Update management

It is time to manage the system updates to ensure all computers are kept up-to-date with security and bug fixes for the Microsoft software and operating systems. We can approve updates on an individual basis, as well as enabling automatic approval of certain types, such as security and critical updates. We need to break this down into three stages:

• Selecting products and classification of updates to manage

• Configuring automatic approval of updates

• Manually approving updates

There is a fourth step to update management which is the deployment of non-Microsoft updates. This uses the software distribution mechanism that is discussed in the next chapter and will be covered there rather than here.

Selecting products and classification of updates to manage

The first stage with Windows Intune is to choose the products to manage and then the classifications of updates against those products. Since we are managing updates for the computers rather than the users checking themselves with...