Enable Windows Update for Business reports

Because Update Compliance was retired on March 31, 2023, the service was removed. Update Compliance has been replaced by Windows Update for Business reports. Support for Update Compliance ended on March 31, 2023.

Windows Update for Business reports is a cloud-based solution that provides information about your Azure Active Directory-joined devices’ compliance with Windows updates. It is offered through the Azure portal and included as part of the Windows 10 or Windows 11 prerequisite licenses.

In this blog post, I will show you how to set up and use Windows Update for Business reports to monitor security, quality, driver, and feature updates for your Windows 11 and Windows 10 devices.

Prerequisites Windows Update for Business reports

Before you can use Windows Update for Business reports, you need to meet the following prerequisites:

• Azure subscription. ( It is possible to use a free version because we are not charged for the data ingestion)
• Log Analytics workspace in a compatible region.
• Enroll in Windows Update for Business reports using the Azure Workbook or the Microsoft 365 admin center.
• Configure your Azure AD-joined devices to send Windows client diagnostic data to Windows Update for Business reports. You can do this using a script, Microsoft Intune, or manually.

Enable Windows Update for Business reports

There are 2 ways to enable the Windows Update for Business report via the Azure workbook and the Microsoft 365 Admin Center. First step is to create an Log Analytics workspace

create an Log Analytics workspace

Windows Update for Business reports needs an Log analytics workspace to push the data in. To create this we have to logon on the Azure portal and search for Log analytics workspaces and click it

Click on + Create Fill in Subscription, resource group and a name where we like to use the full name of logs where they are going to be used for windowsupdatebusinessreports

Microsoft 365 Admin Center

One way to enable it is via the Microsoft 365 Admin Center, but it can also be enabled via the Azure portal as a gallery item. The first step is to create a Log Analytics workspace or check if it is already available.

To do this follow the following Steps, next we can enable the Windows Update Business reports

Go to the Admin portal | Health | Software Updates under Windows we can configure settings.

Click on Configure settings

The following popup will appear

Fill in the Subscription and Log Analytics workspace (windowsupdatebusinessreports) and click Save Settings

Azure Workbook

Go to the Azure portal | Monitor | Workbooks now the Gallery opens click on Windows Update for Business reports

Click on Get started

Select the right subscription and Log Analytics workspace (windowsupdatebusinessreports)

Click on Save settings, Click Save

Onboard devices

Here we have to create a settings catalog policy to onboard the devices with the right telemetry settings.

Go to the Intune portal and create a new settings catalog policy, give it a name, and click Next.

Add the following items:

• Allow Telemetry
• Configure Telemetry Opt In Settings Ux (to disable the ability for a user to override the diagnostics data level)
• Allow device name to be sent in Windows diagnostic data(important to have the data of the device name onboarded)
• Configure Telemetry Opt In Change Notification

Below are the settings which are needed to be set.

After the devices have opted into the Environment, the data in the workbook will be filled. Take in mind this can take up to 24 hours. And we are finished.

There is a short URL to go to the reports: https://aka.ms/wufbreports

Extra documentation

• Prerequisites
• How to use the workbook