管理 Insider Preview 内部版本

Administrators can install and manage Insider Preview builds centrally across multiple PCs within their domain. Here’s how:

Register your domain with the Windows Insider Program

To register a domain, you must be registered in the Windows Insider Program with your work account in Azure Active Directory (AAD) and you must be assigned a Global Administrator role on that Azure AD domain. Also requires Windows 10 Version 1703 or later.

To see the domain registration link, you must be signed in to this site with your AAD account that is assigned a Global Administrator role. Note, if your domain has already been registered, you will not see a link.


Note:

At this point, the Windows Insider Program for Business only supports Azure Active Directory (Azure AD) (and not Active Directory on premises) as a corporate authentication method.

If your company has a paid subscription to Office 365, Microsoft Dynamics CRM Online, Enterprise Mobility Suite, or other Microsoft services — you have a free subscription to Microsoft Azure Active Directory. This subscription can be used to create users for enrollment in the Windows Insider Program for Business.

If you do not have an AAD account, install Insider Preview builds on individual PCs with a registered Microsoft account.

Apply policies

Once you have registered your enterprise domain, you are ready to apply policies. Note that policies can only be applied to PCs running Windows 10 version 1709 or later. To manage Insider Preview builds, configure the following policies:

  1. Set Allow Telemetry. To enable installation of Insider Preview builds on a device, telemetry must be set to 2 or higher.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Windows Update/Allow Telemetry

    MDM: Update/AllowTelemetry

  2. Enable Manage preview builds. This setting enables or prevents preview build installation on a device. You can also decide to stop preview builds once the release is public.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Windows Update/Windows Update for Business – Select when Preview Builds and Feature Updates are received.

    MDM: Update/ManagePreviewBuilds

  3. Enable Branch Readiness Level. This setting allows you to choose between preview flight rings, and defer or pause the delivery of updates.

    Group Policy: Computer Configuration/Administrative Templates/Windows Components/Windows Update/Windows Update for Business – Select when Preview Builds and Feature Updates are received.

    MDM: Update/BranchReadinessLevel

Note: Policies can also be applied using Intune. To configure:

  1. Log into the Intune management portal and go to Software Update>Windows 10 Update Rings. Click “+” to create an update ring.
  2. Configure installation settings and click OK and Create to set policy.
  3. Go to Assignments to assign policy to users and devices.


Unregister

If you no longer plan to manage Windows Insider Preview policies for your organization, you will need to unregister your domain with the Windows Insider Program. Unregistering will not allow any other administrators at your organization to continue to set policies to manage Windows Insider Preview builds across your organization.

Your individual registration with the Insider program will not be impacted. If you wish to install Insider Previews on your PC, see the install instructions. If you wish to leave the Insider program, see the leave-the program instructions.

After unregistering your organization’s domain, you will need to unset the BranchReadinessLevel policy on the devices that have it set. For guidance on recovering a PC to a current Production build of windows, see the recover your device instructions.