Windows updates

[TwistedHelixis]

On 02/04/2026 at 11:23, ultraspy2000 said:

Just like few others have mentioned Action1 is very good option.  

Unified Cross-Platform Patch Management | Action1

 

This, its far simpler than domain group policies, can be used to deploy updates, software and scripts and is completely free for 200 devices.

[mdrabble]

Another +1 for action 1

 

alredy use for intune updates and software deployments, looking to include domain devices - installing across my estate to get an idea of how many agents would need to purchase.

Edited April 4 by mdrabble

[Ditto]

One old link, one very new:

 

 

https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/07/kb5121772-one-restart-a-month-for-windows-updates

https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/windows-update-is-now-carbon-aware

 

Our MSP is still running are claiming weekly patches (requiring reboots), but I'm not sure.

 

Both MS approaches make good sense to me.

 

[Ditto]

Literally right after I posted this our MSP reply was 'not eay to setup', 'require custom policies', 'go against their current uniform systems across all clients', 'could cause issues down the line' - not very 'green'!

[jmak]

Microsoft's own guidance is now that security updates should be installed within three days, so weekly sounds better than monthly.

[Ditto]

Well that's interesting! The article I quoted is dated August 14, 2026.

I think it is fair to point out it does acknowledge:

 

Updates that still install right away

To keep your device protected, some updates are not held for the monthly restart and are installed as soon as they are available. These include:

• Microsoft Defender security intelligence updates
• AI component updates
• Critical or expedited driver updates
• Emergency and out-of-band updates, including fixes released outside the normal monthly schedule

Many updates also install without any restart at all, so you will not notice them.

Edited September 9 by Ditto