After verifying the prerequisites are met, you can start to set up Windows Update for Business reports. The two main steps for setting up Windows Update for Business reports are:
Windows Update for Business reports is a Windows service hosted in Azure that uses Windows diagnostic data. You should be aware that Windows Update for Business reports doesn't meet US Government community compliance (GCC) requirements. For a list of GCC offerings for Microsoft products and services, see the Microsoft Trust Center. Windows Update for Business reports is available in the Azure Commercial cloud, but not available for GCC High or United States Department of Defense customers.
Add Windows Update for Business reports to your Azure subscription
Before you configure clients to send data, you need to add Windows Update for Business reports to your Azure subscription so the data can be received. First, you select or create a new Log Analytics workspace to use. Second, you enroll Windows Update for Business reports to the workspace.
Select or create a new Log Analytics workspace for Windows Update for Business reports
Windows Update for Business reports uses an Azure Log Analytics workspaces that you own for storing the client diagnostic data. Identify an existing workspace or create a new one using the following steps:
Although an Azure subscription is required, you won't be charged for ingestion of Windows Update for Business reports data.
In the Azure portal, type Log Analytics in the search bar. As you begin typing, the list filters based on your input.
Select Log Analytics workspaces.
If you already have a Log Analytics workspace, determine which Log Analytics workspace you'd like to use for Windows Update for Business reports. Ensure the workspace is in a Compatible Log Analytics region from the table listed in the prerequisites.
Azure Update Management users should use the same workspace for Windows Update for Business reports.
You can only map one tenant to one Log Analytics workspace. Mapping one tenant to multiple workspaces isn't supported.
If you change the Log Analytics workspace for Windows Update for Business reports, stale data will be displayed for about 24 hours until the new workspace is fully onboarded. You will also need to reconfigure the Windows Update for Business reports settings to enroll again.
Enroll into Windows Update for Business reports
Enroll into Windows Update for Business reports by configuring its settings through either the Azure Workbook or from the Microsoft 365 admin center. Use one of the following methods to enroll into Windows Update for Business reports:
Enroll through the Azure Workbook (recommended method)
In the Azure portal, select Monitor > Workbooks from the menu bar.
You can also type Monitor in the search bar. As you begin typing, the list filters based on your input.
When the gallery opens, select the Windows Update for Business reports workbook. If needed, you can filter workbooks by name in the gallery.
Select the Get started button when prompted by the workbook to open the Windows Update for Business reports enrollment flyout.
In the flyout, specify which Subscription and Azure Log Analytics Workspace you want to use for Windows Update for Business reports.
If you need to create a new Log Analytics workspace, select Create new workspace and follow the prompts to create a new workspace.
Select Save settings to save the settings and enroll into Windows Update for Business reports.
Tip
If a 403 Forbidden error occurs, verify the account you're using has permissions to enroll into Windows Update for Business reports.
The initial setup can take up to 24 hours. During this time, the workbook will display that it's Waiting for Windows Update for Business reports data.
Enrolling into Windows Update for Business reports doesn't influence the rate that required data is uploaded from devices. Device connectivity to the internet and how active the device is influences how long it takes before the device appears in reporting. Devices that are active and connected to the internet daily can expect to be fully uploaded within one week (usually less than 72 hours). Devices that are less active can take up to two weeks before data is fully available.
In the Software Updates page, select the Windows tab.
When you select the Windows tab for the first time, you'll be asked to Configure Settings. This tab is populated by data from Windows Update for Business reports. Verify or supply the following information about the settings for Windows Update for Business reports:
The Azure subscription
The Log Analytics workspace
The initial setup can take up to 24 hours. During this time, the Windows tab will display that it's Waiting for Windows Update for Business reports data.
Enrolling into Windows Update for Business reports doesn't influence the rate that required data is uploaded from devices. Device connectivity to the internet and how active the device is influences how long it will take before the device appears in reporting. Devices that are active and connected to the internet daily can expect to be fully uploaded within one week (usually less than 72 hours). Devices that are less active can take up to two weeks before data is fully available.
After the initial setup is complete, the Windows tab will display your Windows Update for Business reports data in the charts.
Note
The device counts in the Windows tab may vary from the Microsoft 365 Apps tab since their requirements are different.
Next steps
Once you've added Windows Update for Business reports to a workspace in your Azure subscription and configured the settings through the Microsoft 365 admin center, you'll need to configure any devices you want to monitor. Enroll devices into Windows Update for Business reports using any of the following methods:
Plan and execute an endpoint deployment strategy, using essential elements of modern management, co-management approaches, and Microsoft Intune integration.