Based on your feedback, there's a new efficient way to monitor the progress of expedited update deployments! Tell me more, you say? We've introduced a new KPI card under Windows Update for Business reports.
With Microsoft Intune and the Windows Update for Business deployment service, you can expedite the deployment of critical security updates to devices across your organization, helping to reduce the impact of zero-day vulnerabilities. Now you can stay on top of the progress of those expedited security update deployments with a new monitoring capability in Windows Update for Business reports. Let's take a look!
A key performance indicator (KPI) for expedited updates
When you access the Quality update tab in Windows Update for Business reports, you'll now see a new KPI card offering a quick overview of the installation progress for the latest expedited update. The KPI card shows the progress across all devices within the deployment.
Expedite performance card in Windows Update for Business reports
Want to check for the card in your tenant? Visit Azure Monitor > Workbooks > Windows Update for Business reports > Quality update.
Track each expedited update deployment
When you click View details on the new KPI card, you can view all expedited deployments created in your organization. Quickly see the total progress of installation for all devices in a given deployment ring, alerts for failed updates, and a list of total devices in that ring.
Expedited deployment list with details such as ID, update release time, total progress, alerts, and total devices
View alerts for failed expedited updates
If you'd like to see the specific cause of an update failure, select the number listed under the Alerts column. From the Expedite alerts view, you can then view a description of the alert and the error code. Select the AlertName for a recommendation to fix it and a list of affected devices.
The Expedite alerts view shows an alert name together with its classification, error code, alert type, and number of affected devices
Examine the device state
Going back to the main view for Expedite deployments, select TotalDevices to see all the devices targeted by an expedited update deployment and their current installation status through both the client and service states.
The detailed view of two devices for a specific deployment ID, along with their Azure AD details, target build, client state, and others
Query the logs
Sometimes, you might want to query specific records of expedited updates. You can use Log Analytics to filter out empty deployment IDs as follows:
UCClientUpdateStatus | where UpdateClassification =="Security" | where isnotempty(DeploymentId)
Learn more about expedited updates and update reporting
If you'd like to learn more about using the Windows Update for Business deployment service, expediting updates, and related reporting features, check out the following resources: