| title | ms.author | author | manager | audience | ms.topic | ms.service | ms.localizationpriority | ms.collection | recommendations | description | ms.date |
|---|---|---|---|---|---|---|---|---|---|---|---|
Overview of the security update status report in the Microsoft 365 Apps admin center |
nwhite |
nicholasswhite |
dougeby |
ITPro |
conceptual |
o365-proplus-itpro |
medium |
Tier1 |
false |
Guidance for Office admins on how to use the security update status feature in the Microsoft 365 Apps admin center. |
04/24/2024 |
The Security Update Status page in the Microsoft 365 Apps admin center offers insights into the security updates for Microsoft 365 Apps across devices. It helps administrators understand and maintain the security posture of their devices by tracking the installation of the latest security updates. This feature is essential for ensuring a secure and protected environment for Microsoft 365 Apps users.
[!INCLUDE Roles requirements]
[!INCLUDE License requirements]
[!INCLUDE Version requirements]
[!INCLUDE Network requirements]
The admin center displays both the accumulated vulnerabilities and the count of devices lagging in updates. A device that wasn't updated misses at least one security patch, making it a potential risk. All channels receive security builds on the second Tuesday of every month, and for those using Monthly Enterprise Channel, this security build is incorporated as part of the new monthly version. Each installation version receives a monthly security update for the duration of its support.
To view the security update status for the devices in your inventory, follow these steps:
- Sign in to the Microsoft 365 Apps admin center with your admin account, and then go to Health > Security Update Status in the navigation pane.
- Complete the setup wizard if viewing security update status for the first time.
- Insights about active devices start to appear on the page within two hours.
The Update status on the Security Update Status page shows what percentage of your devices installed the most recent security update. The date of the most recent security update is listed at the top of the page for reference. For a list of security updates, see Release notes for Microsoft Office security updates.
Your devices in inventory are evaluated against the most recent security update, depending on the assigned update channel. Devices can be in one of the following three categories:
- Up to date - Installed the most recent security update.
- Not up to date - The most recent security update isn't installed.
- Unknown - Security update status couldn't be retrieved.
You can also drill down to view a list of all devices or a filtered view of the devices that aren't up to date.
In the security vulnerability details, each monthly security release is listed, meaning the device list displays devices from every channel.
The Goal insight helps track progress in updating devices with each security update. Setting a goal involves specifying the percentage of devices you want to update within a timeframe.
Setting a goal doesn't create any policies or changes to your devices. The goal is used only for your personal reporting on the Security Update Status page.
The Update status by channel insight shows the update status of devices based on their update channel. Admins should anticipate up to a week to ensure all devices are updated. Devices lagging by more than two security builds should be prioritized. The recommended method for updating devices is with a cloud update for automated cloud management.