Forum Discussion

Jason_B1025's avatar
Jason_B1025
Brass Contributor
Mar 30, 2021

Windows 10 update rings not applying patches

We have a win 10 update ring set to install both quality and feature updates. The device status shows succeeded but when I lookup a machine in security center it shows the month security updates mis...
Intune
Jason_B1025's avatar
Jason_B1025
Brass Contributor
Mar 31, 2021
The first computer I checked for the "end user update status" report and it's listed as up to date, with scan and checking times in the last three days.
But security center shows patches older than 30 days are missing
DBR14's avatar
DBR14
Iron Contributor
May 24, 2021
Did you have any luck figuring this out? I'm trying to get 150 Surface 3 laptops to move up from 1909 to 20H2 and despite my settings I'm just seeing them listed as 1909 Up to Date in the Update Ring information. Deferral for quality and feature are set to 0 and then 2 deadline deferral days, otherwise these things should be rocking an rolling. I'm more confused about the 1909 "Up to Date" readout.
  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    May 25, 2021

    DBR14 

     

    Hi,

     

    Just like I mentioned in another post about update rings ,what happens when you try it out with the feature update deployment?

     

    And did you make sure Telemetry is configured and the sign in assistant service is running?

     

     

     

    • DBR14's avatar
      DBR14
      Iron Contributor
      Jun 01, 2021

      I've had a Feature update ring on for as long as I've had the Update Ring going. I had it set to go to 20H2. But some laptops that I forced an interactive update scan using usoclient.exe startinteractivescan went to 21h1 rather than holding at 20H2 as I had indicated with the Feature Update Ring, not a huge deal but it clearly didn't listen to the policy -- which I'm not surprised because preview features are generally junk anyways and rarely work.

      I turned on telemetry - now it no longer has a "basic" selection there is:
      Not Configured (what was on)
      Diagnostic Data Off

      Required (What I changed it to)
      Enhanced - 1903 and Earlier
      Optional

       

      As for the Sign-in Assistant, these are all AAD machines so there isn't any sort of group policy and no reason I could see that service being turned off. But when spot-checking a few machines using sc query "wlidsvc" I do see it in a stopped state.

    • Jason_B1025's avatar
      Jason_B1025
      Brass Contributor
      Jun 01, 2021
      Circleing back around here. 🙂
      I opened a ticket with support. the first two status just show if the policy applied. not that the updates applied. End user update status does show if the feature update installed or not.
      That will work for me on feature updates. Now I'm onto the monthly patches and how to report on the status of those 😞

Resources