Windows Modern

The Windows Modern updates and firmware management policy allows you to manage system updates for your Windows Modern devices.

Note: This requires Manage Windows Updates general permission to create and edit the policy.
Note: This requires View Windows Updates general permission to view the policy.
Note: When multiple policies are assigned to a device, the most restrictive configurations apply. For data tables, a union of the configurations is assigned to the devices.
Note: If you revoke one policy and assign another, the assigned policy remains visible on the devices. Complete revocation happens only when devices have no assigned policies.

Feature Updates

Auto Restart Deadline Period Specify the days before automatically executing a scheduled restart outside of active hours. Supported values range from 2 to 30.
Note: This requires Windows 10, version 1809 or later.
Configure Deadline Period Specify the number of days a user has before feature updates automatically install on their devices. Supported values range from 0 to 30.
Note: This requires Windows 10, version 1903 or later.
Deadline for Grace Period Days Set a minimum number of days before automatic restarts occur.
Note: This requires Windows 10, version 20H2 or later.
Configure Uninstall Period Set the feature update uninstall period. Supported values range from 2 to 60 days.
Note: This requires Windows 10, version 1803 or later.
Defer Period Defer feature updates for the specified number of days. Supported values range from 0 to 365 days.
Note: This requires Windows 10, version 1607 or later. The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607, to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specify the deadline (in days) before automatically scheduling and executing a pending restart outside of active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Pause Feature Updates Enable pausing of feature updates for up to 35 days.
Note: This requires Windows 10, version 1607 or later.
Start Date [Appears when enabling Pause Feature Updates] Feature updates pause for 35 days from the specified start date.
Note: This requires Windows 10, version 1703 or later.

Quality Updates

Auto Restart Deadline Period Specify the number of days before automatically executing a scheduled restart outside of active hours. Supported values range from 2 to 30 days.
Configure Deadline Period Specify the number of days a user has before quality updates are automatically installed on their devices. Supported values range from 0 to 30 days.
Note: This requires Windows 10, version 1903 or later.
Deadline for Grace Period Days Set a minimum number of days before automatic restarts occur.
Note: This requires Windows 10, version 20H2 or later.
Defer Period Defer quality updates for a specified number of days. Supported values range from 0 to 365 days.
Note: This requires Windows 10, version 1607 or later. The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607 to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specify the deadline (in days) before automatically scheduling and executing a pending restart outside of active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Exclude Windows Update Drivers Exclude Windows Update (WU) drivers during updates.
Note: This requires Windows 10, version 1607 or later.
Pause Quality Updates Enable pausing quality updates for up to 35 days.
Note: This requires Windows 10, version 1607 or later.
Start Date [Appears when enabling Pause Feature Updates] Quality updates pause for 35 days from the specified start date.
Note: This requires Windows 10, version 1703 or later.

Services And Configurations

Update Source Choose the source server for updates: Microsoft Update Service or Windows Server Update Service (WSUS).
Branch Readiness Level Set which branch a device receives updates from. Choose from:
  • Windows Insider Build - Fast
  • Windows Insider Build - Slow
  • Release Windows Insider Build
  • Semi-annual Channel (Targeted)
  • Semi-annual Channel
Note: This requires Windows 10, version 1607 and later.
Manage Preview Builds Manage Windows 10 Insider Preview builds.
  • Disable Preview Builds
  • Disable Preview builds once the Next Release Is Public
  • Enable Preview builds
Note: This requires Windows 10, version 1709 and later.
Other Microsoft Products Choose whether to scan for app updates from Microsoft Update.
Note: This requires Windows 10, version 1607 and later.
Target Release Version Specify the build version for devices to move to and/ or stay at until they reach end of service.
Note: This requires Windows 10, version 1803 and later.
Dual Scan Specify whether the Windows Update client may begin automatic scans for Windows Updates while enabling update deferral policies.
Note: This requires Windows 10, version 1709 and later, or 1607 and 1703 service releases.
Windows Update for Business Safeguards Specify whether safeguards enable, blocking upgrades until the safeguard clears.
Note: Available in Windows Update for Business (WUFB) devices running Windows 10, version 1809 and later, with the October 2020 security update.
Configure Pause Access Specify whether the user can access the Pause updates feature in Windows.
Configure Access to Windows Scan Specify whether the user can access the Windows Update scan, download, and install features.

Delivery Optimization

Enable Delivery Optimization

Enable Delivery Optimization to manage bandwidth consumption by using alternate sources on a network and Microsoft servers. [Enabling this lets you configure all other Delivery Optimization options]
Absolute Max Cache Size Specify the maximum size (in GB) of the Delivery Optimization cache. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Allow VPN Peer Caching Enable this property to specify whether the device is allowed to participate in Peer Caching while connected to the domain network via Virtual Private Network (VPN).
Note: This requires Windows 10, version 1703 and later.
Caching Source Choose a relevant source for updates: Hosted Mode or Peer Mode.
Cache Host Source [Appears when selecting Hosted Mode as your Caching source.] Specify Microsoft Connected Cache for dynamic discovery. Choose from:
  • Cache Host URL
  • DHCP Option ID
  • DHCP Option ID Force
Note: This requires Windows 10, version 2004 and later.
Cache Host Enable one or more Microsoft Connected Cache servers for use.
Note: This requires Windows 10, version 1809 and later.
Delay Background Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a background download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1803 and later.
Delay Foreground Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a foreground download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1803 and later.
Delay Cache Server Fallback Background Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a background content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000.
Note: This requires Windows 10, version 1903 and later.
Delay Cache Server Fallback Foreground Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a foreground content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000.
Note: This requires Windows 10, version 1903 and later.
Download Mode
Specify the download method that Delivery Optimization can use for Windows Updates, Apps, and App updates. Choose from:

  • HTTP only, no peering

  • HTTP blended with peering behind the same NAT

  • HTTP blended with Internet peering

  • Simple download mode with no peering

  • Bypass mode

Note: This requires Windows 10, version 1507 and later.
Max Background Download Bandwidth Specify the maximum background download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647.
Note: This requires Windows 10, version 2004 and later.
Max Foreground Download Bandwidth Specify the maximum foreground download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647.
Note: This requires Windows 10, version 2004 and later.
Max Cache Age Specify the maximum time (in seconds) that the Delivery Optimization cache holds each file after downloading successfully. The value 0 means unlimited. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1507 and later.
Max Cache Size Specify the maximum cache size that Delivery Optimization can use as a percentage of disk size. Range: 1 to 100.
Note: This requires Windows 10, version 1507 and later.
Min Download QoS Specify the minimum download Quality of Service or speed (in Kilobytes/sec) for background downloads. This policy affects the blending of peer and HTTP sources. Range: 1 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Min Battery Percentage Allowed To Upload Specify the value to let the device upload data to LAN and Group peers while on DC power (Battery). The recommended value is 40. Range: 0 to 100.
Note: This requires Windows 10, version 1703 and later.
Min Disk Size Allowed To Peer Specify the required minimum disk size (in GB) for the device to use Peer Caching. Recommended values: 64 GB to 256 GB. Range: 1 to 100000.
Min File Size To Cache Specify the minimum content file size (in MB) enabled for Peer Caching. Range: 1 to 100000.
Note: This requires Windows 10, version 1703 and later.
Min RAM Allowed To Peer Specify the minimum RAM size (in GB) required to use Peer Caching. Recommended values: 1 GB to 4 GB. Range: 1 to 100000.
Note: This requires Windows 10, version 1703 and later.
Modify Cache Drive Specify the drive used for caching. By default, %SystemDrive%stores the cache. Specify the drive location using environment variables, drive letters, or a full path.
Note: This requires Windows 10, version 1607 and later.
Monthly Upload Data Cap Specify the maximum total bytes (in GB) allowed to upload to internet peers each calendar month. The value 0 means unlimited. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Percentage Max Background Bandwidth Specify the maximum background download bandwidth used across all concurrent download activities as a percentage of available download bandwidth. The default value of 0 dynamically adjusts to use the available bandwidth for background downloads. Range: 0 to 100.
Note: This requires Windows 10, version 1803 and later.
Percentage Max Foreground Bandwidth Specify the maximum foreground download bandwidth used across all concurrent download activities (define this as a percentage of available download bandwidth). The default value of 0 dynamically adjusts to use the available bandwidth for foreground downloads. Range: 0 to 100.
Note: This requires Windows 10, version 1803 and later.

Update Approval

Require Update Approval Restrict updates installed on a device to only those on an update approval list.
Note: The IT Administrator must accept the End User License Agreement (EULA) for the approved update on behalf of the end-users.
Auto Approved Updates Updates of selected types install automatically without waiting for approval. Choose from the following:
  • Applications
  • Connectors
  • Critical
  • Definition
  • Developer Kits
  • Feature Updates
  • Guidance
  • Security
  • Service Packs
  • Tools
  • Update Rollups
  • Other Updates

Notifications Settings

Auto-Restart Notifications Schedule Set the time for the auto restart reminder to notify users.
Note: Supports Windows 10 version 1703 and later.
Auto-Restart Required Notification Dismissal Choose how the auto restart required notification is dismissed. Choose from Auto and User.
Note: By default, the notification is dismissed after 25 seconds.
Note: Supports Windows 10 version 1703 and later.
Disable Auto-Restart Notifications Enable the toggle to manage auto restart notifications for update installations, including reminder and warning notifications.
Note: Supports Windows 10 version 1703 and later.
Schedule Imminent Restart Warning Set the notification time for users before a scheduled restart, giving them an opportunity to save their work. Users cannot delay the restart once the deadline has reached.
Note: Supports Windows 10 version 1703 and later.
Schedule Restart Warning Specify the notification time for users before an automatic restart, allowing them enough time to save their work.
Note: Supports Windows 10 version 1703 and later.
Update Notification Level Configure the Windows Update notification level for users.
Note: Supports Windows 11 version 22H2 and later.

Installation Settings

Auto-Update Settings Configure the automatic update setting to scan, download and install updates. Choose from:
  • Notify the User before Downloading
  • Auto Install and Notify
  • Auto Install and Restart
  • Auto Install and Restart at a Specified Time
  • Auto Install and Restart without User Control
  • Turn Off Automatic Updates
Note: If this configuration is not assigned, the default behavior is Auto install and restart.
Note: Supports Windows 10 version 1507 and later.
Maximum Active Hours Set the maximum number of hours users can designate as their active hours, beginning from a specified start time.
Note: Supports Windows 10 version 1703 and later.
Active Hours Start Time Configure the start time for active hours to prevent the device from automatically restarting for updates during these hours. The PC will try to restart outside of the designated active hours.
Note: Supports Windows 10 version 1607 and later.
Active Hours End Time Configure the end time for active hours to prevent the device from automatically restarting for updates during these hours. The PC will try to restart outside of the designated active hours.
Note: Supports Windows 10 version 1607 and later.
Automatic Maintenance Wake Up Enables Automatic Maintenance to request the operating system to wake the device for daily scheduled maintenance, if necessary.
Note: Supports Windows 10 version 1607 and later.
No Auto Reboot Deadline Prevents the device from automatically restarting outside of active hours until the deadline and grace period expire, even if an update is ready for restart.
Note: Supports Windows 10 version 1607 and later.

Network Download Settings

Auto Download Over Metered Network Enable automatic download of updates, even over metered data connections (charges may apply).
Note: Supports Windows 10 version 1607 and later.
Ignore Mobile Operator App Download Limit Enable the toggle to ignore the mobile operator's download limit over a cellular network for apps and their updates.
Note: Supports Windows 10 version 1703 and later.
Ignore Mobile Operator Update Download Limit Enable the toggle to ignore the mobile operator's download limit over a cellular network for OS updates.
Note: Supports Windows 10 version 1703 and later.

Scheduled Installation

Install Day Schedule the day for the update installation.
Install Time Schedule the time for the update installation.
Install Week Schedule the week for the update installation.
Note: This requires Windows 10, version 1709 and later.