Automating Windows Updates using SOTI MobiControl

How to create a SOTI MobiControl profile to manage Windows update for groups of devices. This ensures the devices stay up-to-date with security patches and new features.

1. Log in and Create a Profile:

• Log in to the SOTI MobiControl Web Console.
• Go to Profiles.
• Select New Profile.
• Choose one of Windows devices as the platform.
• Enter a clear name for your profile such "Windows Update Schedule".

2. Configure Update Settings:

• Select Configuration and choose Windows Update.
• 
• Keep the Feature Updates and Quality updates section as default or configure as per your requirements.

• Configure Services and Configurations
  • Update Source: Choose where updates will come from:
    • Microsoft Update Service (default): Updates download directly from Microsoft.
    • WSUS (for businesses): Use a central server (WSUS) to manage updates.
  • Branch Readiness Level: Choose your update schedule:
    • Fast/Slow/Release Preview Channels (Insider builds): Get new features early (potentially buggy).
    • Semi-Annual Channel (Targeted): Updates get some testing before deployment. (Recommended balance)
    • Semi-Annual Channel: Most tested and stable updates (Best for most businesses). 
  • Disable Manage Preview Builds unless you specifically need them.

3. Configure Scheduled Installations:

• You can configure when updates are automatically installed on the devices.
• Keep the settings section as default or configure as per your requirement.

4. Save and Assign the Profile:

• Select Save to create the profile.
• Select Save and Assign.
• Choose the device group that contains the Windows devices you want to manage updates for.
• Select Assign to deploy the profile to the devices.

Note:

• This guide keeps most settings as default. You can explore other options in SOTI MobiControl for more advanced configurations.
• For business environments, using WSUS for centralized update management is generally recommended.

https://www.soti.net/mc/help/v2024.1/en/console/configurations/profiles/configurations/categories/security/windows_updates.html