IT ISSUE · SECURITY AND THREATS
Device missing security updates
Some devices fail to update. More often they were never enrolled in the thing that updates them.Some devices fail to update. More often the device isn't failing at all, because it was never enrolled in the thing that updates it. A laptop bought in a hurry, a machine brought from home, a replacement collected from a shop on a Friday: each one works perfectly and none of them appear in anything that reports on them.
What you may notice
- A device shows updates pending for months.
- Restarts are deferred indefinitely.
- The device doesn't appear in any reporting you have seen.
- It was bought or replaced outside the usual arrangement.
- Endpoint protection shows it as unknown rather than unhealthy.
Enrolled, then updated, in that order
We check whether the device is enrolled and managed in the first place, then its update state, its storage, its restart history and the applicable policy.
Please tell us about a machine you bought yourself. A clean report that covers nine devices out of ten is more dangerous than an honest report that names the tenth, because the first one lets everybody stop looking. We'd rather know about the laptop in the corner than certify an estate that doesn't include it.