Let’s find out more details about Windows Patch Management using Intune vs ConfigMgr. We shall try to check the differences between Windows software updates using Intune vs SCCM.
Table of Contents
Introduction
This is the high-level design diagram Windows patch management using Intune and Configuration Manager. The following diagram is not up to date but it will give you a quick and dirty overview of Intune Patch Management Vs SCCM Patch Management.
Differences
Let’s check out the very high-level differences between Windows Updates or Windows patch management using Intune vs Configuration Manager (a.k.a SCCM).
| Intune | SCCM | ConfigMgr |
|---|---|
| Windows Update for Business (WUfB) | Windows Update |
| No WSUS | WSUS |
| No Content Stored | Content is stored with SCCM DP* |
| Policies are configured | Policies are configured |
| Easy to Use & Setup | More Granularity |
| Uninstall Options – Software Update | No Out of Box Solution |
| Pause Options – Software Update | No Out of Box Solution |
| Can’t select & Deploy Individual KBs | Indivitual KB selection option is there |
| Settings – Windows Updates | Software Center |
End-User Experience
There are certain differences in End-user experience also in terms of Windows patch management using Intune vs SCCM. The main difference is:
- Intune Patch Management (WUfB) – Uses Default Windows 10 framework to show the patch details.
- Settings – Update & Security – Windows Update.
- SCCM Patch Management – Uses Software Center to show which are patched deployed to the devices.
Video Recording
Resources
- How does Windows Update work?
- Custom OMA-URI Policy to Disable Windows Updates UX for End-Users Using Intune Custom Policy