Intune Expedited Updates for Critical Security Patches: A Guide for IT Admins

Explore Our Microsoft Intune Training →

When to Use Expedite Updates
Intune’s Expedite Update feature allows you to quickly deploy updates that require immediate attention. Unlike standard update rings, expedited updates override deferral settings on target devices and should only be used for critical security patches.

Creating an Expedited Update Deployment in Intune
1. Navigate to the Intune console, select Device Configuration, then Templates.
2. Click Create a new policy, choose Windows 10 and later (Monthly Channel), and select Update Rings from the list of available settings.
3. Under Update rings, choose Expedited updates.

Assigning the Expedited Update Policy to Device Groups
1. Navigate to Intune, select Devices, and click on the relevant device group.
2. Click Configurations and then Profiles.
3. Click Add, choose the expedited update policy you created earlier, and click Add profile.

Monitoring Expedited Update Installation Progress
1. In the Intune console, go to Reports, then Update reports.
2. Select the relevant update report and monitor the installation progress of your expedited updates.

Best Practices for Emergency Patch Response Using Intune
1. Create an expedited update policy in Intune for critical CVE patches.
2. Assign this policy to all device groups.
3. Monitor installation status in update reports.
4. Document the emergency patch process for future incidents.

Explore Our Microsoft Intune Training →