Software Updates and Patches: Automatic vs Manual
Software Updates in Intune
Keeping your device updated is one of the most important security measures. Intune gives IT tools to manage updates, but the experience varies by platform. Let's break down what you need to know.
Windows Updates with Intune
On Windows 10/11, Intune can manage Windows Updates through "Update Rings" (now called "Update Policies" in Intune). IT can configure:
| Setting | What It Means for You |
|---|---|
| Automatic updates | Updates download and install automatically — you don't need to check for updates manually |
| Active hours | IT sets a window (e.g., 8 AM - 5 PM) when updates won't restart your PC |
| Restart deadline | You might see "Your device needs to restart" with a countdown — IT sets how long you can delay |
| Feature update version | IT controls which Windows version your PC is on — prevents incompatible updates |
| Quality update cadence | How quickly security patches are applied (weekly, monthly, etc.) |
What You'll See on Windows
- "Some settings are managed by your organization" — This appears in Windows Update settings. It means IT is managing updates.
- Restart notifications — You'll get reminders to restart. Don't ignore these — eventually the restart will be forced.
- Update deadlines — If IT sets a deadline, your PC will force-restart after it passes (usually outside active hours).
macOS Updates with Intune
On macOS, Intune can:
- Set a minimum macOS version for compliance (your Mac must be on at least version X)
- Force software update installation for security patches
- Configure update notifications and deadlines
- Restrict major OS upgrades until IT approves them
You might see "Your organization requires a software update" — go to System Settings > Software Update and install the required update.
iOS Updates with Intune
On iOS (iPhone/iPad), Intune can:
- Set a minimum iOS version for compliance
- Force rapid security updates (iOS 16+)
- Display update notifications in Company Portal
If you're non-compliant due to an old iOS version:
- Go to Settings > General > Software Update
- Tap "Install Now" or "Download and Install"
- Wait for the update to complete (make sure your device is charged)
- Open Company Portal and tap "Sync" to update compliance status
Android Updates with Intune
Android updates are less controlled by Intune (Google's OEMs control update delivery). Intune can:
- Set a minimum Android version for compliance
- Check for security patch level — if your device hasn't had a security update in X months, it's non-compliant
- Display update recommendations in Company Portal
To update Android: Settings > System > System update > Check for update.
Your Responsibility: Keep Your Device Updated
Even with Intune managing updates, you play a role:
- Don't ignore restart notifications — Updates aren't fully installed until you restart. Schedule restarts during breaks.
- Keep your device charged — Updates can fail if the battery dies mid-installation. Plug in during updates.
- Don't try to disable updates — If IT has configured update policies, you can't turn them off. Trying to work around them will cause compliance issues.
- Report update failures — If an update keeps failing, contact IT. There may be a compatibility issue.
What If an Update Breaks Something?
Sometimes updates cause issues (an app stops working, a feature changes). Here's what to do:
- Report it to IT — They may need to investigate or roll back the update
- Don't try to uninstall the update yourself — This could make your device non-compliant
- Check if it's a known issue — IT may already be aware and working on a fix
- Be patient — Many update issues are resolved within 24-48 hours by Microsoft or Apple
Beawit Consulting manages software update policies through Intune for Windows, macOS, iOS, and Android. Contact us for update management configuration.
Next, we'll look at security baselines — the pre-configured security settings IT applies to your device.
There are no comments for now.