Windows 10 restarting during Active Hours, updates KB4601345, KB4598230 for example.

[RoqueCatanese]

I need some help with the configuration of this GPO.

The clients are restarting during the work hours.

May be I have some policy worng, can you review the configuration?


The last CU for Windows 10 for example force the restart of machine.

KB4601345, KB4598230


And the behavior that I have is the following:

The updates are downloading during night and during active hours too, this is fine?

Some updates are installing during active hours and restarting while the user are working, this is bad, true? Please I need fix this behavior.

Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Allow Automatic Updates immediate installation[/COLOR]	Enabled
[COLOR=rgba(0, 0, 255, 1)]Automatic Updates detection frequency[/COLOR]	Enabled
Check for updates at the following interval (hours): 12
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Configure Automatic Updates[/COLOR]	Enabled
Configure automatic updating: 4 - Auto download and schedule the install The following settings are only required and applicable if 4 is selected. Install during automatic maintenance Disabled Scheduled install day: 3 - Every Tuesday Scheduled install time: 02:00 If you have selected “4 – Auto download and schedule the install” for your scheduled install day and specified a schedule, you also have the option to limit updating to a weekly, bi-weekly or monthly occurrence, using the options below: Every week Enabled First week of the month Disabled Second week of the month Disabled Third week of the month Disabled Fourth week of the month Disabled Install updates for other Microsoft products Enabled
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box[/COLOR]	Disabled
[COLOR=rgba(0, 0, 255, 1)]Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box[/COLOR]	Disabled
[COLOR=rgba(0, 0, 255, 1)]Enable client-side targeting[/COLOR]	Enabled
Target group name for this computer GroupX
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Remove access to use all Windows Update features[/COLOR]	Disabled
[COLOR=rgba(0, 0, 255, 1)]Re-prompt for restart with scheduled installations[/COLOR]	Enabled
Wait the following period before prompting again with a scheduled restart (minutes): 30
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Reschedule Automatic Updates scheduled installations[/COLOR]	Enabled
Wait after system startup (minutes): 15
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Specify active hours range for auto-restarts[/COLOR]	Enabled
Specify the max active hours range: Max range: 14
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Specify intranet Microsoft update service location[/COLOR]	Enabled
Set the intranet update service for detecting updates: https://wsusserver Set the intranet statistics server: https://wsusserver Set the alternate download server: (example: https://IntranetUpd01) Download files with no Url in the metadata if alternate download server is set. Disabled Do not enforce TLS certificate pinning for Windows Update client for detecting updates. Select the proxy behavior for Windows Update client for detecting updates:
Policy	Setting	Comment
[COLOR=rgba(0, 0, 255, 1)]Turn off auto-restart for updates during active hours[/COLOR]	Enabled
Active Hours Start: 8 AM End: 10 PM

I wait your comments and help.


best regards,

Roque.

Continue reading...