Skip to main content

Configuration

The Configuration tab is used to define, manage, and control update rings for Automated Patching. Rings determine what, when and how updates are deployed to devices, enabling staged and risk-controlled rollouts across the organization.

Deployment Rings Overview​

  • When Automated Patch Management is enabled for the first time, SureMDM automatically creates four default rings:

    • Canary Ring
    • Early Adopters Ring
    • Broad Rollout Ring
    • General Availability Ring

  • In addition to these, administrators can create up to 15 custom rings, allowing a maximum of 19 rings (default + custom) per tenant.

The Configuration tab provides a centralized table view of all rings along with controls to manage their lifecycle.

Rings Table​

The rings table lists all default and custom rings configured in the system.

Table Columns

Column NameDescription
Ring NameDisplays the name of the deployment ring. Default rings are clearly marked as Default.
Devices AssignedShows the total number of devices currently assigned to the ring.
Deferral Period (days)Indicates the deferral duration configured for the ring, displayed separately for Quality and Feature updates.
Last ModifiedDisplays the date and time when the ring configuration was last updated.
Paused UpdatesIndicates whether updates for the ring are currently paused. Displays N/A if pause is not applicable.
Ring DetailsProvides a View Details link to open the detailed ring information view.

Ring Table - Action and Controls​

The following controls are available for each ring based on its type and current state:

  • Add New Ring - Creates a new custom deployment ring. Administrators can define rollout behavior, deferral settings, and device assignments.
  • View/Modify - Opens the selected Ring configuration for viewing and editing.
  • Clone - Creates a copy of an existing ring along with its configuration.
  • Assign Devices - Assigns devices or device groups to the selected ring.
  • Pause/Resume Updates - Temporarily pauses or resumes update deployment for the selected ring.
  • Delete - Removes a custom ring (default rings cannot be deleted).
  • Search - Allows searching rings using keywords such as ring name.
  • Refresh - Refreshes the table to display the latest ring status and configuration changes.

Assign Devices​

The Assign Devices action allows administrators to associate devices with a ring.

  • Devices can be assigned using groups.
  • A device can belong to only one ring at a time.
  • Reassigning a device automatically removes it from the previously assigned ring, and the device status in that ring changes from Active to Overridden.
  • Assignment status is reflected in the Assigned Devices column and the Overview charts.

Pause and Resume Updates​

Administrators can temporarily control update deployment for a ring using the Pause / Resume Updates option.

  • Pause: Temporarily stops update deployment for all devices in the ring.
  • Resume: Restarts update deployment based on the ring’s configuration. Pausing a ring does not remove device assignments or reset deferral timers.

Pause and Resume Behavior​

Pausing updates temporarily stops devices in the selected ring from downloading or installing Quality or Feature Updates after the configured deferral period. While updates are paused, no new updates are applied to the devices in that ring.

Administrators can manually resume updates at any time using the Pause/Resume Updates action available in the ring table.

If updates are not resumed manually, Windows automatically resumes update deployment once the pause duration expires. The effective pause duration is influenced by the configured deferral settings; however, Windows enforces the following maximum limits:

  • Quality Updates

    • Deferral: Up to 30 days
    • Pause: Up to an additional 35 days

  • Feature Updates

    • Deferral: Up to 365 days
    • Pause: Up to an additional 35 days

Once the pause period elapses, devices automatically resume update checks and proceed to install the latest applicable updates based on the ring’s configuration.

Clone Ring​

The Clone option allows administrators to quickly create a new custom ring using an existing ring’s configuration.

  • All settings except the ring name are copied.
  • Device assignments are not copied.
  • Cloned rings count toward the 15 custom ring limit.

Ring Details Column (View Details)​

Selecting the View Details hyperlink under the Ring Details column opens a popup that provides comprehensive visibility into the selected ring. The Ring Details popup is organized into the following tabs:

Ring Details Tab​

Displays the complete configuration summary of the ring, including:

  • Ring name and Summary
  • Update Settings
  • Deferral Settings
  • Update Enforcement & Compliance Settings
  • Additional Notification Settings
  • Delivery Optimization Settings

KB Details Tab​

Displays update-related information grouped into three accordions, each representing one of the latest three Patch Tuesday release months.

Each accordion presents KB details in a tabular format with the following columns:

  • KB number
  • Details
  • Classification
  • Published Dates
note

The listed KBs represent potential updates applicable to the ring. Actual installation depends on ring deferral settings and other configured policies.

Device Details Tab​

Lists all devices assigned to the ring in a tabular format with the following columns:

  • Device name
  • Device model
  • Device Architecture
  • Device group
  • OS Version
  • Ring Status - (Active, Overridden)
    note
    • Active – The device is part of the current ring and adheres to the configured policies.
    • Overridden – The device has been assigned to a different ring. Check the device status in other rings to view the active assignment.
  • Assignment Time

Activity Tab​

Provides an audit trail of ring-related actions, including:

  • Action - (Ring creation,modification, device assignment, Pause, resume)
  • Performed By - Admin username/email
  • Performed On - Timestamps