The patch pane will display a list of all OS patches that are applicable to the device you are viewing, along with whether each patch is present and how long ago each patch was released. Note that this information is collected without an agent and will work even if you don’t use Intune for patching your devices. No setup is required outside of a connection to your Intune tenant. We make periodic callbacks to our own servers to fetch the full list of patches that exist for each device’s OS/feature edition combination for comparison against those on the device. If you see a patch status of “unknown” for all devices, it is likely because this connection is blocked.