Microsoft · Windows Autopatch

Update journey

From status counts to an end-to-end update journey.

A 94% success rate hid where the remaining 6% failed or stalled. I identified this gap and designed a flow visualization to make complex update data easier to understand, with four levels of drill-down from the entire fleet to an individual device timeline and actions at each level. The concept began as a hackathon project, became a roadmap priority, was presented at Microsoft Ignite 2025, and shipped in 2026.

Update journey flow showing devices moving through update stages from not started to completed.
The flow makes attrition visible, with each branch opening the devices behind it.

At a glance

Role
Lead / solo designer: concept through shipped experience
Platform
Microsoft Intune admin center
Focus
Data visualization · Update reporting
Milestones
Ignite 2025 · GA 2026
Public reference
Microsoft announcement

Context

IT admins update many devices at once. Each update follows a path: the server makes it available, the device downloads and installs it, it takes effect after a restart, and the device reports its status. Problems can occur at any step, and each may need a different fix.

Problem

Update failures were hard to diagnose.

Existing reports reduced update progress to a few status counts. They didn't help IT admins understand where devices stalled, what caused the stall, or what action to take.

Update status for the entire fleet and per device.
Update status for the entire fleet and per device.

Approach

  • Understand the users: Learn their mental models and jobs to be done.
  • Understand the data: Map its complexity and constraints.
  • Identify the gap: Find what's missing or not working in the current experience.
  • Design the information model: Choose a visualization that turns data into actionable insights.

Understand the users

Conversations with IT admins revealed a shared mental model: start with overall update progress, then narrow down to where devices stall or fail, and investigate why.

Their jobs to be done were to:

  • track progress across stages,
  • identify what needs attention,
  • act on affected devices,
  • and compare deployments.

Understand the data

Telemetry was split across service status, client status, and final outcome, and availability varied by stage. I worked with Engineering to understand the data.

  • The complexity: The underlying update state model with all the states and transitions.
  • The constraints: Which telemetry was available and when.

Redrawn from the published Windows Update for Business reports schema.

  • Data complexity: 28 unjoined service and client states, including duplicate on-hold and canceled branches.
  • Data constraints: states become knowable at different points, with some arriving 24-36 hours later or not at all.

Identify the gap

The existing report showed fleet-wide and individual-device data, but not how issues developed between them. Without that context, IT admins struggled to identify root causes and take action.

To address this, we needed to answer three questions: Where did the issue occur? When did it happen? What should IT admins do next?

  • Where: Deeper analysis required more granular data. IT admins needed progressively more detailed views to pinpoint where issues occurred.
  • When: Time was missing from the flow. We needed a way to show how updates progressed over time, not just the final status.
  • What's next: The report should provide actionable insights. Actions needed to be taken at the right level and in the right scope.

Design the information model

Chose the right visualization: the Sankey diagram

I compared visualizations to find one that showed sequence and attrition while remaining readable as device counts changed.

Comparison of four visualization types.

I fixed the chart's total height so attrition was visible and every device remained accounted for.

Addressed concerns

Feedback surfaced several concerns about the Sankey diagram. I addressed them with the following design choices.

Concern Solution
Unfamiliar to many IT admins Put a plain-language summary above the chart
Screen readers cannot read it Provide an equivalent, navigable data-table view
Thin branches become unclickable Enforce minimum targets and group smaller branches under "Other"
Too many stages can make the chart hard to read Show actionable stages by default and move substates down one level
Color alone cannot carry meaning Pair every color with an icon and label

Designed a new information model

I designed a four-level information model around IT admins' shared mental model: fleet → update ring or policy → device group → device.

Each level adds detail, and selecting a flow segment opens a filtered, exportable device list. It supports their jobs to track progress, find where updates stall, compare deployments, and take action.

User mental model for device update management

Tested different explorations

I turned the reporting gap I had identified into a hackathon project. For the hackathon, I tested three ways to represent the available telemetry.

Exploration of a continuous update flow showing all stages and outcomes. Exploration grouping update states by the system that reports them. Exploration showing the update process as a staged pipeline.

Three explorations tested different ways to represent the available telemetry:

  • Continuous flow: clear, but implied joins the telemetry could not support.
  • By reporter: accurate to the data source, but lost sequence.
  • Staged pipeline: closest to the shipped structure.

Windows Update Journey

The key shift: from “what?” to “where?”, “why?”, and “what's next?”

From hackathon to shipped

Turned a POC into a roadmap priority

The proof of concept from the hackathon gained traction and was promoted onto the product roadmap with priority.

The core model carried through to the shipped design: one visualization that narrows from fleet to ring to device while retaining consistent stages, colors, and icons.

Designed around data constraints

The MVP could not join service status, client status, and final result. I split the continuous concept into three stage views, each based on available telemetry. This trade-off made it possible to ship within the available telemetry. Joining the data remained a follow-up opportunity.

The stage selector redraws the chart with fewer columns while keeping the same starting point and stage labels:

Update journey filtered to the server stage, showing devices moving from not started to scheduled or on hold. Update journey filtered to the client stage, showing devices moving from scheduled to download or install, on hold, or invalid. Update journey showing the full process from not started through server and client stages to final outcomes.
The same visualization supports three levels of detail: server stage, client stage, and the full process.

Created a fleet-to-device path

The shipped flow narrows across four increasingly granular levels, taking IT admins from a view of the entire fleet to the timeline of a single device:

Windows quality updates summary showing fleet trends and per-policy update status.
Level 1: Fleet. Select a policy to open its update journey.
Update journey for a selected policy and release, showing trends, stage counts, and device flow.
Level 2: Policy. Trends show rollout progress; the flow shows where devices stopped.
Device status report filtered to a selected update status and policy.
Level 3: Device group. Select a branch to open its filtered device list.
Update timeline for a single device, showing events, state changes, and timestamps.
Level 4: Individual device. The timeline shows events and state changes over time.

Outcome

What began as my hackathon initiative gained traction across the organization, became a prioritized feature that was presented at Microsoft Ignite 2025. Its reception validated both the problem I identified and the unfamiliar visualization I proposed to solve it.

In March 2026, Quality Update Journey reached general availability as one of the four pillars of Windows Autopatch update readiness, providing end-to-end, per-device visibility into where an update is and what is blocking it.

  • End-to-end visibility into each device's update journey
  • Clear, granular phases showing what completed, where a device is paused, and where issues occur
  • Trustworthy timelines with timestamps, state transitions, and mapped alerts.
  • Faster troubleshooting by spotting patterns and problem areas across devices.

"The award for the best screen in Intune goes to this page."

Lewis Barry · Microsoft MVP, Principal Security Architect

📢 Read Microsoft's announcement: Windows Autopatch update readiness brings insights to IT