Event banner
AMA: Managing Windows updates
Event details
- Joe_LurieJun 05, 2024
Microsoft
BlueSakura Thanks for the question. If you haven't heard, we are working on a "Device Query" in Intune (much like SCCM's CMPivot) which will allow you to query a device and then take an action. So you can kick off a real-time scan and then update, or reboot, or whatever the action needed is...directly from the Intune admin center. For more information on Device Query, see here: Device query in Microsoft Intune | Microsoft Learn
- Jason_SandysJun 05, 2024
Microsoft
Can you expand on the scenario you are trying to address here? A scan from the Settings app can be initiated by the end user. Is there something else you are looking for here?- BlueSakuraJun 05, 2024Brass ContributorKind of like how MECM has options for the local client we can force a client to pull a machine policy, check for Application Deployments, update user policy, evaluate Software Updates deployment, etc.... A sync won't necessarily force an update scan immediately.
- BlueSakuraJun 05, 2024Brass ContributorFor a similar scenario that you'd want to do a Sync, Restart, Update Defender Intelligence. Yes, it should automatically update, synchronize, and do reboot, but this does not always occur. If a device is online yes, we could reach out to the end user. By taking the user out of it we should be able to more quickly force a device to update if it isn't for whatever reason without relying on a user to do it. Device Query looks nice, but without a license for an advanced analytics we can't do it. Not to be difficult or anything but yes most of these things can be done by users or through management, but there's always exceptions and things happen which sometimes require intervention. That's what these tools and actions are for.
- JoeLentzJun 05, 2024Copper Contributor
BlueSakura - Agree with you here on having a simple option with the GUI. If you're looking for a free option, I've used a "remediation" script to kick off an update scan which is effectively the same as the end user manually clicking "Check for Updates". Which you can manually run from the Intune device page. Of course your reboot deadlines would have to be relied on for that. start-process C:\windows\system32\UsoClient.exe -ArgumentList "startinteractivescan"