Manage Insider Preview Builds

Administrators can install and manage Insider Preview builds centrally across multiple PCs within their domain. Here’s how:

Register your domain with the Windows Insider Program

To register a domain, you must be registered in the Windows Insider Program with your work account in Azure Active Directory (AAD) and you must be assigned a Global Administrator role on that Azure AD domain. Also requires Windows 10 Version 1703 or later.

To see the domain registration link, you must be signed in to this site with your AAD account that is assigned a Global Administrator role.


At this point, the Windows Insider Program for Business only supports Azure Active Directory (Azure AD) (and not Active Directory on premises) as a corporate authentication method.

If your company has a paid subscription to Office 365, Microsoft Dynamics CRM Online, Enterprise Mobility Suite, or other Microsoft services — you have a free subscription to Microsoft Azure Active Directory. This subscription can be used to create users for enrollment in the Windows Insider Program for Business.

If you do not have an AAD account, install Insider Preview builds on individual PCs with a registered Microsoft account.

Apply policies

Once you have registered your enterprise domain, you are ready to apply policies. There are two policy settings:

The Manage preview builds setting gives enables or prevents preview build installation on a device. You can also decide to stop preview builds once the release is public.

The Branch Readiness Level settings allows you to choose between preview flight rings, and defer or pause the delivery of updates.

For guidance on configuring policies, see:  How to manage Windows 10 Insider Preview builds across your organization.


Policies can only be applied to PCs running Windows 10 Version 1709 or later.

To get Insider Preview builds, Telemetry must be set to 2 or higher on each PC.


If you no longer plan to manage Windows Insider Preview policies for your organization, you will need to unregister your domain with the Windows Insider Program. Unregistering will not allow any other administrators at your organization to continue to set policies to manage Windows Insider Preview builds across your organization.

Your individual registration with the Insider program will not be impacted. If you wish to install Insider Previews on your PC, see the install instructions. If you wish to leave the Insider program, see the leave-the program instructions.

After unregistering your organization’s domain, you will need to unset the BranchReadinessLevel policy on the devices that have it set. For guidance on recovering a PC to a current Production build of windows, see the recover your device instructions.