Forum Discussion
Problem running the Windows Feature Update Device Readiness Intune Report
I have a custom Intune role for our support staff. I want them to be able to run the Feature Update Device Readiness report. When they click on the Select target OS link, it shows "No data to display", instead of the OS list. They are able to click on Select scope tag and see a list of scope tags.
Is there a permission they need that I'm missing? Here is what I have assigned for the custom role.
| Audit data | Read |
| Corporate device identifiers | Create Delete Read Update |
| Device compliance policies | Read View Reports |
| Device Configurations | Read View Reports |
| Endpoint Analytics | Read |
| Endpoint protection reports | Read |
| Enrollment programs | Create device Delete device Read device Sync device Assign Profile Read Profile |
| Managed apps | Read |
| Managed devices | Delete Read Set Primary user Update View reports |
| Organizations | Read |
| Remote tasks | Clean PC Collect diagnostics Enable Windows IntuneAgent Get Filevault key Manage shared device users Reboot now Reset passcode Retire Set device name Sync devices Wipe |
| Roles | Read |
Robbie5599MEB2004, Did either of you manage to get this working? I've got all pre-requisites in place, and a feature update ring that's not applying (all devices stuck on Windows 11 23H2).
TimHaywardMy Feature Updates are working fine. My issue is with the Readiness report. Make sure you have the Feature update deferral period (days) set to 0 in your Update Ring.
I'm getting the exact same issue. Currently got a case raised with MS Tech support. An initial screensharing session said I had everything configured correctly but he couldn't fix it so it's been escalated to the next team....
Did you manage to find a solution or an alternative method of gathering the information?Robbie5599Glad to hear that I am not the only one with this issue. I still do not have a solution or workaround for our support staff to view this on their own. I have exported the report to Excel and shared it with support team for now. Please share if MS finds a solution.
We managed to fix it by also applying a Intune Config Profile to enable the following settings:
This allows Windows to send the data required to Intune so it can populate the report. Please note I have subsequently found out that the Windows update readiness report DOES NOT inspect hardware. It only looks at software and driver compatibility. EG I have a device that DOES NOT have a TPM module but is presented as low risk. See Microsoft's response below:
How Intune Evaluates Device Readiness:
The Device Readiness Report assesses a device’s compatibility for a Windows Feature Update based on:
• Application Compatibility – Checks if installed apps may cause issues after the update.
• Driver Compatibility – Identifies potential conflicts with existing drivers.
• Other Relevant Software – Evaluates additional software components that may affect update success.
It assigns a risk score based on these factors to help determine whether the device is likely to experience update-related issues.
Limitations: Hardware Compatibility:
While Intune provides hardware details in the device properties section, it does not evaluate hardware readiness based on the manufacturer or system requirements. To check hardware compatibility, you will need to:
1. Review the device’s hardware specifications (e.g., processor, RAM, TPM, Secure Boot, etc.).
2. Compare these specifications with the minimum system requirements for the target Windows version.
This manual check ensures that the device meets the necessary prerequisites before attempting an update.
