When working with Driver Updates in Intune creating groups with different models are a challenge, which we will look at. But let’s start with having a look at how driver updates in Intune works.
I for one use driver updates as a mean of having an easy way of blocking a Driver update if it causes issues as compared to allowing all driver updates to install automatically.
How often do this happen? Maybe once a year so not a real big deal.
- Extension drivers, or Sub drivers are not under approval control, these install when they are released and can cause drivers that depends on them to stop working, like audio for example until the device is restarted. The number one discussion topic when customers have questions regarding driver updates and reboots.
- Recommended drivers, in many cases they solve issue that are not considered critical by the vendor but could be for you as a customer. If not doing it already work with recommended drivers, maybe release them once a month together with the Cumulative update to minimize reboots.
How do we test drivers? Well, here is the challenge even if we use Autopatch groups, there is no check that all driver models are covered, the members are added randomly.
Creating better group for targeting
What can we do then? We can create Entra ID dynamic groups that includes driver model and part of the name. Then we get a couple of computers for each model in out test group.
We can user “deviceModel” together with computer name starts with or ends with depending on how the manufacturer set the serial number from left to right or right to left. If working with more than one vendor it could be a good idea to have them in different groups as well to make it easier to see which drivers are from Dell, HP and Lenovo for example.
Some examples:
Dell where I use “Starts With”
Lenovo example:
If you only allow recommended drivers today, I recommend that you start working with approving other drivers as well. Yes, it is little bit of work testing but it is still much easier than updating them any other way.
More reading about driver updates using Intune
Create Windows Driver updates policy in Intune – Microsoft Intune | Microsoft Learn