Windows Known Issues Affecting Our Builds
The question it answers: Which active Windows release-health known issues affect Windows versions running in the fleet?
Microsoft’s Windows release-health known issues (the ones behind update safeguard holds), matched to the Windows versions running in your fleet. An active issue on a version you run explains helpdesk calls after Patch Tuesday before anyone has to troubleshoot.
At a glance
Section titled “At a glance”| Where in the app | Intune › Endpoint Security & Readiness › Windows Known Issues |
| Workload | Intune |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | Windows Enterprise E3/E5 (or equivalent) for the Windows Update deployment service. |
| Report id (API and MCP) | intune.endpoint.windows-known-issues |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Issue | Title | Link |
| Status | Status | Status |
| Windows version | ProductName | Text |
| Our devices | FleetDevices | Text |
| Reported | StartDateTime | Date |
| Updated | LastUpdatedDateTime | Date |
| Resolved | ResolvedDateTime | Date |
| Id | Id | Text |
Filters
Section titled “Filters”| Filter | Key (API) | On when the page opens |
|---|---|---|
| Only active issues on versions we run | active-ours | Yes |
What it needs
Section titled “What it needs”Licence: Windows Enterprise E3/E5 (or equivalent) for the Windows Update deployment service.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
WindowsUpdates.Read.All | Microsoft Graph | Read all Windows update deployment settings | |
DeviceManagementManagedDevices.Read.All | Microsoft Graph | Read Microsoft Intune devices |
Data sources it reads
GET /beta/admin/windows/updates/catalog/entries (quality updates)GET /beta/admin/windows/updates/products/FindByCatalogId(catalogID='...')?$expand=knownIssues
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/intune.endpoint.windows-known-issues?size=100GET /ir-api/v1/reports/intune.endpoint.windows-known-issues?filter=active-oursAn AI assistant reads it with the MCP tool get_report and the id intune.endpoint.windows-known-issues. The client needs the Read grant for Intune. See Using the API.