Windows deploymentIntermediate21 min read

What Is Delivery Optimization in Windows Administration?

Reviewed byJohnson Ajibi· Senior Network & Security Engineer · MSc IT Security
On This Page

Quick Definition

Delivery Optimization helps your Windows computer get updates faster by using multiple sources. It can download from Microsoft’s servers, but it can also get pieces of the update from other computers on your local network or the internet. This makes downloads quicker and uses less of your internet bandwidth.

Common Commands & Configuration

Get-DeliveryOptimizationStatus

Set-DeliveryOptimizationPolicy -DownloadMode 1

Must Know for Exams

Delivery Optimization is a key topic for the MD-102 (Microsoft 365 Endpoint Administrator) exam. This exam focuses on managing and deploying Windows clients in an enterprise environment. One of the primary objectives of the MD-102 is "Manage updates for Windows clients," which includes configuring update rings, managing Windows Update for Business, and optimizing update delivery. Delivery Optimization is the core mechanism for the last part. Candidates are expected to know how to configure Delivery Optimization settings using Group Policy, Intune, and the Windows Settings app. They also need to understand the different download modes and when to use each one.

In exam questions, Delivery Optimization often appears in scenario-based questions. For example, a question might describe a company with a slow WAN link and multiple branch offices. The candidate must choose the best Delivery Optimization configuration to minimize internet bandwidth usage, such as enabling local network P2P sharing. Another common question type involves troubleshooting: users are reporting slow updates, and the candidate needs to identify whether Delivery Optimization is working correctly or if it is blocked by a firewall.

There are also questions about the interaction between Delivery Optimization and other technologies. For instance, when should you use Delivery Optimization alone versus adding Microsoft Connected Cache or using BranchCache? Candidates may need to compare these options based on network topology and scale. The exam tests understanding of the default behavior, such as how Delivery Optimization works in consumer vs. enterprise environments, and how to disable it if needed.

The MD-102 exam may also include questions about the Delivery Optimization cache size and how to manage it via policies. Because the feature is often overlooked, candidates who understand it well can gain an advantage. It is not a huge exam topic, but it appears consistently in update management scenarios. Being able to explain the pros and cons of each download mode and how to configure them via Intune is an excellent way to secure marks in the update deployment section.

Simple Meaning

Think of Delivery Optimization like a neighborhood book swap. Normally, if you want a new book, you have to order it from the big central library (Microsoft’s servers), and it sends the whole book to you. That works fine, but if everyone in your neighborhood wants the same book, the library gets overwhelmed and each person waits a long time. With a book swap, you might get the first chapter from your neighbor, the second chapter from the person down the street, and the third chapter from another friend. Your computer then assembles all those chapters into the complete book. This is exactly what Delivery Optimization does for Windows updates.

Instead of each computer downloading the entire update alone from Microsoft, Delivery Optimization lets computers that already have parts of the update share those parts with others. If you have a hundred computers in an office, instead of each one downloading a 1 GB update from the internet (using 100 GB total), they might download the first copy from the internet, and then the other 99 share pieces among themselves locally. This saves internet bandwidth and speeds up the whole process. Delivery Optimization chooses the best source for each piece of the update, whether it’s Microsoft’s servers, another computer on your local network, or a computer on the internet. It even considers things like how fast your connection is and whether the sending computer is busy.

Full Technical Definition

Delivery Optimization is a Windows update distribution technology built into Windows 10 and Windows 11, and it is also used in Windows Server and other Microsoft products. It is designed to reduce the bandwidth consumption and deployment time associated with downloading updates from Microsoft’s content delivery network (CDN). The feature leverages a peer-to-peer (P2P) architecture, allowing Windows devices to download update payloads from multiple sources simultaneously, including the official Microsoft servers and other Windows devices that have already downloaded parts of the update.

At its core, Delivery Optimization uses a combination of HTTP range requests and a proprietary peer discovery and negotiation protocol. When a device requests an update, the Delivery Optimization client contacts Microsoft’s metadata servers to get a list of available update files and their hashes. The client then breaks the download into small chunks, typically 1 MB to 10 MB in size. It requests a manifest of available peers from the Delivery Optimization cloud service. Peers are discovered based on several criteria: network proximity (same subnet, same domain, or same internet), availability of the required chunks, and the peer’s current load and network bandwidth.

Once a peer is selected, the client establishes an HTTPS connection to the peer and downloads the missing chunks. The communication is encrypted and authenticated to ensure data integrity. If a peer becomes unavailable or slow, the client falls back to Microsoft’s servers or switches to another peer. The client also performs integrity checks on each downloaded chunk using cryptographic hashes (SHA-256) to ensure the data has not been tampered with or corrupted.

Delivery Optimization can operate in several modes. The default mode for most consumers is internet-based P2P, where peers can be any Windows device on the internet. For enterprise environments, administrators can configure Group Policy or Intune settings to restrict P2P to the local network only. There is also an option to disable P2P entirely and use only the HTTP source from Microsoft. Delivery Optimization can be combined with other caching technologies like BranchCache and Microsoft Connected Cache for larger organizations with distributed offices.

The feature is managed through the Delivery Optimization settings in Windows Settings app, Group Policy, or via MDM (Mobile Device Management) policies in Intune. Key settings include download mode, maximum bandwidth for downloads and uploads, and cache size limits. The Delivery Optimization cache is stored locally in the C:\Windows\SoftwareDistribution\DeliveryOptimization folder. IT administrators can monitor its activity using Windows Update for Business reports or third-party tools. In the context of the MD-102 exam, understanding how to configure and troubleshoot Delivery Optimization is essential, as it directly impacts update deployment efficiency and network performance.

Real-Life Example

Imagine you are organizing a large potluck dinner for a community of 50 people. Everyone needs to bring a dish, but the main course is a massive lasagna. If each person had to cook the entire lasagna from scratch at home, everyone would need to buy the same ingredients, use the same oven, and spend a lot of time and energy. The local grocery store (Microsoft’s servers) would also run out of lasagna noodles and cheese because of the sudden demand. This is like every computer downloading the same update from Microsoft at the same time, which clogs the internet connection.

Instead, with a potluck system like Delivery Optimization, you ask three people to cook the lasagna together. Person A makes the noodles, Person B makes the sauce, and Person C assembles and bakes it. They then bring the full lasagna to the dinner. The other 47 people just take a slice from the shared lasagna instead of making their own. In computer terms, Person A, B, and C are the first few computers that download the update from Microsoft. After they finish, the other 47 computers get the update pieces from these three computers over the local network, rather than from the internet. This keeps the internet connection free for other things and gets the update done much faster for everyone.

Now, if the potluck has people from different neighborhoods, you might need to coordinate more carefully. Delivery Optimization can handle that by letting computers share updates across the internet too, but in a controlled way so it doesn’t use too much data. The feature even pauses uploads when you are using your computer for something important, like a video call, so it doesn’t slow you down.

Why This Term Matters

For IT professionals, especially those managing Windows devices at scale, Delivery Optimization is a critical tool for efficient update management. Without it, a typical office with 500 computers updating to a new Windows feature update (which can be 3-5 GB) would consume 1.5 to 2.5 terabytes of internet bandwidth for that single update. This can cause network congestion, slow down business-critical applications, and potentially incur extra costs from internet service providers. Delivery Optimization reduces that bandwidth consumption by up to 30-60% depending on the network configuration and number of peers.

Delivery Optimization speeds up the update process for end users. When a computer gets 100% of its update from a local peer on a wired network, the download can happen in seconds rather than minutes or hours. This improves user satisfaction and reduces downtime. The feature also helps in scenarios where internet connectivity is limited or expensive, such as in remote offices or areas with metered connections.

Security and manageability are also important. Delivery Optimization is built into Windows and is enabled by default for consumer editions. For enterprise, administrators have full control via Group Policy or Intune. They can set bandwidth limits, force local-only sharing, and even integrate with Delivery Optimization in combination with Microsoft Connected Cache or BranchCache for even more efficient distribution. Because it is a native feature, it does not require additional infrastructure or licensing for basic use, making it a cost-effective solution. In the context of the MD-102 exam, understanding Delivery Optimization is essential for any question related to Windows update deployment, especially for minimizing network impact in managed environments.

How It Appears in Exam Questions

Delivery Optimization appears in MD-102 exam questions in several distinct patterns. The most common is the scenario-based multiple-choice question. For example: "A company has 200 Windows 10 devices in a single office with a 50 Mbps internet connection. They need to deploy a 1 GB update to all devices. What configuration minimizes internet bandwidth usage?" The correct answer would be to enable Delivery Optimization with peer-to-peer sharing on the local network. Incorrect choices might include disabling Delivery Optimization, using only HTTP from Microsoft, or enabling internet-based P2P (which uses external peers and may still consume bandwidth).

Another pattern is configuration-based questions. You might be given a screenshot of an Intune policy or a Group Policy editor and asked which setting controls a specific behavior, such as the maximum bandwidth for downloads or the cache size. For instance, a question could show the Delivery Optimization settings in Group Policy and ask which policy setting limits the upload bandwidth to 50% of the available bandwidth. The correct answer would be "Set upload bandwidth (percentage)." These questions test your familiarity with the actual configuration interfaces.

Troubleshooting questions are also common. For example, one user reports that updates are taking an unusually long time to download. The question might provide additional clues, like that the computer is in a domain environment and other computers are getting updates quickly. The candidate must identify that Delivery Optimization might be disabled by Group Policy, or that the local firewall is blocking the peer discovery ports (TCP 7680). Another troubleshooting scenario could involve a user in a branch office who reports that updates are downloading but not installing. The candidate might need to check if the Delivery Optimization cache is full or corrupted.

Finally, there are compare-and-contrast questions. These may ask how Delivery Optimization differs from BranchCache or how it integrates with Windows Update for Business. For example, "A company uses Windows Update for Business to manage updates. They also want to reduce bandwidth. Which additional technology should they use?" The correct answer might be Delivery Optimization with local network sharing. These questions test your understanding of the ecosystem of update management tools.

Study MD-102

Test your understanding with exam-style practice questions.

Practise

Example Scenario

You are an IT administrator for a medium-sized school with 200 Windows 11 laptops used by students. The school has a single internet connection that is often slow because everyone is online during the day. Microsoft releases a critical security update that is 500 MB in size. If you push the update to all 200 laptops at once, each laptop will try to download the full 500 MB from the internet. That would use 100 GB of bandwidth total, and laptops in the back of the queue would wait a long time because the internet pipe is clogged.

You decide to use Delivery Optimization to solve this problem. You configure the laptops using Intune to set the Delivery Optimization mode to "LAN (1)" which means the laptops will only share update pieces with each other on the local network. You also set a group policy that limits the maximum upload bandwidth to 50% to avoid saturating the local Wi-Fi. When the update is released, the first five laptops that check for updates download the full 500 MB from Microsoft. This uses 2.5 GB of internet bandwidth. As soon as they finish, they become peers. The remaining 195 laptops then start downloading missing chunks from these five peers and from Microsoft simultaneously. Because the local network is much faster than the internet, these laptops receive most of the update from the peers, using only about 10-20% of the internet bandwidth that they would have used otherwise. The total internet bandwidth used for the entire update is around 10-15 GB instead of 100 GB. The update completes for all laptops within an hour instead of an entire day.

In this scenario, if you had not configured Delivery Optimization, the update would have taken much longer and caused complaints from teachers about slow internet. The exam might ask you to identify the correct Delivery Optimization mode for this scenario and the appropriate configuration steps.

Common Mistakes

Assuming Delivery Optimization is the same as Windows Update

Windows Update is the overall service that checks for, downloads, and installs updates. Delivery Optimization is a specific component that handles the download process in a more efficient way. They are not interchangeable terms.

Think of Windows Update as the library catalog and Delivery Optimization as the inter-library loan system that gets the book to you faster. Both are needed, but they are different.

Enabling Internet P2P for a branch office with slow internet to save bandwidth

Internet P2P shares chunks with peers on the internet, which may still use significant internet bandwidth. For a branch office with a slow connection, local network sharing (LAN mode) is better, but if there are no other peers in that branch, internet P2P may not help much. A better solution is to use Microsoft Connected Cache or a local update server.

For a branch office, consider using Microsoft Connected Cache or a WSUS server. If you must use Delivery Optimization, use LAN mode if there are multiple devices in the same branch.

Thinking Delivery Optimization needs a lot of configuration to work

Delivery Optimization is enabled by default in Windows for consumer editions. For enterprise, it is enabled but may need specific Group Policy or Intune settings to define the download mode. It works out of the box without any complex setup for basic use.

Default settings are fine for many environments. Only change settings if you need to restrict bandwidth or limit P2P to the local network.

Assuming Delivery Optimization works over the internet without using any bandwidth

Even with P2P, the initial peer discovery and metadata download still use some internet bandwidth. Also, if no suitable peers are found, the download falls back to Microsoft servers. Delivery Optimization reduces bandwidth but does not eliminate internet usage entirely.

Set realistic expectations. Delivery Optimization can save 30-60% bandwidth, but not 100%. Monitor actual usage with Windows Update for Business reports.

Exam Trap — Don't Get Fooled

{"trap":"Choosing 'HTTP only' mode for a company that wants to minimize internet bandwidth","why_learners_choose_it":"They think 'HTTP only' means only using the local network, or they believe it is the most secure and controlled method. They also may confuse it with downloading from a local WSUS server.","how_to_avoid_it":"Understand the different download modes.

'HTTP only' (mode 0) downloads updates only from Microsoft's servers, which uses the most internet bandwidth. To minimize bandwidth, you would choose 'LAN' (mode 1) or 'Group' (mode 2) to enable peer-to-peer sharing. Read the descriptions carefully in the exam."

Commonly Confused With

Delivery OptimizationvsBranchCache

BranchCache is a WAN optimization technology that caches files and web content on a local server in a branch office. Delivery Optimization is a peer-to-peer system that runs on client devices without dedicated server hardware. BranchCache is better for large branch offices with a local file server, while Delivery Optimization is simpler and works across all devices without extra infrastructure.

BranchCache is like having a small library branch in your neighborhood. Delivery Optimization is like neighbors sharing books directly with each other.

Delivery OptimizationvsWindows Update for Business

Windows Update for Business is a service that allows IT admins to manage update deployments, such as setting deferral periods and update rings. Delivery Optimization is the technology that actually downloads the update files. WUfB decides when and what updates to apply, while DO handles how to download them efficiently.

Windows Update for Business is the scheduler who decides which week the book club meets. Delivery Optimization is the carpool that gets everyone to the meeting.

Delivery OptimizationvsMicrosoft Connected Cache

Microsoft Connected Cache is a server-based caching solution that can be installed on Windows Server or as a Docker container. It caches update content locally for multiple clients. Delivery Optimization is client-based and does not require a server. Connected Cache is better for larger deployments with many machines, while Delivery Optimization is good for smaller to medium environments.

Connected Cache is like a dedicated warehouse in your town that stocks the most popular items. Delivery Optimization is like your neighbors sharing what they bought last week.

Step-by-Step Breakdown

1

Client Request

A Windows device checks for updates via Windows Update. It receives a list of required update files and their cryptographic hashes. The Delivery Optimization client then initiates the download process.

2

Download Manifest Retrieval

The Delivery Optimization client contacts the Delivery Optimization cloud service to obtain a manifest of available peers. This manifest includes information about other Windows devices that have the required update chunks and are willing to share them.

3

Peer Discovery and Selection

Based on the manifest and configured settings (e.g., LAN only, Group, or Internet), the client selects one or more peers. It considers factors like network latency, peer availability, and bandwidth. The client may also start downloading from Microsoft's servers at the same time.

4

Chunk Download and Integrity Check

The client downloads small chunks of the update file from the selected peers and Microsoft servers simultaneously. Each chunk is verified against its SHA-256 hash to ensure it is not corrupted or tampered with. Corrupted chunks are discarded and re-requested.

5

Chunk Assembly and Fallback

As chunks are successfully downloaded, they are assembled into the complete file. If a peer becomes unavailable or slow, the client falls back to another peer or to Microsoft's servers. The process continues until all chunks are obtained and the file is verified.

Practical Mini-Lesson

In a real-world IT environment, understanding how to configure Delivery Optimization effectively is crucial. The feature is controlled through Group Policy or Intune. In Group Policy, the relevant settings are under Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization. The most important setting is the Download Mode. Mode 0 is HTTP only (no P2P). Mode 1 is LAN (peers on the same local network only). Mode 2 is Group (peers in the same Active Directory site or domain). Mode 3 is Internet (any peer on the internet). Mode 99 is simple download with no P2P but with other optimizations.

For most enterprise environments, Mode 1 or Mode 2 is recommended. Mode 2 is particularly useful when devices are spread across multiple subnets within the same site. You can configure additional policies to set the absolute maximum bandwidth for downloads and uploads (in KB/s) or as a percentage of available bandwidth. Another important policy is the cache size, which can be set as a percentage of disk space or an absolute size. The default cache size is 50% of free space on the system drive, but you can limit it to avoid filling up disks on devices with small drives.

In Intune, these settings are configured via a configuration profile under Windows Update for Business policies. You can set the Delivery Optimization mode, bandwidth limits, and cache settings. It is also possible to integrate Delivery Optimization with Microsoft Connected Cache by configuring the download mode to enable peer-to-peer sharing and pointing clients to the connected cache server.

A common issue IT professionals encounter is when Delivery Optimization is blocked by firewalls. The service uses TCP port 7680 for peer-to-peer communication. If this port is blocked, devices will fall back to HTTP downloads, negating the bandwidth savings. The Windows Firewall must have the 'Delivery Optimization' inbound rule enabled. Another issue is that some organizations disable Delivery Optimization entirely because they fear it will consume local network bandwidth. While this can be a concern, proper bandwidth throttling policies can mitigate it.

Finally, monitoring is essential. You can use the Get-DeliveryOptimizationStatus PowerShell cmdlet to see the current status, including the number of bytes downloaded from peers versus from HTTP. The Delivery Optimization cache can be cleared using the DeliveryOptimization cache settings in Windows or by stopping the service and deleting the cache folder. Understanding these practical aspects will help you manage Windows updates more efficiently in any organization.

Troubleshooting Clues

Symptom:

This may indicate that Delivery Optimization is not working or is set to HTTP-only mode. Check the download mode and ensure TCP 7680 is not blocked.

Symptom:

The Delivery Optimization cache might be corrupted. Clear the cache by stopping the DoSvc service, deleting the DeliveryOptimization folder, and restarting the service.

Memory Tip

Delivery Optimization: "Share your downloads to save bandwidth." The port is 7680 (think 76-80 = share).

Covered in These Exams

Current Exam Context

Current exam versions that test this topic — use these objectives when studying.

Related Glossary Terms

Quick Knowledge Check

1.Which port does Delivery Optimization use for peer-to-peer communication?

2.What does download mode 1 (LAN) mean in Delivery Optimization?

Frequently Asked Questions

Does Delivery Optimization work on Windows 10 and Windows 11?

Yes, Delivery Optimization is available on both Windows 10 and Windows 11, including Pro, Enterprise, and Education editions. It is also present in some versions of Windows Server.

Can I turn off Delivery Optimization completely?

Yes, you can disable Delivery Optimization by setting the download mode to 'HTTP only' (mode 0) via Group Policy or Intune. However, it is generally not recommended because it increases internet bandwidth usage.

Does Delivery Optimization work over VPN?

Delivery Optimization can work over VPN, but it may not discover peers on the same local network if the VPN splits traffic. It is best to test in your environment to ensure peers can connect.

Will Delivery Optimization use my computer's resources when I am not using it?

Delivery Optimization can use your computer's upload bandwidth and CPU to share updates with other devices. You can limit this with bandwidth policies, and it gives priority to foreground activities like video calls.

Is Delivery Optimization safe? Can peers inject malware?

Delivery Optimization is secure. All downloaded chunks are verified with SHA-256 hashes from Microsoft. Even if a peer sends corrupted data, it will be detected and discarded. The communication is also encrypted.

How do I clear the Delivery Optimization cache?

You can clear the cache by going to Settings > Windows Update > Advanced options > Delivery Optimization > Activity monitor, and clicking 'Clear cache'. Alternatively, you can stop the Delivery Optimization service and delete the folder C:\Windows\SoftwareDistribution\DeliveryOptimization.

Summary

Delivery Optimization is a built-in Windows feature that uses peer-to-peer sharing to download updates and apps faster while reducing internet bandwidth consumption. For IT professionals, especially those studying for the MD-102 exam, understanding how to configure and troubleshoot this feature is essential for efficient Windows update management. The feature works by breaking update files into small chunks and downloading them from multiple sources, including other Windows devices on the local network or the internet. Administrators have full control over the behavior via Group Policy and Intune, allowing them to set bandwidth limits, restrict sharing to the local network, or disable it entirely.

Delivery Optimization is not a replacement for Windows Update or Windows Update for Business, but rather a complementary technology that works with them. It is important to distinguish it from other caching technologies like BranchCache and Microsoft Connected Cache, which serve similar but different use cases. In exams, you will encounter scenario-based questions that test your ability to choose the correct download mode and configuration settings based on network constraints and business requirements.

The key takeaway is that Delivery Optimization is a free, built-in tool that can dramatically improve update deployment efficiency. By understanding how it works and how to manage it, you can ensure that your users get updates quickly without overwhelming the network. This knowledge is not only valuable for the MD-102 exam but also for real-world IT administration.