Configurations are a Blueprint component exclusive to Workspace ONE Express+. Furthermore, they are specific to the Windows 10 variety Blueprints, comprised of settings for image personalization and Windows update settings.

If you are interested in a Workspace ONE Express+ license, see Upgrade from Workspace ONE Express.

Personalization

This section of the Blueprint configuration enables you to customize the background and lock screen image as well as personalizing the start layout.

  1. Select the Configure button under Personalization.
  2. Configure the Images settings.
    Setting Description
    Desktop Image Select Upload to add an image to use as the desktop background.
    Lock Screen Image Select Upload to add an image to use as the lock screen background.
  3. Configure the Start Layout settings.

    Upload a start layout XML. This XML file overrides the default start menu layout and prevents users from changing the layout. You can configure the layout of tiles, the number of groups, and the apps in each group. You must create this XML yourself. For more information on creating a start layout XML, see https://docs.microsoft.com/en-us/windows/configuration/customize-and-export-start-layout.

Windows Update

This section of the Blueprint configuration enables you to direct how your Windows 10 device updates itself.

  1. Select the Configure button under Windows Updates.
  2. Configure the Branching and Deferral settings.
    Setting Description
    Update Branch

    Select the update branch to follow for updates.

    • Windows Insider Branch - Slow
    • Windows Insider Branch - Fast
    • Release Windows Insider Build
    • Semi-Annual Channel (Targeted)
      • Device receives all applicable feature updates immediately after the release of a new Windows version. Consider using this channel for your organization's testing process.
    • Semi-Annual Channel
      • This channel is the phase following targeted deployment. Consider using this channel after your testing process provides successful findings.
    Defer Feature Updates Period in Days Select the number of days to delay feature updates before installing the updates on the device.

    The maximum number of days you can defer an update changed in Windows 10 version 1703. Devices running a version before 1703 can only defer for 180 days. Devices running a version after 1703 can defer up to 365 days.

    If you defer an update for longer than 180 days and push the profile to a device running a version of Windows 10 before the 1703 update, the profile fails to install on the device.

    Pause Feature Updates

    Enable to pause all feature updates for 60 days or until disabled. This setting overrides the Defer Feature Updates Period in Days setting.

    Use this option to delay an update that causes issues that can normally install following your deferral settings.

    Defer Quality Updates Period In Days Select the number of days to delay quality updates before installing the updates on the device.
    Pause Quality Updates

    Enable to pause all quality updates for 60 days or until disabled. This setting overrides the Defer Quality Updates Period in Days setting.

    Use this option to delay an update that causes issues that can normally install following your deferral settings.

  3. Configure the Update Installation Behavior settings.
    Setting Description
    Automatic Updates

    Set how updates from the selected Update Branch are handled.

    • Install Updates Automatically.
    • Install Updates but Let User Schedule the Computer.
    • Install Updates Automatically and Restart at Specified Time.
    • Install Updates Automatically and Prevent User from Modifying Control Panel Settings.
    • Check for Updates but Let User Choose Whether to Download and Install Them.
    • Never Check for Updates.
    Active Hours Start Time

    Active Hours is the time when the system is prevented from rebooting the device.

    Enter the start time for active hours.

    Active Hours End Time Enter the end time for active hours.
    Schedule Restart Warning in Hours Allows the IT administrator to schedule the number of hours the user has before their device is automatically restarted due to an update.
    Schedule Imminent Restart Warning in Minutes Allows the IT administrator to select the number of minutes the user has to prepare for an imminent device restart.
  4. Configure the Update Policies settings.
    Setting Description
    Dual Scan

    Dual Scan is a setting designed for environments that prefer Windows Update (WU) to be the primary update source while Windows Server Update Services (WSUS) provides all other content. It avoids the 'two masters' problem of having more than one official update source by categorizing updates.

    Enabling this setting causes the client to only accept WSUS updates that are unrelated to the "Windows" family of products, relying solely on WU for this type of update.

    Mobile Operator App Download Limit Specifies whether to ignore the Mobile Operator download limit over a cellular network for apps and their updates.
    Mobile Operator Update Download Limit Specifies whether to ignore the Mobile Operator download limit over a cellular network for OS updates.