I am new to Intune so I apologize in advanced. I am trying to play with the updates feature in Intune and would like to approve updates but not force them to be installed on a schedule. I see on the company portal, a user can check for updates but when I check, it says none are available. When I go onto the portal, I can see 12 need to be approved. However, when I go to approve and choose a deployment action, I only have "Do Not Install" and "Required Install". I see an option for "Available Install" but its greyed out. Why is this?

Hi,

Device/Machine based deployments (like this update), must be made a required install.  You do not have to set a deadline for install so the user won't be forced to install it on any timeline, but the machine will install it on the normally scheduled cycle for patch install.

User based deployments can be made "available" and install only when the user chooses to install from a Company Portal. 

Thanks.

First thank you for your reply.

Second, I think I follow what your saying but tell me if I'm right. The reason that "Available Install" is greyed out is because this update is required?

I went to every computer in one group and approved the updates one computer at a time. When I approved it, I only selected the group I was working in, set the approval to required install (since that was my only option) and set the deadline to none. However, I have had several users in my office who have been reporting that their computer has restarted without them doing so. They would come back from lunch and see their computer restarted. If I'm not setting a deadline, why are their computer restarting?

We've just deployed Intune company-wide and have over 1,000 updates that need to be approved and installed. Our game plan was to approve all updates but not set a deadline and then send out instructions to all of our users showing them how they could 'manually' install the updates on their schedule. We were going to give the users 2 weeks to manually install the updates and after the those 2 weeks, we would force any remaining updates out to the users but after my test in one group resulted in PC's restarted even with no deadline, I'm back to the drawing board.

There are 2 solutions that would work for us.

1) Suppress any restarts and restart timeouts, force all updates to install, and instruct users to restart before leaving for EOB. 

2) Approve all updates but they will not install until the user checks for updates in the Windows Intune Center allowing users to install/reboot on their own time.

Oh and is there a way I can approve all updates for a group? For example, I have a group called New York and it has all of our computer in New York. Can I approve all updates for New York group without having to go computer by computer?

Thanks in advanced!