@Łukasz Świątkowski
Thanks for your posting on Q&A.
Would you mind sharing the Version of Security Intelligence Update for Microsoft Defender Antivirus - KB2667602 update installed on the devices first?
As far as I know, only the indeed Needed updates will be approved and downloaded after you enabled the automatic approval rule. If all the things going well, it seems that the other Security Intelligence Update for Microsoft Defender Antivirus updates aren't needed. Of course, we could try to approve the updates manually and check the windowsupdate.log on the client devices to check the information.
We could open PowerShell as an administrator and run the get-windowsupdatelog
to get the log file. Note that the log file will be placed into the Desktop by default.
Thanks for your time and have a great day.
Best regards,
Rita
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.