Windows Patches

[Sterrick]

Is there a  PowerShell script I can automate and run in Azure Intune to check all the current machines for the current Windows updates? I want to be able to automate a script to report after Patch Tuesday to check to see if all my current machines got the latest patches.

[#2]

@Sterrick  I believe Configuration Manager will provide better overview about Patch compliance. Sorry If you're using another tool for updates management.

[#3]

@ranjithckm7 

Hi Yes we are using Intune

[#4]

@Sterrick 

As mentioned by @ranjithckm7 - the device management platform- Intune in this case will provide an overview of patch compliance and install status. It can be further utilised for detail views, querying and organising data sent in by managed devices etc.

Unsure, to what extent you want a script's functionality to be, a good starting point will be:

get-wmiObject -class win32_quickFixEngineering -computerName $cpName | where-object {$_.hotFixID -eq 'KBxxxxxx'}

-computerName parameter could be an array of devices you want to check against.