'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Exclude Non-Entra Devices from Microsoft 365 App Updates
Question details
Administrators need to exclude non-Entra registered virtual machines from automatic Microsoft 365 cloud updates.
- Product
- Microsoft 365 Apps
- Device & OS
- not provided
- Scenario
- Managing Microsoft 365 App cloud updates on nonpersistent Citrix virtual machines.
- Observed behavior
- Non-Entra registered virtual machines are being included in the cloud update inventory, causing disruptive daytime updates.
Ensure you have global administrator or Microsoft 365 Apps administrator privileges to access the Microsoft 365 Apps admin center.
Configure Exclusion Groups or Request Tenant Support
Use the Microsoft 365 Apps admin center to assign Microsoft Entra exclusion groups, or contact Microsoft Support for tenant-specific guidance on non-Entra VMs.
Cloud update configurations in Microsoft 365 heavily depend on Microsoft Entra device registration and group targeting. Because nonpersistent Citrix VMs are not Entra registered by default, standard group exclusions may not apply normally.
You should verify your tenant settings and then escalate the configuration to Microsoft Support if the virtual machines cannot be registered.
Log in to the Microsoft 365 Apps admin center with your admin credentials and navigate to the Tenant settings.
Review the 'Cloud update' section to confirm if and how your nonpersistent Citrix virtual machines are listed in the device inventory.
If the devices can be provisionally registered, create a specific Microsoft Entra group for them and apply this group to the exclusion list in the Cloud update settings.
Experience a Lightweight Office Alternative for Virtual Environments
If managing complex Microsoft 365 updates and Microsoft Entra device registrations is burdensome for your nonpersistent Citrix VMs, consider WPS Office. It provides a lightweight, deployment-friendly alternative that doesn't force disruptive daytime cloud updates.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package.
- 2. Deploy to Virtual Machines: Install WPS Office on your golden image or deploy it across your nonpersistent Citrix VMs.
- 3. Manage Updates Locally: Control software updates locally without relying on mandatory Microsoft Entra device registration.
Frequently Asked Questions
Why are non-Entra registered devices included in Microsoft 365 cloud updates?
Microsoft 365 Apps cloud update inventory can sometimes detect devices running the apps even if they are not fully Microsoft Entra registered, queuing them for mandatory updates based on tenant defaults.
Can I exclude virtual machines from cloud updates without Microsoft Entra groups?
Currently, exclusion targeting in the Microsoft 365 Apps admin center relies exclusively on Microsoft Entra ID groups. Devices typically must be Entra registered to be successfully grouped and excluded.
How else can I stop Office updates on nonpersistent Citrix VMs?
Administrators often use Registry keys, Group Policy Objects (GPOs), or specific Office Deployment Tool (ODT) XML configurations to disable automatic updates on nonpersistent virtual machines.
Where can I get help for tenant-specific Microsoft Entra issues?
You should post your scenario in the Microsoft Entra Q&A forums on Microsoft Learn, or open a direct support request through the Microsoft 365 admin center for personalized engineering guidance.
