Could I configure a policy to check for operation system versions?
This applies to all operating systems: Windows, macOS, and Linux. Some customizations may be only available for Windows clients only.
Under Policies, Administrators can set requirements for managed devices and what operating system versions the devices have installed.
To manage this, navigate to Policies > Laptops/Desktops > Device Compliance > Operating System.
In this section, Administrators can enable Device is not running an approved operating system version. From there, release versions can be listed as approved.
Further customization is available. By selecting the '+' on the operating system condition, editions and exceptions can be designed into the compliance check as well.
For example, if an Administrator has Windows 10 devices, and they want all version but to exclude build number 10.0.1903.1706, they would input the values as such:
