Skip to main content
Operating system & services

Windows Update Agent Health

Verify that the Windows Update agent is still installing updates and get alerted when the last installation is too old or automatic updates are disabled.

The Windows Update Agent Health check verifies that the Windows Update agent on a device is still installing updates. It evaluates when an update was last installed successfully and whether automatic updates are disabled by policy. It does not count pending updates; use the System Updates check for that (see System Updates). It runs only on Windows (x64 and ARM64), locally through the octoja agent, every 60 minutes by default. Linux and macOS are not supported.

Prerequisites

  • You need the Monitoring Check Management permission.
  • The agent runs as Local System; there is nothing to set up on the device.

Steps

  1. Go to Devices and open the device.
  2. Click the Checks tab → Add Check → Windows Update Agent Health.
  3. Adjust the thresholds and Alert if automatic updates are disabled if needed.
  4. Click Add Check.

To assign the check to many devices at once, use a config package.

Settings

FieldTypeRequiredDefaultDescription
Warning last-install age (days)IntegerNo30Warning when the last successful update installation is at least this many days ago.
Error last-install age (days)IntegerNo60Critical when the last successful update installation is at least this many days ago.
Alert if automatic updates are disabledBooleanNoYesWarning when the NoAutoUpdate policy disables automatic updates.

If the warning value is higher than the error value, the check swaps the two values before evaluating.

Results

SituationResult
Last successful installation at least Error last-install age (days) agoCritical
Last successful installation at least Warning last-install age (days) agoWarning
No successful installation entry in the update historyWarning (No install history)
Automatic updates disabled by policy and Alert if automatic updates are disabled onWarning
Update agent query failed or timed outFailure

If several rows apply, the worst status wins.

The result also shows Last search, the last successful search for updates. This value is displayed only and does not affect the status.

Notes

  • The check reads the update history and registry values. It does not start its own update search.
  • If an octoja patch policy has taken over automatic updates on the device, the check does not warn about disabled automatic updates for that reason.

See also: Set up alerts for a check