Configuration options in Windows Update Management
- Configuring the dashboard in Windows Update Management
- Products
- Classifications
- Jobs and tasks
- Using the "Reset Windows Update Cache" system job
- Sync Profiles and distributed File Repositories
- Windows Update Management CI customize (Restart dialog)
- Configuring the Office 365 apps installation outside of ACMP
- Special features of the display fields in Windows Update Management
Windows Update Management offers numerous configuration options. These begin with the initial setup in the First Steps Wizard, where you can explicitly select or deselect products and classifications, for example, and continue to allow you to make changes for your own corporate identity so that you can customize logos or banners. This section provides an overview of the various areas where you can make changes:
- Configuring the dashboard in Windows Update Management
- Products
- Classifications
- Jobs and tasks
- Using the "Reset Windows Update Cache" system job
- Sync Profiles and distributed File Repositories
- CI adjustments from the restart dialogue
- Configuring Office 365 apps outside of ACMP
- Special features of the display fields in Windows Update Management
Configuring the dashboard in Windows Update Management
Dashboards consist of various widgets that provide you with the most important information about a plugin. You can choose from a selection of different widgets for Windows Update Management and create a customised dashboard:
| Client status | The widget displays the number of clients with specific statuses. | |
| Hard disk usage | Hard disk usage shows the amount of storage space used. A chart displays how the hard disk is deployed and how much storage space is required at most. This is divided into:
The information varies and depends on which products and classifications you have selected for download (see Digression: What determines the storage space requirements in Windows Update Management?) | |
| Managed by WUM | The widget displays the number of clients that are managed by WUM and Not Managed by WUM in diagram form | |
| Status of WUM jobs | The widget displays the status of Windows Update Management jobs. You can also view the current progress of the job, as well as the start and finish dates and the result, from the widget. Learn more about the jobs and download types stored here. | |
| Updates to the distribution ring | Displays the number of updates in the specific distribution rings. The deployed updates are divided among the rings: No distribution ring, Test Ring 1, Test Ring 2, and Released.
| |
| Update status | The widget displays the number of updates with their respective statuses. | |
| Welcome to ACMP Windows Update Management | Displays a welcome page with basic information about the plugin, as well as some websites with further info on the topic. |
When you open Windows Update Management for the first time, the dashboard is already pre-filled and displays two queries and their results (Released Updates in last 30 days and Clients with required Updates). These queries are included and can be opened via Client Management > Query Management > Windows Update Management to change fields or filters, for example.
To insert another widget in its place, click on 
Select Widget in the upper right corner of the widget and insert another one. You can insert another query via 
Configure. To insert a query into a clear space afterwards, you must click on Queries > Query in the widget selector. A field will open where you can now insert the desired query.
Example of a configured query in the Windows Update Management widget
Note:
If you would like to fundamentally change the design of the dashboard, you can read about the necessary steps in the chapter Customize layout.
Products
Microsoft and the continuing manufacturers listed in the third-party catalogues offer a wide range of different products that you can select for your Windows Update Management tasks. All products that you can configure and use are listed under their respective names. For example, if you want to add a specific Windows operating system as a product, you can enter it directly in the search field or select it from the list of items.
Select all products for which you want to provide updates. All items are provided based on the official names from Microsoft and other providers and are only available with descriptions in only the English language.
When selecting products, you should follow the principle of minimalism: Only select products that are truly relevant to you! If you select all entries, the ACMP Server will be overloaded and enormous performance problems may occur. It does not make sense to include third-party catalogues if you do not use any products from these providers. Read through the selection of products very carefully and check the entries against their exact names.
Tip: The product list and the respective names are provided by the vendors. ACMP obtains the entries and summarises them for you. Especially for Windows entries, it is often useful to check the Microsoft help page to see whether the same cumulative updates are offered for the different versions.
So check the selected products to keep maintenance costs low, for example.
Windows 10 example: Let's say you want to provide clients with updates for the Microsoft operating system Windows 10. However, almost forty items are listed for this search term, as the Business, Anniversary and Creator versions are also included. So which one is the right one to choose?
- Select Windows 10, version 1903 and later, as this covers all newer updates. All updates older than version 1903 would run on Windows 10. You can select the Business, Anniversary and Creator versions, as the names are often very clear.
Windows 11 example: Windows 11 has a much smaller number of possible products to choose from. This is partly because the operating system has not been on the market as long as its predecessor (as of 12/24), but also because there are not that many products available yet. Here, you can use the edition names to check what is and isn't suitable for you (many companies do not use Windows 11 Client S, so these options are already excluded). Also pay attention to the versions that are displayed (22H2, 24H2, etc.). This allows you to exclude incorrect versions as well.
Note:
The more products you combine and add to the classification, the more storage space you will need. Always take this into account when selecting products!
Classifications
Classifications are required to define and synchronise the previously selected products according to the various classifications. This allows software updates to be assigned to and organised according to the respective types of updates. During the synchronisation process, all metadata for the selected software is synchronised for the specified classifications. Microsoft distinguishes between the following classifications:
| Classification | Description |
| Critical Updates | A broadly released fix for a specific problem addressing a critical, non-security related bug. |
| Definition Updates | A broadly-released and frequent software update containing additions to a products definition database. Definition databases are often used to detect objects with specific attributes, such as malicious code, phinishing Web sites, or junk e-mail. |
| Drivers | A software component necessary to control or regulate another device.
Please note that the “Drivers” option can lead to a significant drop in performance and a considerable increase in the size of the database, as this option stores all drivers offered by Microsoft as metadata. |
| Feature Packs | New product functionality that is first distributed outside the context oft a product release, and ususally included in the next full product release. |
| Security Updates | A broadly released fix for a product-specific security-related vulnerability. Security vulnerabilities are rated based on their severity which is indicated in the Microsoft security bulletin as critical, important, moderate, or low. |
| Service Packs | A tested, cumulative set of all hotfixes, security updates, ciritical updates and updates, as well as additional fixes for problems found internally since the release oft he product. Service packs may also contain a limited number of customer-requested design changes or features. |
| Tools | A utility or feature that aids in accomplishing a task or set of tasks |
| Update Rollups | A tested, cumulative set of hotfixes, security updates, critical updates, and updates packaged together for easy deployment. A rollup generally targets a specific area, such as security, or a component of a product, such as Internet Information Services „IIS“. |
| Updates | A broadly released fix for a specific problem addressing a noncritical, non-security-related bug. |
| Upgrades | A new product release bringing a device to the next version, containing bug fixes, design changes and new features. |
Warning: Note:
All listed classifications that include the name Updates (Critical, Definition, Security Updates, Update Rollups, and Updates themselves) overlap to some extent. It is recommended that you select all five items if you want to receive the complete selection of updates.
Note:
The entries are provided by the manufacturers (Microsoft, Lenovo, etc.) and are not translated in the ACMP Console.
Tip: If you consciously decide to include the drivers, the Metadata download may take longer, require a lot of storage space, and increase the size of the database accordingly. Base your decision on the hardware you are using and whether the option is really worthwhile. If you only use hardware (computers, notebooks) from other companies (e.g. Lenovo, Dell or HP), you can select and include them via the third-party catalogues.
Jobs and tasks
Several server jobs and tasks are required for Windows Update Management to function smoothly. Among other things, the jobs are based on the server load, which is determined by configured intervals. You can assign both the Agent Tasks job and the server tasks a start condition that you can customize to your environment. The jobs and tasks are performed at intervals and sequentially one after the other. You can check the sequence in the monitors (including the job, client and server monitors)
Below is a brief list of the jobs and the tasks they perform for Windows Update Management:
Agent Tasks (Client Management > Agent Task)
| Agent Task | Description | Condition |
| Windows Updates Scanner | The Windows Updates Scanner scans the clients to see whether they have reported an update as required/installed. The scanner is also executed when an Update Collection is triggered. | Start every day |
Scheduled Server Tasks (System > Settings > ACMP Server > Scheduled Server Tasks)
| Serveraufgabe | Description | Condition |
| Windows Update Management metadata download | Downloads meta information about Windows Updates | Start every day |
| Windows Update Management setup download | Downloads setup files for Windows Updates | Start every day |
| Windows Update Managed Clients recalc | Recalculates dynamic links of Clients which are managed by ACMP Windows Update Management. | Start every hour |
| Windows Update Management cleanup | Frees disk space that is occupied by unneeded Windows Updates. | Start every day |
| Windows Update log cleanup | Cleanup logs, which are older than 30 days. | Start every five hours |
Using the "Reset Windows Update Cache" system job
You can use the “Reset Windows Update Cache” system job, which runs on the agent, via a job collection or a job push using the query. This job resets the Windows Update agent on the client. This stops the Windows Update services (Wuauserv, Bits, and Cryptsvc), clears the Software Distribution folder in the Windows directory, and then restarts the service. If you encounter problems with the Windows Update agent during runtime, you can use the system job to manually reset the agent.
Note:
If you have processes running in this area when executing the system job, they may be interrupted.
Info: In the event of an error, you can display the result in the Job Monitor.
Add the system job as needed.
Sync Profiles and distributed File Repositories
Sync profiles allow you to specify within Windows Update Management which updates should be synchronized to which file repositories. Access the sync profiles from the Updates (
) tab. A new window will open, where you will find a default profile (“All Windows Updates”: This filter includes all updates you have already subscribed to). This sync profile contains Windows Updates and includes filters for all products (both current and future) that are automatically synchronized. This means that future updates for a specific product will also be included. This option allows you to automatically include all selected products without making manual changes.
If you have not assigned a sync profile to the deployed file repository, an error message will appear.
Add a sync profile
To add a new sync profile, click the button with the same name in the toolbar. A multi-page wizard will open. On the first page, insert a name for the sync profile under General, then click Next >.
You can now use the filter to link items to the sync profile. To do this, tick the "Use dynamic filter" checkbox so that you can use the following configurations. Now select the products, classifications, and languages to be included in the profile. For each, you can choose between the two options: “All Updates” or “Only Updates for Selected Products, Classifications, and/or Languages.” With the first option, all items are synchronized; with the second option, you must make the selection manually.
Set filters for the content in the sync profile
After making your selection, click Next > to continue.
If you want to create a static shortcut between the elements, you can configure this on this page. On the last page, you can now select the file repository to be used for the sync profile.
Exit your work and click Done. The newly created sync profile will now appear in the list. In the Sync Profile menu, you can now view the available profiles and see, for example, which filter has been set, which items have been linked, and what file repository has been specified.
If you wish to make changes to a profile at a later date, you can do so via 
Edit. You can permanently delete the profile using the 
Delete button.
Windows Update Management CI customize (Restart dialog)
Similar to other areas in ACMP, as an administrator, you can also customize the Windows Update Management restart dialogue to match your corporate identity. Both the logo and the banner for the dialogue can be replaced.
Restart dialog
To make these changes, first navigate to the installation directory ACMPClient (e.g. C:\Program Files (x86)\ACMPClient). Now copy the graphics for the logo and, optional, for the banner into the directory. Please note the following information about the graphics:
| File name | Dimensions | Original graphic | Description |
| RebootOptionDialogLogo.png | 128x128 |  | This allows you to change the logo and, for example, integrate your own company logo. The advantage of this logo is that it immediately shows that new Windows Updates are being installed. |
| RebootOptionDialogBanner.png | 128x49 |  | The standard banner says ACMP. You can enter your own company name here, for example. |
Note:
The standard graphics are not stored in this directory. If you wish to restore the factory settings, delete the graphics you have added.
Configuring the Office 365 apps installation outside of ACMP
As a prerequisite for distributing updates via Windows Update Management for Office 365, the apps must already have been installed in advance. This is a basic requirement for the administrator so that configuration outside of ACMP is also possible.
Using the Microsoft Office Customisation Tool, you can configure the desired configuration for download and installation of Office 365. To do this, you first specify the deployment settings (e.g. import or export) and define which products, versions and apps are to be deployed. You are guided through the application step by step and can specify individual settings there. The download and installation are then carried out using the tool.
Tip: You can find more information about the deployment tool and the configuration options on the official Microsoft help page.
Optionally you can install the ACMP Client Command "Microsoft Office 365 und 2019", which also uses the Office deployment tools.
As a rule, in the first step at Microsoft the configuration of so-called update channels is also carried out. Microsoft regularly publishes new and/or updated features for Office apps via the channel. The administrator can decide for themselves which type of update channel and which update cycle to choose. Windows Update Management obtains the necessary updates via this channel.
Note:
The update channel Current Channel can affect the size of files due to frequent updates. This may mean that the file repositories require significantly more storage space, and you may need to expand the capacity.
Special features of the display fields in Windows Update Management
Display Field: Windows Update Management > Updates > Uninstallation possible
Using the "Uninstallation possible" display field, you can check within a query (Query Management > Create Query > Query base "Windows Update Management") whether uninstallation is possible for the available updates.
Note:
Please note that the data for this display field comes from Microsoft. This means that you may be able to uninstall some Updates that cannot officially be uninstalled.
Display Field: Summary of display fields relating to installation and uninstallation behavior (Windows Update Management)
One of the properties of Windows Updates is that they describe potential restart behavior. This allows the user to see, for example, whether an uninstallation or installation requires user input or a network connection. This information can be viewed in the details view of a selected update in Windows Update Management. You can use the fields below to create a specific query to retrieve the info. The following display fields are available for this purpose:
Installation:
- Installation impact
- Installation restart behavior
- Installation may require user input
- Installation requires a network connection
Uninstallation:
- Uninstallation impact
- Uninstallation restart behavior
- Uninstallation may require user input
- Uninstallation requires a network connection
Display Field: Update Files
An update usually contains several files, and there are four display fields for the most important properties of these files, which you can use to view the information. These include the file name, the file size, the “Downloaded” field, and the “Last Download HTTP Status Code”.
Info: As soon as you download an update, the result is recorded and displayed in the "Last download HTTP status code" field. If, for example, an error message appears here, you can view it directly in this field.
Display Field: Total File Size
The Display Field shows the total file size of an update.
Info: Please note the following regarding the “Total file size” property:
- When calculating the size of an update, all files associated with that update are included.
- As a single file may be associated with multiple updates, the total file size for all updates may be greater than the actual storage space used in the file repository.