none
Intune - Can we see the approved updates? RRS feed

  • Question

  • I am new with the Intune/MDM.  Testing windows updates for Windows 10 Enterprise, computers.  Currently we use SCCM/WSUS.

    I have created a group/ring and assigned to test/device group of 3 windows-10 desktops.  Quality and Feature updates are selected to be installed right away.

    Question:

    Is there a way to see which updates are selected for approval? The reason I ask is because I would want to approve the same updates for my other groups/ring devices?  Like we can see the updates before we approve in WSUS/SCCM can we see them in Intune and if not how would I know which updates are being approved/pushed?

    Thank you
    Tuesday, November 19, 2019 2:24 PM

Answers

  • There is no such thing as "approval" in WuFB (which is what Intune uses). It's all or nothing; you cannot selectively choose which updates are deployed. The only control you have is how long to delay updates for.

    All of the possible options are detailed at https://docs.microsoft.com/en-us/windows/deployment/update/waas-configure-wufb and https://docs.microsoft.com/en-us/intune/protect/windows-update-for-business-configure


    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by WildPacket Thursday, November 21, 2019 3:46 PM
    Tuesday, November 19, 2019 3:00 PM

All replies

  • There is no such thing as "approval" in WuFB (which is what Intune uses). It's all or nothing; you cannot selectively choose which updates are deployed. The only control you have is how long to delay updates for.

    All of the possible options are detailed at https://docs.microsoft.com/en-us/windows/deployment/update/waas-configure-wufb and https://docs.microsoft.com/en-us/intune/protect/windows-update-for-business-configure


    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by WildPacket Thursday, November 21, 2019 3:46 PM
    Tuesday, November 19, 2019 3:00 PM
  • Intune actually doesn’t provide a cloud-based update service like WSUS from which clients can download updates and hotfixes. It just provides Windows Update Ring policies only define an update strategy (e.g. block driver installation, set deferral period, set maintenance time, etc.), they don’t actually provide the update infrastructure itself. Think of it as being analogous to certain Group Policies for Windows Update deployed from your on-premises Active Directory. This means that you still need to use your existing update solution such as Windows Update or WSUS to obtain the actual updates. Therefore, we cannot see which updates are selected for approval.

    Reference:https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Troubleshooting-Windows-10-Update-Ring-Policies/ba-p/714046 

    Best regards,

    Cici Wu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, November 20, 2019 8:02 AM