Updates

Using Group Policy to Manage Office 365 updates

Office 365 ProPlus deployments by default are configured to automatically update. This can be a good or bad thing depending on how you look at it. Good, because you are always current and up to date on the latest fixes and security updates from Microsoft. But bad for organizations that have an enterprise patching process that has testing and validation for patches and updates. These types of organizations need to have control to establish compatibility and support across many platforms.

There are several ways to manage updates in Office 365. During the deployment of Office 365 ProPlus you can configure the update settings the office deployment tool which modifies the XML file that is by the install process or you can simply skip that step and manage everything through Group Policy. In this post I will discuss how to use Group Policy to manage updates for your Office 365 deployments.

Getting Started…

Download the Office 2013 Administrative Template files (ADMX/ADML) and Office Customization Tool 

Once you have copied the Group Policy Administrative Template files into AD,  the policy settings will be located in the foloowing location in the Group Policy Managment Console:

Computer Configuration\Policies\Administrative Templates\Microsoft Office 2013 (Machine)\Updates

Some key settings to look at include:

Enable Automatic Updates – allows you to disable Office 365 from automatically updating. Be careful when using this option as you could miss out on security updates.

Update Path – This setting controls the source of where the Office 365ProPlus installs get their updates from. If this setting is not configured or left blank it will default to Microsoft’s CDN. If you have an internal source, such as network share, then you would include the path here.

Using Group Policy allows some flexible like applying patching sources for different groups of users, such as pilot users and production users. It also doesn’t require manual changes on each system and can make a change across multiple devices with 1 policy. Group Policy is useful when there are many deployment methods across your organizations but you want to manage the application without adding cumbersome deployment steps. If you decide to make a change later, update the Group Policy setting by using the Group Policy Management Console. The updated policy settings are automatically applied to Office 365 ProPlus, through the normal Group Policy update process.