Access safeguard hold details with Update Compliance (2024)

IT administrators using Update Compliancenow have access to information on which safeguard holds are preventing individual devices in their organization from updating to a new version of Windows 10.

What are safeguard holds?

Microsoft uses quality and compatibility data to identify issues that might cause a Windows 10 feature update to fail or roll back. When we find such an issue, we might apply holds to the updating service to prevent affected devices from installing the update in order to safeguard them from these experiences. We also use holds when a customer, a partner, or Microsoft internal validation finds an issue that would cause severe impact (for example, rollback of the update, data loss, loss of connectivity, or loss of key functionality) and when a workaround is not immediately available.

Safeguard holds prevent a device with a known issue from being offered a new operating system version. We renew the offering once a fix is found and verified. We use holds to ensure customers have a successful experience as their device moves to a new version of Windows 10.

The lifespan of holds varies depending on the time required to investigate and fix an issue. During this time Microsoft works diligently to procure, develop, and validate a fix and then offer it to affected devices. We monitor quality and compatibility data to confirm that a fix is complete before releasing the hold. Once we release the hold, Windows Update will resume offering new operating system versions to devices. Safeguard holds only affect devices that use the Window Update service for updates. We encourage IT admins who manage updates to devices through other channels (such as media installations or updates coming from Windows Server Update Services (WSUS)) to remain aware of known issues that might also be present in their environments.

How can you monitor safeguard holds impacting devices in your organization?

Previously, IT administrators using Update Compliance could see which devices were unable to update due to safeguard holds, but did not have any information on which individual hold was preventing the device from updating. We have made improvements to Update Compliance to address this customer pain point.

Update Compliance now supports twoqueriesdesigned tohelp you retrievedata related tosafeguard holds.The first query, “Devices with a safeguard hold”, shows the device dataforall devices impacted by safeguard holds. The second query, “Target build distribution of devices with a safeguard hold”,shows data specific to how many devices are prevented from updating and which build version they belong to. One commercial ID can have devices that could be on different OS build versions. The “Target build distribution” queries displays the devices belonging to different build versions impacted by safeguard holds in the form of a chart.

Access safeguard hold details with Update Compliance (1)Safeguard holds as they appear in Update Compliance

Update Compliance reporting surfaces the safeguard hold IDs for known issues impacting a device in the ‘DeploymentErrorCode’ column.Every safeguard hold has a unique ID associated with it. Safeguard hold IDs for documented issues will be included in theWindowsreleasehealth dashboard.To determine which safeguard hold is preventing your device’s update, go to the “Known issues and notifications” page for the specific version to which you are attempting to update (e.g. Known issues and notifications for Windows 10 and Windows Server, version 20H2). Once you have navigated to the appropriate known issues and notifications page, search (Ctrl + F) for the safeguard ID(s) related to the safeguard hold(s) for your device (e.g. “25178825”). This process enables you to easilylook upinformation related to the safeguard hold impacting your devices if that safeguard hold’s documentation is publicly available.

Access safeguard hold details with Update Compliance (2)Safeguard IDs as they appear on the Windows release health dashboard

Microsoft publicly discloses information about safeguard holds preventing Windows updates when the holds are broadly applied, and Microsoft can independently address the issues driving the hold. When a safeguard is the result of third-party software or hardware incompatibilities, Microsoft is subject to confidentiality requirements. Only in certain circumstances are we authorized to disclose original equipment manufacturer-driven holds.

Safeguard holds help deliver a positive update experience. Similarly, this new reporting capability in Update Compliance helps to ensure that IT administrators have a positive management experience with the insights they need to effectively manage the devices in their organization. This is another step in our path toward providing IT administrators with greater transparency and control when managing Windows updates.

Access safeguard hold details with Update Compliance (2024)

FAQs

What is the update compliance safeguard hold? ›

Safeguard holds prevent a device with a known issue from being offered a new operating system version. Microsoft uses quality and compatibility data to identify issues that might cause a Windows 10 feature update to fail or rollback.

How do I opt out of safeguard hold? ›

Disable Safeguard Hold Using the Local Group Policy Editor

Open the Run dialog box. Type gpedit. msc in the search bar and press Enter. Double-click the Disable safeguards for Feature Updates policy in the right pane.

What are safeguard holds? ›

Safeguard holds prevent a device with a known issue from being offered a new feature update.

How do I turn off Safeguard? ›

Just click on 'Manage your phone' in the Your Phone area. Then use the button in the Safeguard area to change the service. If you want to turn Safeguard off you will need to answer some questions to verify your age.

What is a compliance update? ›

Compliance Update means a change made to the Software to reflect a proposed or mandated change in an applicable law or regulation.

How to bypass safeguard hold windows 11? ›

Local Computer Policy >> Administrative Templates >> Windows Components >> Windows Update >> Manage updates offered from Windows Update. Now double-click “Disable safeguards for Feature Updates in the right pane. From the policy window, select the Enabled radio button, and then click on Apply and Ok.

What is the upgrade block in feature updates safeguards? ›

Safeguard hold, also called upgrade block, is a feature in Windows 11/10 to prevent a PC from being offered a new Windows client feature update if there are known compatibility issues with software, hardware, or settings. This protects from a poor or failed update experience.

What is an example of a safeguard? ›

A store's security system is a safeguard against theft, and a secret password is a safeguard against your sister reading your email. You can use it as a verb too: "We clearly need to safeguard our Halloween candy so Mom and Dad don't steal it after we go to bed."

What are Safeguards used for? ›

Definitions: Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system.

What are the purposes of safeguard? ›

What is the purpose of safeguard? The purpose of a safeguard measure is to prevent serious injury to a domestic injury that might be caused by the importation, or continued importation, of a particular good or category of goods.

What is the safeguard deadline? ›

Learn how to comply with the Federal Trade Commission's updated data and information security requirements for dealers. Important! The deadline for complying with some of the updated requirements of the Safeguards Rule is now June 9, 2023.

What do you mean by safeguard? ›

noun. something that serves as a protection or defense or that ensures safety. a permit for safe passage. a guard or convoy. a mechanical device for ensuring safety.

What is safeguard security requirements? ›

Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for a system. Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices.

What is Windows Update compliance? ›

Update Compliance helps to monitor security, quality, and feature updates for Intune-managed Windows 10 or Windows 11 PCs. This also helps to get the troubleshooting data from Windows PCs.

Top Articles
Latest Posts
Recommended Articles
Article information

Author: Sen. Ignacio Ratke

Last Updated:

Views: 6199

Rating: 4.6 / 5 (76 voted)

Reviews: 83% of readers found this page helpful

Author information

Name: Sen. Ignacio Ratke

Birthday: 1999-05-27

Address: Apt. 171 8116 Bailey Via, Roberthaven, GA 58289

Phone: +2585395768220

Job: Lead Liaison

Hobby: Lockpicking, LARPing, Lego building, Lapidary, Macrame, Book restoration, Bodybuilding

Introduction: My name is Sen. Ignacio Ratke, I am a adventurous, zealous, outstanding, agreeable, precious, excited, gifted person who loves writing and wants to share my knowledge and understanding with you.