I administer standalone Windows 11 Pro for Workstations on a military base. Because the systems are on isolated networks, I download and transfer monthly security updates through an approved process. The systems have been patched for more than a year, but I occasionally need to demonstrate that the updates were actually installed.
On Windows 10, the Update History page appeared to show a much longer record, including many Microsoft Office updates. On Windows 11 24H2, running OS build 26100.9168 from an approved source, the Settings history appears to show only about the last two months and mostly major security updates.
I have also tried `wmic qfe list brief`, PowerShell's `Get-HotFix`, and `Get-CimInstance -Class Win32_QuickFixEngineering`, but these either return only recent updates or produce an error. Is there a reliable way to retrieve and present the complete update history, including older and Office updates?
4 Answers
`Get-HotFix` and Win32_QuickFixEngineering are not complete records of everything Windows Update installs. They focus mainly on certain servicing packages, while cumulative updates replace older packages and Office updates may be tracked separately. For an audit, combine the Windows Update Agent history with installed-update or Office-specific records rather than relying on one command.
If the older history is no longer stored locally, you may not be able to reconstruct every past entry from the machine itself. For future months, run the history query immediately after each update cycle and save a dated export or screenshot. A rolling log gives you evidence even if Windows later cleans up its local history.
Try querying the Windows Update Agent history directly from PowerShell:
`(New-Object -ComObject 'Microsoft.Update.Session').QueryHistory('',0,50)`
Increase `50` if you need more entries. This may show update events that do not appear in `Get-HotFix` or the standard hotfix inventory. You can also export the results to a file for documentation.
The Settings app is still worth checking under Windows Update > Update history, but the displayed list can be shortened if Windows recreates or cleans up the SoftwareDistribution folder. If that folder was reset, the local Windows Update history may already be gone even though the updates remain installed.
I am not sure yet whether anything is resetting that folder, but I will check the update-maintenance process and local history.
That looks promising. I will test the command on one of the systems and see whether it goes back farther than the Settings page.