approved in WSUS). Customer machines will receive updates on a one week delay, and will receive upgrades on a one month delay.

One important note here is that because the delays for customer machines are implemented via group policy, moving a machine to one of the NoGPO OUs will make all current updates available to that machine. If there are any pending Upgrades, the next reboot may take significantly longer than expected!