Manage Insider Preview Builds

Administrators can install and manage Insider Preview builds centrally across multiple PCs within their domain. Here’s how:

Register your domain with the Windows Insider Program

Organizations have the option of registering their Azure Active Directory (Azure AD) domain in the Windows Insider Program. To register a domain, you must be registered in the Windows Insider Program with your work account in Azure Active Directory (AAD) and you must be assigned a Global Administrator role on that Azure AD domain. Also requires Windows 10 Version 1703 or later.

You are not signed in. To see the domain registration link, you must be signed in with your work account in Azure Active Directory (AAD) and you must be assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

SIGN IN WITH YOUR AAD ACCOUNT REGISTERED WITH THE WINDOWS INSIDER PROGRAM

You are signed in with a Microsoft Account.

To see the domain registration link, you must be signed in with your work account in Azure Active Directory (AAD) that is registered with the Windows Insider Program and you must be assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

SIGN IN WITH YOUR AAD ACCOUNT REGISTERED WITH THE WINDOWS INSIDER PROGRAM

You are signed in with an Azure Active Directory (AAD) account that you have not yet registered with the Windows Insider Program.

Also, it has not been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

To see the domain registration link, request that your IT administrator assign your AAD account with a Global Administrator role on that Azure AD domain, register your AAD account with the Windows Insider Program and return to this page to register your Azure AD domain on behalf of your organization.

You are signed in with an Azure Active Directory (AAD) account that you have not yet registered with the Windows Insider Program.

However, your organization’s Azure AD domain is already registered with the Windows Insider Program for Business by your organization’s IT administration.

Discuss the Windows Insider Program for Business with your organization’s IT administration.

You are signed in with an Azure Active Directory (AAD) account that has not been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

However, your organization’s Azure AD domain is already registered with the Windows Insider Program for Business by your organization’s IT administration.

Discuss the Windows Insider Program for Business with your organization’s IT administration.

You are signed in with an Azure Active Directory (AAD) account that has not been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

To see the domain registration link, request that your IT administrator assign your AAD account with a Global Administrator role on that Azure AD domain and return to this page to register your Azure AD domain on behalf of your organization.

You are signed in with an Azure Active Directory (AAD) account that has been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

Your organization’s Azure AD domain is registered with the Windows Insider Program for Business.

You are signed in with an Azure Active Directory (AAD) account that has been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

However, you must first register your AAD account with the Windows Insider Program and then return to this page to register your Azure AD domain.

REGISTER YOUR AAD ACCOUNT FOR THE WINDOWS INSIDER PROGRAM

You are signed in with an Azure Active Directory (AAD) account that you have not yet registered with the Windows Insider Program. It has been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

However, your organization’s Azure AD domain is already registered with the Windows Insider Program for Business by your organization’s IT administration.

Discuss the Windows Insider Program for Business with your organization’s IT administration.

You are signed in with an Azure Active Directory (AAD) account that has been assigned a Global Administrator role on that Azure AD domain by your organization’s IT administration.

REGISTER YOUR DOMAIN WITH THE WINDOWS INSIDER PROGRAM FOR BUSINESS


Note:

At this point, the Windows Insider Program for Business only supports Azure Active Directory (Azure AD) (and not Active Directory on premises) as a corporate authentication method.

If your company has a paid subscription to Office 365, Microsoft Dynamics CRM Online, Enterprise Mobility Suite, or other Microsoft services — you have a free subscription to Microsoft Azure Active Directory. This subscription can be used to create users for enrollment in the Windows Insider Program for Business.

If you do not have an AAD account, install Insider Preview builds on individual PCs with a registered Microsoft account.

Join devices to your Azure Active Directory

In order to receive Insider Preview builds, devices must be joined to the same Azure AD domain that was registered with the Windows Insider Program.

To join individual devices, go to Settings>Accounts>Access work or school and enter your Azure AD credentials. You can also integrate your on-premises directory with Azure Active Directory using AD Connect.

Apply policies

Set using Group Policy and MDM settings

You can apply and manage polices using the Group Policy Management Console (GPMC) or mobile device management (MDM) solutions. To install and manage Insider Preview builds, configure the following settings:

NOTE: Installation of Insider Preview builds cannot currently be managed using Windows Server Update Services (WSUS) or System Center Configuration Manager. Policies can only be applied to PCs running Windows 10 version 1709 or later.

  1. Allow Telemetry. To enable installation of Insider Preview builds on a device, telemetry must be set to 2 or higher.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Data Collection and Preview Builds-Allow Telemetry

    MDM: Update/AllowTelemetry

  2. Manage preview builds. This setting enables or prevents preview build installation on a device. You can also decide to stop preview builds once the release is public.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Windows Update/Windows Update for Business Manage preview builds

    MDM: Update/ManagePreviewBuilds

  3. Select when Preview Builds and Feature updates are received. This setting allows you to choose between preview flight rings, and defer or pause the delivery of updates.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Windows Update/Windows Update for Business – Select when Preview Builds and Feature Updates are received.

    MDM: Update/BranchReadinessLevel

Set using Windows 10 Update Rings in Intune

Windows Insider Preview builds can also be installed and managed with Intune using Windows 10 Update Rings. To configure:

  1. Log into the Intune management portal and go to Software Update>Windows 10 Update Rings. Click “+” to create an Update Ring policy.
  2. Configure installation settings and click OK and Create to set policy.
  3. Go to Assignments to assign policy to users and devices.

Confirm policies

To confirm that your devices are set correctly to receiving Insider Preview builds. go to Settings>Update & Security>Windows Update on a device and click on "View configured update policies". You can also check the following registry key in the Registry Editor on the device: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate

  • BranchReadinessLevel = 2 (Fast), 4 (Slow) or 8 (Release Preview)
  • ManagePreviewBuilds = 1

NOTE: Once a policy has been set, the device must be restarted for the policy to be activated. If a device is not receiving Insider Preview builds, see Troubleshooting.


How to unregister a domain

If you no longer plan to manage Insider Preview builds for your organization using policies, you will need to unregister your domain with the Windows Insider Program.

NOTE:

  • Unregistering will not allow any other administrators at your organization to continue to set policies to manage Windows Insider Preview builds across your organization.
  • To change update policies on a device after unregistering domain, disable the setting: Select when Preview Builds and Feature updates are received. Your individual registration with the Insider program will not be impacted. If you wish to install Insider Previews on your PC, see the install instructions. If you wish to leave the Insider program, see the leave the program instructions.
  • For guidance on recovering a PC to a current Production build of windows, see the recover your device instructions.