Let’s check how can you uninstall Windows 10 Feature Update using Intune policy. Microsoft recently introduced (with Windows 10 1803) to uninstall Windows 10 quality and feature updates. There removal polices are part of Windows 10 CSP policies.
Conditions to Uninstall Windows 10 Feature Update
Make sure all the following conditions are satisfied to remove Windows 10 feature updates.
- Condition 1: Device must be Windows Update for Business Connected
- Condition 2: Device must be in Paused State
- Condition 3: Device must have the Latest Feature Update Installed on the device (Current State)
- Condition 4: Machine should be within the uninstall period 20
- Condition 5: Machine should be in Semi-Anual channel
How to Uninstall Windows 10 Feature Updates
- Login to Endpoint.mcirosoft.com
- Navigate to Devices – Windows 10 Update Rings.
- Select the Windows 10 Update policy.
- Make sure the following Feature Updates are already in Pause state. Or else Pause the Feature update.
- Click on Uninstall and Select Feature.
NOTE! – The latest feature updates are set to be uninstalled and paused for HTMD Windows 10 Update Ring 1. Days remaining: 35.
- Click on OK. “Are you sure you want to uninstall feature updates for HTMD Windows 10 update Ring”
- Check the waring message “The Latest feature updates are set to be uninstalled and paused for HTMD Windows 10 Update Ring 1. Days remaining 35″
- Feature: Uninstalled and Paused (Days Remaining 35)
- Quality Update (Windows 10 monthly security patches) is also paused.
Troubleshooting WUfB
I tried to check the event logs and registry entries mentioned below to get more details. I couldn’t find out the reason for the failure of the uninstall Windows 10 feature update Intune policy. You can also try Windows 10 MDM Troubleshooting Guide – Anoopcnair.com. Also, Intune Patching End User Experience with WUfB for Windows 10 Devices | Software Update.
- Registry entires – Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Diagnostics\ConfigManager\Update.
- Event Logs -> Device Management – Event Logs :- Microsoft->Windows->DeviceManagement-> Enterprise-Diagnostics-Provider/Admin
Registry – Intune Windows 10 Update Policies
I tried to check the following registry entries to find out whether the uninstall policy is applied on the Windows 10 device:
- Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Diagnostics\ConfigManager\Update
- Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Update
Event Logs
MDM ConfigurationManager: Command failure status. Configuration Source ID: (9A96DE87-65BD-437E-B915-14B601DAE840), Enrollment Name: (MDMFull), Provider Name: (Update), Command Type: (Execute), CSP URI: (./Vendor/MSFT/Update/Rollback/FeatureUpdate), Result: (Element not found.).
MDM PolicyManager: Set policy int, Policy: (PauseFeatureUpdates), Area: (Update), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x1), Enrollment Type: (0x0), Scope: (0x0).
MDM ConfigurationManager: Command failure status. Configuraton Source ID: (9A96DE87-65BD-437E-B915-14B601DAE840), Enrollment Type: (MDMFull), CSP Name: (Policy), Command Type: (Add: from Replace or Add), Result: (./Vendor/MSFT/Policy/Config/Update/PauseFeatureUpdates).
MDM ConfigurationManager: Command failure status. Configuraton Source ID: (9A96DE87-65BD-437E-B915-14B601DAE840), Enrollment Type: (MDMFull), CSP Name: (Policy), Command Type: (Add: from Replace or Add), Result: (./Vendor/MSFT/Policy/Config/Update/PauseFeatureUpdates).
MDM PolicyManager: Set policy int, Policy: (PauseFeatureUpdates), Area: (Update), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x1), Enrollment Type: (0x0), Scope: (0x0).
MDM ConfigurationManager: Command failure status. Configuration Source ID: (9A96DE87-65BD-437E-B915-14B601DAE840), Enrollment Name: (MDMFull), Provider Name: (Update), Command Type: (Execute), CSP URI: (./Vendor/MSFT/Update/Rollback/FeatureUpdate), Result: (Element not found.).
Video
I have explained this in Free Intune training episode 24. More advanced troubleshooting details about uninstall options of Windows 10 Feature Updates.
Resources
- https://docs.microsoft.com/en-us/windows/deployment/update/waas-configure-wufb
- https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#update-setdisableuxwuaccess
- https://docs.microsoft.com/en-us/mem/intune/protect/windows-update-settings
- https://github.com/WindowsDeviceManagement/MMAT/blob/master/MDMPolicyMapping.xml