Windows Office Hours: September 19, 2024

VanakenJ To add to what Steve said, there is a way to potentially leverage Graph API to get the information you are looking for. Be aware that your mileage may vary and definitely recommend you test, test, test this in your environment!

GET https://graph.microsoft.com/beta/admin/windows/updates/updatePolicies

This will list out all the policyId’s (highlighted in Yellow) and deploymentAudienceId’s (Highlighted in Green) for all policies created by the tenant.  The deploymentAudienceId is needed in the next step.

Example:

GET https://graph.microsoft.com/beta/admin/windows/updates/deploymentAudiences/{deploymentAudienceId}/applicableContent

This will list out all applicable drivers available in the policy, you will need the catalogEntryId of the driver you wish to know which devices are applicable for the driver

Example:

GET https://graph.microsoft.com/beta/admin/windows/updates/deploymentAudiences/{deploymentAudienceId}/applicableContent/{catalogEntryId}/matchedDevices

              
This will return all deviceId’s that are applicable for the catalogEntryId specified.  If it is a recommended driver it will say “recommendedBy”:[Microsoft] and if it is an Other driver it will say “recommendedBy”:[]

Example: