The process of generating insights and analytics on device compliance, app usage, and security configurations within Intune
Windows quality update distribution and alert data can be retrieved via Microsoft Graph using the Windows updates / Windows Autopatch and Intune reporting APIs.
For Windows Autopatch quality update reporting via API, use Microsoft Graph in one of these ways:
- Use Graph Explorer interactively
- Go to Graph Explorer: https://developer.microsoft.com/graph/graph-explorer
- Sign in with a Microsoft Entra account that has the required permissions.
- In Modify permissions, grant and consent to
WindowsUpdates.ReadWrite.All(or the minimum read permission required for your scenario). - Use the Windows updates admin endpoints (under
admin/windows/updates) to query deployments and device update state for Windows quality updates managed by Windows Autopatch. This gives per‑deployment reporting, monitoring, and troubleshooting data for quality updates.
- Use PowerShell for Windows quality update alert/summary reporting
The Microsoft Graph Beta PowerShell module exposes an action to get Windows quality update alert summary reports:
TheImport-Module Microsoft.Graph.Beta.Reports $body = @{ # Optional filters, grouping, etc. # Filter = "<OData filter>" # GroupBy = @("<column>") # OrderBy = @("<column>") # Select = @("<column1>", "<column2>") # Top = 100 } Get-MgBetaDeviceManagementReportWindowsQualityUpdateAlertSummaryReport -BodyParameter $bodyBODYPARAMETERobject supports:-
Filter– to filter the dataset -
GroupBy– to group results -
OrderBy– to sort -
Select– to choose columns -
Top,Skip– for paging -
Search,SessionId,Name– for additional control
-
- Use Windows Autopatch / WUfB reports for distribution monitoring Windows Autopatch integrates with Windows Update for Business reports to provide per‑deployment reporting, monitoring, and troubleshooting for Windows quality updates. Distribution status (for example, Not Ready devices) can be monitored there, and devices can be exported from the portal. Programmatic access is via the same Windows updates Graph APIs used above.
High‑level steps to build an automated distribution report pipeline:
- Ensure devices meet Windows Autopatch prerequisites and are managed by Autopatch.
- Use Microsoft Graph (REST or PowerShell) with the Windows updates and Intune reports endpoints:
- Query deployments and device states for Windows quality updates (Autopatch / WUfB reports).
- Optionally call
Get-MgBetaDeviceManagementReportWindowsQualityUpdateAlertSummaryReporton a schedule and store results in a data store (Log Analytics, SQL, etc.).
- Build dashboards or scheduled exports from the collected data.
References:
- Windows updates API overview
- Capabilities of Windows Autopatch
- Programmatic controls for expedited Windows quality updates
- Deploy an expedited quality update using Windows Autopatch
- Get-MgBetaDeviceManagementReportWindowsQualityUpdateAlertSummaryReport
- Windows quality and feature update reports overview
- Hotpatch for Windows quality updates