InTune and Windows Updates

Question

I have been reading that Intune can manage Windows Updates on devices using rings, but the only thing I care about is if the device has the latest \ monthly security updates installed. Is there a monitor \ report for this? I haven't found anything so far.

Answer 1

@rr-4098, Thanks for posting in Q&A.

In fact, for windows update ring policy, Intune only define an update strategy (e.g. block driver installation, set deferral period, set maintenance time, etc.), they don’t actually provide the update infrastructure itself. you still need to use your existing update solution such as Windows Update or WSUS to obtain the actual updates. So we can't get the windows update status from Intune directly. We can only get policy applied status from Intune.

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-windows-10-update-ring-policies/ba-p/714046#:~:text=Support%20Tip%3A%20Troubleshooting%20Windows%2010%20Update%20Ring%20Policies,getting%20applied%20on%20the%20client%3F%20...%20See%20More.

To get the update details, you can look into Update Compliance to monitor the update. Here are some blogs for your reference:

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/using-microsoft-intune-and-update-compliance-for-monitoring-and/ba-p/2177106

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/public-preview-of-azure-workbooks-for-update-compliance/ba-p/3601310

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.