Question

A critical zero-day vulnerability has been disclosed, and Microsoft has released an out-of-band quality update to address it. Your organization uses Intune update rings with a 7-day quality update deferral. Leadership demands the fix be installed on all Windows 11 devices as quickly as possible, forcing a restart if needed, without permanently changing the existing deferral settings for future updates. What should you do?

Accepted Answer

Create and assign an Expedite quality updates policy in Intune specifying the target update release and a restart grace period.

Answer

Edit the existing update ring and set the quality update deferral to 0 days.

Answer

Create a Feature update deployment policy targeting the latest Windows 11 version.

Answer

Use a Delivery Optimization policy to increase peer download bandwidth so the update installs faster.