Apply Critical Update with Intune or Defender for Endpoint

Question

Hi All,

I'm looking for the best way to push only critical updates (not an entire feature or quality update) to endpoints running within my environment. I am currently using Intune and Defender for Endpoint so I was hoping that is is some functionality within either of those to assist with this to avoid having to purchase a separate patch management solution. Any information would be greatly appreciated.

Answer 1

only critical updates

There's no such concept as this and there never has been for Windows 10 or 11. We simply don't and never have made individual updates available (expect for zero-day scenarios) for Win 10 or 11. The cumulative update model ensures a common testing and run-time environment for all software and organizations significantly reducing the number of possible permutations that customers, vendors, and we need to account for. This is completely unrelated to Intune or Defender, it is Windows specific.