In this chapter, you learned about the new MDM capabilities and changes in GPO processing of Windows 10/11. In the servicing and update part, we discussed the different update delivery solutions and gave recommendations for building servicing rings to keep up with the fast Windows 10/11 release cadence. With the options presented, you should now be able to set all the necessary settings for successful and smooth patching, planning release rings, and optimizing patch traffic regardless of whether you are still on-prem or already modern with MDM/Azure AD. Please use, if possible, the presented possibilities for testing preview builds to be best prepared for new Windows versions.
In the next chapter, we will have a closer look at protecting enterprise data in bring your own device (BYOD) scenarios.