Event details
It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
M_Wilkinson_
Feb 05, 2026Brass Contributor
Is there any risk to deploying the registry setting for AvaliableUpdates (or GPO/Intune) to all devices in your fleet?
- mihiFeb 05, 2026Copper Contributor
If there wasn't, there would not be the option, it would just happen. Be able to service devices in case they get stuck or need a forced reboot. If you cannot handle it, wait for Microsoft to do it in the LCU and only do it later when you see that your configuration is too exotic to get handled by LCUs.
When you have your devices grouped by hardware model, start with a few from each model, then roll to all of them if no problems occur.
Nobody likes to see hundreds of frozen departure/arrival indicator screens in a large airport. Better only have one in each terminal frozen :)