Contents

How to List Update Settings Across All Windows Devices

Using Kolide, you can easily view and query Windows Update Settings across your fleet.

Introduction

Windows Update has a variety of advanced options which can be configured to customize its behavior. This inventory details the configuration of the Windows Update feature, such as when it last scanned, what hours of the day Windows Update should run, and whether Updates should be paused.

What Windows Update Setting Data Can Kolide Collect?

Kolide's endpoint agent bundles in osquery to efficiently collect Windows Update Settings from Windows devices in your fleet. Once collected, Kolide will parse, clean up, and centrally store this data in Inventory for your team to view, query, or export via API.

Kolide meticulously documents every piece of data returned so you can understand the results.

Windows Update Settings Schema

Column	Type	Description
id	Primary Key	Unique identifier for the object
device_id	Foreign Key	Device associated with the entry
device_name	Text	Display name of the device associated with the entry
active_hours_end	Integer	The ending hour (in 0 - 24 format) of the device's Windows Update "Active Hours". These are the hours that Windows Update attempts to avoid disruptive actions like restarting the device.
active_hours_start	Integer	The starting hour (in 0 - 24 format) of the device's Windows Update "Active Hours". These are the hours that Windows Update attempts to avoid disruptive actions like restarting the device.
allow_metered_downloads	Boolean	`true` if Windows Updates are allowed to be downloaded over metered connections; otherwise `false`.
download_other_ms_updates	Boolean	`true` if Windows Updates is configured to download updates for other Microsoft Products; otherwise `false`.
pause_ends_at	Timestamp	The starting time when the Windows Update pause will end. This value is `NULL` when Windows Update is not paused.
pause_started_at	Timestamp	The starting time when the Windows Update pause was initiated. This value is `NULL` when Windows Update is not paused.
restart_asap	Boolean	`true` if Windows update is configured to restart the device right away after critical updates are installed; otherwise `false`.
show_notification_before_restarting	Boolean	`true` if Windows Updates is configured to show a "toast" notification before automatically restarting the device after installing an important update; otherwise `false`.
status	Enum::Text	The status of the automatic updates in Windows Update. Can be one of the following: `active` `paused` `unknown`
collected_at	Timestamp	Time the row of data was first collected in the database
updated_at	Timestamp	Time the row of data was last changed in the database

Why Should I Collect Windows Update Settings?

Information about the configuration of Windows Update can be used by an administrator to verify a device is able to properly set to receive updates and install them when available, as well as troubleshoot devices which are not running the latest version of Windows.

End-User Privacy Consideration

Kolide practices Honest Security. We believe that data should be collected from end-user devices transparently and with privacy in mind.

No personally identifiable or sensitive data is collected or transmitted as part of this Inventory.

When you use Kolide to list Windows Update Setting data from end-user devices, Kolide gives the people using those devices insight into exactly what data is collected, the privacy implications, and who on the IT team can see the data. This all happens in our end-user privacy center which can be accessed directly by employees.