Question

Your organization manages a fleet of Android Enterprise fully managed (COBO) devices used by warehouse staff. Management requires that operating system updates be installed automatically but only outside working hours (10:00 PM to 6:00 AM) to avoid disrupting scanning operations during shifts. Which Intune configuration should you use to meet this requirement?

Accepted Answer

Create a device restrictions configuration profile for Android Enterprise fully managed devices and set the System update policy to 'Maintenance window' (windowed), defining the window from 22:00 to 06:00.

Answer

Create a device restrictions configuration profile for Android Enterprise fully managed devices and configure the System update setting to 'Postpone', then rely on Delivery Optimization scheduling.

Answer

Deploy a Windows Update ring targeted to the Android device group with active hours configured from 6:00 AM to 10:00 PM.

Answer

Create a compliance policy that marks devices non-compliant if the OS version is not the latest, triggering Conditional Access to force the update at night.