Duration of connectivity can block updates to Windows devices and put them at risk

Ever wondered why there is always a backlog of Windows updates on your PC. Microsoft claims the successful installation of updates and new features depend on the amount of time a device is connected to the Internet. “Devices that don’t meet a certain amount of connected time are very unlikely to successfully update,” David Guyer, principal program manager at Microsoft said in a blog post.  

According to Guyer, Windows devices need to be connected for at least two hours and six total hours continuously after an update is released so it can be successfully downloaded and installed in the background.  

To identify devices that do not meet the minimum connectivity requirements, Microsoft has created an Update Connectivity measurement. Microsoft believes the measurement is crucial and can help organisations identify devices that are not connected long enough for an update. It would also help them evaluate devices that pose a security risk to the company’s network. Many of the updates include security fixes and patches for recently detected vulnerabilities. Delay in installing security updates not only puts the device in question at risk but also the company. Failure to update the vulnerable software on time has led to several cyberattacks.  

According to Microsoft, the Update Connectivity measurement revealed that approximately 50% of devices that are not on a serviced build of Windows 10 do not meet the minimum Update Connectivity measurement. Also, 25% of Windows 10 devices that are on a serviced build but have received security updates that are more than 60 days out of date have less than the minimum Update Connectivity. 

Though reminding users to regularly update is important, often devices go into hibernation and deep sleep by default when they are not being used, which can also disrupt updates.  

This can be addressed with power management. Some power settings and related policies put a device into a deep sleep or hibernation too quickly, which can prevent updates from occurring outside active hours. Microsoft suggests that users can address this using Optimizing Windows Update Adoption. “This tool provides recommended power settings that are a good balance of power savings while also enabling devices to keep up to date with the latest security updates,” adds Guyer.  

Information on devices with insufficient Update Connectivity can be found in Microsoft Intune. It can also be accessed in Devices > Monitor > Feature update failures or Windows Expedited update failures report.