@Eccup Reservoir, Thanks for posting in Q&A. From Intune side, we can manage windows update via Update rings for Windows 10 and later, Feature updates policy, Quality updates policy and Driver updates policy. Here are a link with more details:
For windows update ring policy, Intune only define an update strategy. You still need to use your existing update solution such as Windows Update or WSUS to obtain the actual updates. I Noice the devices not always online. If the device is accessible in their domain, you can consider using WSUS as windows solution I think
Tio understand more about WSUS, you can contact WSUS support to get more help.
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.