Because Update Compliance was retired on March 31, 2023, the service was removed. Update Compliance has been replaced by Windows Update for Business reports. Support for Update Compliance ended on March 31, 2023.
Windows Update for Business reports is a cloud-based solution that provides information about your Azure Active Directory-joined devices’ compliance with Windows updates. It is offered through the Azure portal and included as part of the Windows 10 or Windows 11 prerequisite licenses.
In this blog post, I will show you how to set up and use Windows Update for Business reports to monitor security, quality, driver, and feature updates for your Windows 11 and Windows 10 devices.
Prerequisites Windows Update for Business reports
Before you can use Windows Update for Business reports, you need to meet the following prerequisites:
- Azure subscription. ( It is possible to use a free version because we are not charged for the data ingestion)
- Log Analytics workspace in a compatible region.
- Enroll in Windows Update for Business reports using the Azure Workbook or the Microsoft 365 admin center.
- Configure your Azure AD-joined devices to send Windows client diagnostic data to Windows Update for Business reports. You can do this using a script, Microsoft Intune, or manually.
Enable Windows Update for Business reports
There are 2 ways to enable the Windows Update for Business report via the Azure workbook and the Microsoft 365 Admin Center. First step is to create an Log Analytics workspace
create an Log Analytics workspace
Windows Update for Business reports needs an Log analytics workspace to push the data in. To create this we have to logon on the Azure portal and search for Log analytics workspaces and click it
Click on + Create Fill in Subscription, resource group and a name where we like to use the full name of logs where they are going to be used for windowsupdatebusinessreports
Microsoft 365 Admin Center
One way to enable it is via the Microsoft 365 Admin Center, but it can also be enabled via the Azure portal as a gallery item. The first step is to create a Log Analytics workspace or check if it is already available.
To do this follow the following Steps, next we can enable the Windows Update Business reports
Go to the Admin portal | Health | Software Updates under Windows we can configure settings.
Click on Configure settings
The following popup will appear
Fill in the Subscription and Log Analytics workspace (windowsupdatebusinessreports) and click Save Settings
Azure Workbook
Go to the Azure portal | Monitor | Workbooks now the Gallery opens click on Windows Update for Business reports
Click on Get started
Select the right subscription and Log Analytics workspace (windowsupdatebusinessreports)
Click on Save settings, Click Save
Onboard devices
Here we have to create a settings catalog policy to onboard the devices with the right telemetry settings.
Go to the Intune portal and create a new settings catalog policy, give it a name, and click Next.
Add the following items:
- Allow Telemetry
- Configure Telemetry Opt In Settings Ux (to disable the ability for a user to override the diagnostics data level)
- Allow device name to be sent in Windows diagnostic data(important to have the data of the device name onboarded)
- Configure Telemetry Opt In Change Notification
Below are the settings which are needed to be set.
After the devices have opted into the Environment, the data in the workbook will be filled. Take in mind this can take up to 24 hours. And we are finished.
There is a short URL to go to the reports: https://aka.ms/wufbreports
Extra documentation
- Prerequisites
- How to use the workbook
[…] Enable Windows Update for Business reports […]
[…] telemetry the minimal value required is needed, if you already enabled (I hope so) the Windows Update for Business reports the right telemetry setting is already in place, otherwise we have to create a policy which can be […]
[…] had had a new device enrollment with Windows 11 somewhere in the same year. After a while, WufB reporting showed the devices were missing security updates. Only after trying to update it manually, for our […]