Microsoft 365 Endpoint Administrator Associate – Week 4 Study Notes

Continuing our weekly study series, here are the Week 4 study notes for the Microsoft 365 Endpoint Administrator Associate certification. This week focuses on enhancing your Windows update management skills.

You Should Know:

1. Windows Update for Business (WUfB):

• WUfB allows organizations to manage the update process for devices running Windows 10 and later. It provides control over when and how updates are applied.
• Command to check update status:

  Get-WindowsUpdateLog
  

• Command to force an update check:

  usoclient StartScan
  

2. Feature Update Deferrals:

• Deferring feature updates allows organizations to delay the installation of major updates until they have been tested and approved.
• Command to set deferral period:

  Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "DeferFeatureUpdatesPeriodInDays" -Value 60
  

3. Patch Management:

• Effective patch management ensures that all systems are up-to-date with the latest security patches and updates.
• Command to list installed updates:

  Get-HotFix
  

• Command to uninstall an update:

  wusa /uninstall /kb:1234567 /quiet
  

4. Automation with PowerShell:

• Automating update processes can save time and reduce errors.
• Script to automate update installation:

  $Session = New-Object -ComObject Microsoft.Update.Session
  $Searcher = $Session.CreateUpdateSearcher()
  $SearchResult = $Searcher.Search("IsInstalled=0")
  $UpdatesToInstall = New-Object -ComObject Microsoft.Update.UpdateColl
  foreach ($Update in $SearchResult.Updates) {
  $UpdatesToInstall.Add($Update) | Out-Null
  }
  $Installer = $Session.CreateUpdateInstaller()
  $Installer.Updates = $UpdatesToInstall
  $InstallationResult = $Installer.Install()
  

5. Cloud Integration:

• Integrating Windows updates with cloud services like Microsoft 365 can streamline the update process.
• Command to sync updates with Microsoft 365:

  Sync-WindowsUpdate
  

What Undercode Say:

Effective management of Windows updates is crucial for maintaining the security and performance of your IT infrastructure. Utilizing tools like Windows Update for Business, PowerShell automation, and cloud integration can significantly enhance your update management processes. Always ensure that your systems are up-to-date with the latest patches and updates to protect against vulnerabilities.

Expected Output:

• Windows Update Status: Checked and verified.
• Feature Updates: Deferred for 60 days.
• Patch Management: Installed updates listed and unnecessary updates uninstalled.
• Automation Script: Executed successfully.
• Cloud Integration: Synced with Microsoft 365.

By following these steps and utilizing the provided commands, you can ensure a robust and efficient Windows update management process in your organization.

References:

Reported By: Ahmad Azhar – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram