You can find these policies in Group Policy under Computer Configuration > Administrative Templates > Windows Components > Windows Update > Specify deadlines for automatic updates and restarts or the CSP name listed for each policy setting below. We recommend the following settings for deadline policies. Allowing auto-restart can therefore improve your patch compliance while maintaining a good end user experience. Windows has heuristics to analyze when the user interacts with the device to find the optimal time to automatically download, install, and restart. We also recommend leveraging the default automatic restart behavior.

The grace period is a buffer that prevents deadlines from immediately forcing a restart as soon as a device is turned on.

To ensure a good user experience for devices that have been shut off for some time, as when a user of a device is on vacation, we strongly recommend setting a grace period. For example, if the end user pauses all updates for 7 days and the quality update deadline is set to 2 days, as soon as the pause period is over on day 7, the deadline kicks in and the device will have 2 days to download, install, and restart to complete the update. Similarly, if you (or the end user) pause quality updates, the deadline will not kick in until after the pause has elapsed and a quality update is offered to the device. For example, if you set a quality update deadline of 2 days and a quality update deferral of 7 days, users will not get offered the quality update until day 7 and the deadline will not force restart until day 9. Deadlines provide a balance between keeping devices secure and providing a good end user experience.ĭeadlines work in coordination with pause and deferral settings. A deadline is the number of days before a device is forced to restart to ensure compliance. One of the most powerful resources that IT admins can use to support patch compliance is setting deadlines. Alternatively, you can leverage the Update Baseline tool to automatically apply the recommended set of Windows Update policies to your devices. Explore common policy configuration mistakes that can hinder update adoption and result in a poor experience for your end users-and get guidance on how to review your Windows update policies to confirm your devices are configured correctly. Misconfigured policies can prevent devices from updating and negatively affect monthly patch compliance.

Arto instal the new for windows