windows-itpro-docs/windows/deployment/update/update-compliance-v2-overview.md
Meghan Stewart 7447942744 edits
2022-08-18 09:33:51 -07:00

5.6 KiB

title, ms.reviewer, manager, description, ms.prod, author, ms.author, ms.collection, ms.topic, ms.date
title ms.reviewer manager description ms.prod author ms.author ms.collection ms.topic ms.date
Update Compliance overview dougeby Overview of Update Compliance to explain what it's used for and the cloud services it relies on. w10 mestew mstewart M365-analytics article 08/09/2022

Update Compliance overview

(Applies to: Windows 11 & Windows 10)

Important

  • As of August 17, 2022, a new step needs to be taken to ensure access to the preview version of Update Compliance and the CommercialID is no longer required. For more information, see Configure Update Compliance settings through the Microsoft 365 admin center.
  • This information relates to a preview feature that's available for early testing and use in a production environment. This feature is fully supported but it's still in active development and may receive substantial changes until it becomes generally available.

Update Compliance is a cloud-based solution that provides information about the compliance of your Azure Active Directory-joined devices with Windows updates. Update Compliance is offered through the Azure portal, and it's included as part of the Windows 10 or Windows 11 prerequisite licenses. Update Compliance helps you:

  • Monitor security, quality, and feature updates for Windows 11 and Windows 10 devices
  • Report on devices with update compliance issues
  • Analyze and display your data in multiple ways

Preview information for Update Compliance

The new version of Update Compliance is in preview. Some of the benefits of this new version include:

Currently, the preview contains the following features:

Currently, these new tables are available to all Updates Compliance users. They will be displayed along with the original Updates Compliance tables.

:::image type="content" source="media/update-compliance-v2-query-table.png" alt-text="Screenshot of using a custom Kusto (KQL) query on Update Compliance data in Log Analytics." lightbox="media/update-compliance-v2-query-table.png":::

Limitations

Update Compliance is a Windows service hosted in Azure that uses Windows diagnostic data. You should be aware that Update Compliance doesn't meet US Government community compliance (GCC) requirements. For a list of GCC offerings for Microsoft products and services, see the Microsoft Trust Center. Update Compliance is available in the Azure Commercial cloud, but not available for GCC High or United States Department of Defense customers.

How Update Compliance works

You'll set up Update Compliance by enrolling into the solution from the Azure portal. Then you'll configure your Azure AD-joined devices to send Windows client diagnostic data to the solution. Update Compliance uses Log Analytics in Azure Monitor to store the diagnostic data the clients send. You can use this data for reporting on updates for your devices. Update Compliance collects system data such as:

  • Update deployment progress
  • Delivery Optimization usage data
  • Windows Update for Business configuration data

The Azure Log Analytics ingestion and retention charges aren't incurred on your Azure subscription for Update Compliance data. You also choose an Azure Log Analytics workspaces that you own for your client diagnostic data. The collected diagnostic data populates the Update Compliance tables so you can easily query your data.

Use your Update Compliance data

Since the data from your clients is stored in a Log Analytics workspace, you can go beyond the standard reports to analyze and display your data in multiple ways. Some of the ways you could display your data include:

Next steps