Hi,
I have created a Intune update ring which I am using for deploying quality and feature updates.
I have two questions on this -
1. How to find which are the KB's which are installed as part of quality and feature updates ?
2. Some of the devices the "update status" shows as failed. For these devices how can we find the reason of failure ? There's nothing that intune console shows.
Why does #1 matter specifically? For Windows 10, there is one quality update per month released in the form a monthly cumulative update. And a single feature update is released once about every six months.
@NM-0091，For your questions, here are my answers for the reference:
Q1. How to find which are the KB's which are installed as part of quality and feature updates ?
A1: In fact, Windows Update Ring policies only define an update strategy (e.g. block driver installation, set deferral period, set maintenance time, etc.), they don’t actually provide the update infrastructure itself. Think of it as being analogous to certain Group Policies for Windows Update deployed from your on-premises Active Directory. This means that you still need to use your existing update solution such as Windows Update or WSUS to obtain the actual updates. To check the hotfix installed on the device, we can use get-hotfix.
Q2. Some of the devices the "update status" shows as failed. For these devices how can we find the reason of failure ? There's nothing that intune console shows.
A2: We can firstly check if the policy has deployed to the device successfully by the methods in the following link:
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-windows-10-update-ring-policies/ba-p/714046
If the policy is applied successfully, but the update is failed to install. We suggest to contact windows team to check the windows update issue:
https://docs.microsoft.com/en-us/answers/topics/windows-10-general.html
Hope it can help.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@NM-0091，Hope things going well? I am writing to see if there's anything else we can help. If yes, feel free to let us know.
So, I checked the device on which the policy was applied....The polices are applied fine using Intune checked and verified it based on this link -
But the problem is that these devices are showing failed for update installation in Intune...When you look in the device all the updates were synced fine...but they were not installed and when i clicked on install now button it started the installation.
Why the updates are not getting installed automatically... what can be the reason...Please, suggest.
Thanks!
@NM-0091, Would like to double confirm if the policy shows successful under "Device status" of the windows 10 update rings policy? But under "End user update status", the update status shows failed?
Have you performed any troubleshooting, like reviewing the event logs or reviewing the WindowsUpdate.log on the systems where the issue is occurring?
@NM-0091, Thanks for the update. Please also confirm if the update policies are managed by MDM and if the registry is correct. We can see more details in the following link:
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-troubleshooting-windows-10-update-ring-policies/ba-p/714046
If there's any update, please let us know.
The update policies are managed by MDM and that i can see in "view configured update profile"...All the registries are also correct.
@NM-0091, Thanks for the update. From the checking we do, it seems the Intune policy is applied successfully. The issue may occurs on the windows update. We suggest to open a case with windows teams to troubleshoot the windows update issue.
Thanks for the understanding and have a nice day.
4 people are following this question.
