Created by Claude - please verify

Windows Update compliance - patch level is compared with the newest revision in your own fleet, not with Microsoft's release calendar.

Required Microsoft Graph permissions

DeviceManagementConfiguration.Read.All DeviceManagementManagedDevices.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /v1.0/deviceManagement/deviceConfigurations · GET /v1.0/deviceManagement/deviceConfigurations/{id}/deviceStatusOverview · GET /v1.0/deviceManagement/managedDevices

Covers Windows Update for Business rings. Windows Autopatch, feature-update profiles and per-update (KB) reporting are not read here; Intune's own Windows Update reports go deeper.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Windows Update Compliance

Are the update rings set up so security updates actually land - no pause, a short deferral, an installation deadline - and which Windows devices are behind the rest of the fleet on their monthly patch?

There are no Windows Update rings and no managed Windows devices.