Our HR department have staff on parental leave (what we used to call maternity leave) to take their work laptops with them, they claim it is a legal requirement. Whatever, the point it these machines get used infrequently for a year or more, and the users generally do not use our Cloud services so are not doing MFA. The upshot is we get terrible update compliance. The change above is unlikely to be helpful for us. Understand, our update compliance is measured from the release date of the patch, not when we make it available or when the laptop saw it. If the device can't tell when the patch was issued, maybe fix that instead???