Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Approving Updates in Windows Intune

Updated: December 17, 2012

Applies To: Windows Intune

When you approve an update in the Windows Intune administrator console, you specify which computer groups to apply the update. You can select a single update or multiple updates to approve. When you select a single update, you can view the Update Properties page to review the update details before you approve it.

The following procedure describes how to select and approve one or more updates in the Updates workspace.

Unless the action Do Not Install, Required Install, or Uninstall was explicitly configured for a child group, an action configured for a parent group is inherited by all its children.

When security updates and critical updates need approval, the Security Updates Need to be Approved and Critical Updates Need to be Approved alert types are generated. By default, these alert types are refreshed every hour. After you approve security updates or critical updates, the corresponding alert types are displayed until they have been refreshed.

In Windows Intune you can filter the view on the Security Updates page by Security Updates By KB and approve updates by the KB Article number or the Bulletin ID number.

To approve updates

  1. Open the Windows Intune administrator console.

  2. In the workspace shortcuts pane, click the Updates icon.

  3. On the Updates Overview page, in the Update Status area, click New updates to approve.

    The New updates to approve link appears in the Updates Status area only when there is at least one managed computer that needs an update to be approved.

  4. Select an update, review the update properties at the bottom of the page to ensure that you want to approve the update, and then click Approve on the taskbar.

    To select multiple updates in the list, press and hold the Ctrl key, and then click each update that you want to approve.

  5. On the Select Groups page, select a group for which you want to manage the updates approval, and then click Add. When you have finished specifying groups, click Next.

  6. On the Deployment Action page, do the following for each group in the list:

    • On the Approval list, select one of the following:

      • Required Install. Installs the update on computers in the specified group.

      • Do Not Install. Reports applicability only and neither installs nor uninstalls the update.

      • Uninstall. Removes updates from computers in the targeted group.

        The update is removed even if it was installed by using a method other than the Windows Intune administrator console.

    • On the Deadline list, select one of the following:

      • None. Indicates that no deadline is enforced for the installation of the update and users may decline the update continually.

      • As soon as possible. Installs the update at the next opportunity by all targeted computers.

      • Custom. Specifies the date and time that approved updates are installed.

  7. Click Finish to save the settings, or click Cancel to discard the settings and return to the updates list.

  8. You can check the details pane at the bottom of the Updates page for reminder messages about the update.

See Also

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft. All rights reserved.