Article in-progress.
- Check for DEFERMENT in their Windows Update Policy. Partners need to know that deferment settings can be set via Windows Update Policy, Group Policy, or manually on the devices via Registry
- If deferment is set, any patch will effectively be invisible to any device for as long as it is in the deferment period. For example, if it is February 1st and there is 30 day deferment set for quality updates, a Patch that was released on Jan 15th won't show as available to the device (even locally) until February 15th.
- Check if the device is doing patch audits successfully at all
- Identify if the problem is truly that the patches aren't being found (see deferment above) or whether they are being found but not approved (check patch policy approval criteria and patch card to see if the patch shows as approved)