More Granularity In Update Postponement
Currently the only options when selecting to "Postpone" updates on Window is "Critical" and "Non-critical".
With this in place, Microsoft Defender Definition updates are getting marked as "Non-critical" and therefore stop any ability to actual have "Non-critical" updates be postponed without making devices less secure.
Allow more granularity in which specific types of updates we can postpone with different timelines, e.g. put in line with the options in OS Patch Management:
Critical updates
Security Updates
- Security updates
- Definition updates
- Update rollups
Service Packs
- Service pack updates
- Feature packs
- Updates
Drives and tools
- Hardware driver updates
- Office updates
- Tool updates
Adam Nayler
shared this idea
-
Jazz Oberoi
commented
This will make the Patch Management Auto-Approval settings very useful.
Right now the critical updates category dosent contain any updates for Windows 11 and the non-critical category contains every single update under the sun! -
Paul Heywood
commented
OS Patch Approval settings should be at the same level of granularity as OS Patch Management, i.e., provide the ability to set postponement for Security Updates, Definition Updates, Update Rollups, etc. independently rather than just at the Critical vs Noncritical levels.