Intune assignments for Intune Updates?

[ashearera]

Hi all, just wondering - we are an enterprise with many shared devices deployed via Intune.

There is not always someone logged into these devices and usage is heavily time of year dependent. There may be machines that don't get logged into for weeks, whereas others in the same room and same AAD groups etc. may be logged into by multiple users multiple times per day.

The recommendations I've read around PMPC updates is to assign them to the virtual "All Users" within Intune. Does this not mean that PMPC Intune Updates will only run on a PC when one of our users is logged into it?

Does it make more sense to scope the updates to device groups instead in this scenario?

[nithin]

Hi There,
 
The choice between device-based and user-based app, update deployments depends on the organization's requirements. For example, if an organization has KIOSK devices and device license SKUs, where users do not log in to the devices frequently, targeting all devices makes perfect sense.
 
Since you are using shared devices in the enterprise, I suggest targeting updates to "all devices," as this would apply the updates only where an older version is installed.
 
Please let me know if you have any questions.