Windows Updates Report

Windows feature and quality update status across all managed devices. Track update compliance, identify devices running outdated versions, and monitor update deployment progress.

Overview

The Windows Updates Report provides comprehensive visibility into the update status of your Windows device fleet. Monitor both feature update adoption (e.g., Windows 11 23H2) and quality update compliance (monthly security patches) to ensure your environment is protected.

Feature Updates

Track which Windows versions your devices are running:

Warning: Devices running older versions may not receive security updates and represent a security risk. Plan migrations to supported versions.

Quality Updates

Monitor monthly security patch compliance:

• Current — Devices running the latest quality update
• 1 month behind — Missed the most recent update cycle
• 2+ months behind — Significantly outdated, high risk

Report Columns

Update Rings

Devices are organized by update deployment rings:

1. Pilot — Early adopters and IT devices (0-day deferral)
2. Fast — Broader test group (7-day deferral)
3. Broad — General deployment (14-day deferral)
4. Critical — Sensitive systems with extended testing (30-day deferral)

Filters

• OS Version — Filter by Windows version
• Update Status — Current, Behind, Failed
• Update Ring — Filter by deployment ring
• Tenant — Filter by managed tenant

Graph API Data Sources

• GET /deviceManagement/managedDevices
• GET /deviceManagement/windowsUpdateForBusinessConfigurations

API Reference

• GET /api/reports/intune/updates — Get Windows update status
• GET /api/reports/intune/updates/feature — Get feature update distribution
• GET /api/reports/intune/updates/quality — Get quality update compliance
• POST /api/reports/intune/updates/export — Export report data