Maintaining Windows Flashcards

Which Windows Update for Business policy type controls when quality updates (monthly cumulative updates) are installed on managed devices?

Answer: Quality update policy via Update ring

Update rings in Windows Update for Business define deferral periods and deadlines for quality updates, controlling when monthly cumulative updates are installed on groups of devices.

What is the recommended maximum deferral period for quality (security) updates in Windows Update for Business?

Answer: 30 days

Microsoft recommends deferring quality updates by no more than 30 days to ensure devices receive critical security patches in a timely manner while still allowing validation time.

An administrator needs to check which Windows updates are installed on a specific managed device from the Intune portal. Where should they look?

Answer: Devices > Select device > Monitor > Windows update installations

In Intune, navigating to a specific device and selecting Monitor then Windows update installations shows the update history for that device, including installed updates and any failures.

Which PowerShell cmdlet is used to check the current Windows Update client policy settings applied to a device?

Answer: Get-WUSettings

Get-WUSettings from the PSWindowsUpdate module retrieves the current Windows Update settings applied to a device, including server URLs, notification settings, and scheduled install times.

A user's Windows device has stopped receiving updates. After investigating, you find the Windows Update service is stopped. Which command restarts the service?

Answer: Start-Service -Name 'wuauserv'

The Windows Update service internal name is wuauserv, and using Start-Service with this name restarts it so the device can check for and receive updates again.

Which Intune report shows how many devices in the organisation are compliant with the Windows Update policy and which have failed to install required updates?

Answer: Windows Update compliance report

The Windows Update compliance report in Intune provides an overview of devices update status, showing which are up to date, which have pending updates, and which have encountered update failures.