Runbook 04 · 23 scenarios
Windows Update
Update rings, feature, quality, driver, restart and reporting failures.
The “start here” text identifies the first control plane and evidence to inspect. It does not replace change approval, safeguarding requirements, backup or a tested rollback route.
Device does not receive an update ring
Start hereCheck device-group assignment, exclusions and filters.
Intune / Windows UpdateMultiple update rings target the same device
Start hereConsolidate conflicting deadline, deferral and restart settings.
Intune / Windows UpdateOld WSUS or Group Policy overrides cloud management
Start hereIdentify and remove unintended legacy scan-source settings.
Intune / Windows UpdateFeature update is not offered
Start hereCheck target version, safeguard holds, eligibility and required services.
Intune / Windows UpdateFeature-update policy targets an older Windows release
Start hereCorrect the target release and deployment population.
Intune / Windows UpdateMicrosoft Account Sign-in Assistant is disabled
Start hereRestore the wlidsvc service before rechecking feature-update offers.
Intune / Windows UpdateQuality update remains pending
Start hereCheck scan status, active hours, deadline and pending restart.
Intune / Windows UpdateExpedited quality update does not apply
Start hereCheck supported OS, licence, update-health prerequisites and assignment.
Intune / Windows UpdateDriver update is not offered
Start hereCheck approval state, applicability and driver policy.
Intune / Windows UpdateHotpatch policy does not apply
Start hereConfirm edition, servicing channel and hotpatch eligibility.
Intune / Windows UpdateUpdate download fails
Start hereCheck Delivery Optimisation, proxy, firewall, bandwidth and free space.
Intune / Windows UpdateInstallation fails because the system drive is full
Start hereFree space with a controlled remediation before retrying.
Intune / Windows UpdateUpdate repeatedly rolls back
Start hereReview SetupDiag results, drivers and application compatibility.
Intune / Windows UpdateDevice continually asks for a restart
Start hereIdentify pending servicing work and the configured deadline.
Intune / Windows UpdateRestart occurs during lessons
Start hereCorrect active hours, deadline and restart-notification policy.
Intune / Windows UpdateUpdate is paused unexpectedly
Start hereCheck ring pause state, who paused it and the expiry date.
Intune / Windows UpdateDevice uses an unsupported Windows edition
Start hereConfirm Education, Pro Education, Pro or Enterprise eligibility.
Intune / Windows UpdateWindows Update services are disabled
Start hereUse approved policy or remediation to restore required services.
Intune / Windows UpdateUpdate report contains no data
Start hereCheck diagnostic-data prerequisites, update health and recent check-in.
Intune / Windows UpdateDevices update too quickly without pilot testing
Start hereCreate test, early-adopter and broad deployment rings.
Intune / Windows UpdateFeature update breaks an essential school application
Start herePause expansion, validate rollback and contact the supplier.
Change control / supplierFirmware or BIOS update fails
Start hereCheck power, BitLocker precautions and manufacturer tooling.
Device / OEMAutopatch and manual update policies conflict
Start hereEstablish one clear update-management authority.
Intune / Windows Update