Windows Updates | Configuration Details

Advanced Windows update management configuration enable you to control when you can push updates to your devices. Configure the Windows Updates payload when:

General

Feature Updates

Auto Restart Deadline Period Specify the days before automatically executing a scheduled restart outside of active hours. Supported values range from 2 to 30.
Configure Deadline Period Specify the number of days a user has before feature updates automatically install on their devices. Supported values range from 0 to 30.
Note: This requires Windows 10, version 1903 or later.
Deadline for Grace Period Days Set a minimum number of days before automatic restarts occur.
Note: This requires Windows 10, version 20H2 or later.
Configure Uninstall Period Set the feature update uninstall period. Supported values range from 2 to 60 days.
Note: This requires Windows 10, version 1803 or later.
Defer Period Defer feature updates for the specified number of days. Supported values range from 0 to 365 days.
Note: This requires Windows 10, version 1607 or later. The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607, to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specify the deadline (in days) before automatically scheduling and executing a pending restart outside of active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Days Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Pause Feature Updates Enable pausing of feature updates for up to 35 days.
Note: This requires Windows 10, version 1607 or later.
Start Date [Appears when enabling Pause Feature Updates] Feature updates pause for 35 days from the specified start date.
Note: This requires Windows 10, version 1703 or later.

Quality Updates

Auto Restart Deadline Period Specify the number of days before automatically executing a scheduled restart outside of active hours. Supported values range from 2 to 30.
Configure Deadline Period Specify the number of days a user has before quality updates are automatically installed on their devices. Supported values range from 0 to 30.
Note: This requires Windows 10, version 1903 or later.
Deadline for Grace Period Days Set a minimum number of days before automatic restarts occur.
Note: This requires Windows 10, version 20H2 or later.
Defer Period Defer quality updates for a specified number of days. Supported values range from 0 to 365 days.
Note: This requires Windows 10, version 1607 or later. The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607 to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specify the deadline (in days) before automatically scheduling and executing a pending restart outside of active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Days Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Exclude Windows Update Drivers Exclude Windows Update (WU) drivers during updates.
Note: This requires Windows 10, version 1607 or later.
Pause Quality Updates Enable pausing quality updates for up to 35 days.
Note: This requires Windows 10, version 1607 or later.
Start Date [Appears when enabling Pause Feature Updates] Quality updates pause for 35 days from the specified start date.
Note: This requires Windows 10, version 1703 or later.

Services And Configurations

Update Source Choose the source server for updates: Microsoft Update Service or WSUS.
Branch Readiness Level Set which branch a device receives updates from. Choose from:
  • Windows Insider builds - Fast
  • Windows Insider builds - Slow
  • Release Windows Insider Build, added in version 1709
  • Semi-annual Channel (Targeted), added in version 1903
  • Semi-annual Channel combined into one Semi-annual Channel with a value of 16.
Note: This requires Windows 10, version 1607 and later.
Manage Preview Builds Manage Windows 10 Insider Preview builds.
  • Disable
  • Disable Once Next Release Is Public
  • Enable
Note: This requires Windows 10, version 1709 and later.
Other Microsoft Products Choose whether to scan for app updates from Microsoft Update.
Note: This requires Windows 10, version 1607 and later.
Non Microsoft Signed Updates Choose whether Automatic Updates accepts updates signed by entities other than Microsoft when found at the Windows Server Update Services (WSUS) Server URL.
Target Release Version Specify the build version for devices to move to and/ or stay at until they reach end of service.
Note: This requires Windows 10, version 1803 and later.
Dual Scan Specify whether the Windows Update client may begin automatic scans for Windows Updates while enabling update deferral policies.
Note: This requires Windows 10, version 1709 and later, or 1607 and 1703 service releases.
Windows Update for Business Safeguards Specify whether safeguards enable, blocking upgrades until the safeguard clears.
Note: Available in Windows Update for Business (WUFB) devices running Windows 10, version 1809 and later, with the October 2020 security update.
Configure Pause Access Specify whether the user can access the Pause updates feature in Windows.
Configure Access to Windows Scan Specify whether the user can access the Windows Update scan, download, and install features.

Delivery Optimization

Enable Delivery Optimization

Enable Delivery Optimization to manage bandwidth consumption by using alternate sources on a network and Microsoft servers. [Enabling this lets you configure all other Delivery Optimization options]
Absolute Max Cache Size Specify the maximum size (in GB) of the Delivery Optimization cache. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Allow VPN Peer Caching Enable this property to specify whether the device permits to participate in Peer Caching while connected via Virtual Private Network (VPN) to the domain network.
Note: This requires Windows 10, version 1703 and later.
Caching Source Choose a relevant source for updates: Hosted Mode or Peer Mode.
Cache Host Source [Appears when selecting Hosted Mode as your Caching Source.] Specify Microsoft Connected Cache for dynamic discovery. Choose from:
  • Cache Host URL
  • DHCP Option ID
  • DHCP Option ID Force
Note: This requires Windows 10, version 2004 and later.
Cache Host Enable one or more Microsoft Connected Cache servers for use.
Note: This requires Windows 10, version 1809 and later.
Delay Background Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a background download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1803 and later.
Delay Foreground Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a foreground download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1803 and later.
Delay Cache Server Fallback Background Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a background content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000.
Note: This requires Windows 10, version 1903 and later.
Delay Cache Server Fallback Foreground Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a foreground content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000.
Note: This requires Windows 10, version 1903 and later.
Download Mode
Specify the download method that Delivery Optimization can use for Windows Updates, Apps, and App updates. Choose from:

  • HTTP only, no peering

  • HTTP blended with peering behind the same NAT

  • HTTP blended with Internet peering

  • Simple download mode with no peering

  • Bypass mode

Note: This requires Windows 10, version 1507 and later.
Max Background Download Bandwidth Specify the maximum background download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647.
Note: This requires Windows 10, version 2004 and later.
Max Foreground Download Bandwidth Specify the maximum foreground download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647.
Note: This requires Windows 10, version 2004 and later.
Max Cache Age Specify the maximum time (in seconds) that the Delivery Optimization cache holds each file after downloading successfully. The value 0 means unlimited. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1507 and later.
Max Cache Size Specify the maximum cache size that Delivery Optimization can use as a percentage of disk size. Range: 1 to 100.
Note: This requires Windows 10, version 1507 and later.
Min Download QoS Specify the minimum download Quality of Service or speed (in Kilobytes/sec) for background downloads. This policy affects the blending of peer and HTTP sources. Range: 1 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Min Battery Percentage Allowed To Upload Specify the value to let the device upload data to LAN and Group peers while on DC power (Battery). The recommended value is 40. Range: 0 to 100.
Note: This requires Windows 10, version 1703 and later.
Min Disk Size Allowed To Peer Specify the required minimum disk size (in GB) for the device to use Peer Caching. Recommended values: 64 GB to 256 GB. Range: 1 to 100000.
Min File Size To Cache Specify the minimum content file size (in MB) enabled for Peer Caching. Range: 1 to 100000.
Note: This requires Windows 10, version 1703 and later.
Min RAM Allowed To Peer Specify the minimum RAM size (in GB) required to use Peer Caching. Recommended values: 1 GB to 4 GB. Range: 1 to 100000.
Note: This requires Windows 10, version 1703 and later.
Modify Cache Drive Specify the drive used for caching. By default, %SystemDrive%stores the cache. Specify the drive location using environment variables, drive letters, or a full path.
Note: This requires Windows 10, version 1607 and later.
Monthly Upload Data Cap Specify the maximum total bytes (in GB) allowed to upload to internet peers each calendar month. The value 0 means unlimited. Range: 0 to 2147483647.
Note: This requires Windows 10, version 1607 and later.
Percentage Max Background Bandwidth Specify the maximum background download bandwidth used across all concurrent download activities as a percentage of available download bandwidth. The default value of 0 dynamically adjusts to use the available bandwidth for background downloads. Range: 0 to 100.
Note: This requires Windows 10, version 1803 and later.
Percentage Max Foreground Bandwidth Specify the maximum foreground download bandwidth used across all concurrent download activities (define this as a percentage of available download bandwidth). The default value of 0 dynamically adjusts to use the available bandwidth for foreground downloads. Range: 0 to 100.
Note: This requires Windows 10, version 1803 and later.

Update Approval

Require Update Approval Restrict updates installed on a device to only those on an update approval list.
Note: The IT Administrator must accept the End User License Agreement (EULA) for the approved update on behalf of the end-users.
Auto Approved Updates Updates of selected types install automatically without waiting for approval. Choose from the following:
  • Applications
  • Connectors
  • Critical
  • Definition
  • Developer Kits
  • Feature Updates
  • Guidance
  • Security
  • Service Packs
  • Tools
  • Update Rollups
  • Other Updates

Scheduled Installation

Install Day Schedule the day of the update installation.
Install Time Schedule the time of the update installation.
Install Week Schedule the week of the update installation.
Note: This requires Windows 10, version 1709 and later.

Settings

Notification Settings

Auto Restart Notification Schedule Specify the period for auto-restart reminder notifications.
Note: This requires Windows 10, version 1703 and later.
Auto Restart Required Notification Dismissal Specify the method by which the auto-restart required notification dismisses.
Note: This requires Windows 10, version 1703 and later.
Schedule Imminent Restart Warning Specify the period for auto-restart imminent warning reminder notifications.
Note: This requires Windows 10, version 1703 and later.
Schedule Restart Warning Specify the period for auto-restart warning reminder notifications.
Note: This requires Windows 10, version 1703 and later.
Turn Off Auto Restart Notifications Turn off auto-restart notifications for update installations.
Note: This requires Windows 10, version 1703 and later.
Update Notifications Display Options Define what Windows Update notifications users see.
Note: This policy does not control how or when an update downloads and installs.

Installation Settings

Auto Update Settings Manage automatic update's behavior to scan, download, and install updates.
Maximum Active Hours Specify a maximum number of active hours from the start date during which the device cannot restart to apply updates.
Note: This requires Windows 10, version 1703 and later.
Active Hours Start Time Set the start time (in hours) where update reboots are not scheduled.
Note: This requires Windows 10, version 1607 and later. The default maximum difference from end time has increased from 12 in Windows 10, version 1607 to 18 in Windows 10, version 1703.
Active Hours End Time Set the end time (in a range of hours) when update reboots are not scheduled.
Note: This requires Windows 10, version 1607 and later. The default maximum difference from start time has increased from 12 in Windows 10, version 1607 to 18 in Windows 10, version 1703.
Automatic Maintenance Wake Up Configure if Automatic Maintenance should make a wake request to the OS for the daily scheduled maintenance.
Deadline For No Auto Reboot Configure a deadline for the device to restart outside of active hours.
Note: This requires Windows 10, version 1903 and later.

Download Settings

Auto Download Over Metered Network Download updates automatically over metered connections.
Note: This requires Windows 10, version 1709 and later.
Ignore Mobile Operator App Download Limit Specify whether to ignore the metered connection download limit (enable unlimited downloading) over a cellular network for apps and their updates.
Note: This requires Windows 10, version 1703 and later.
Ignore Mobile Operator Update Download Limit Specify whether to ignore the metered connection download limit (unlimited downloading) over a cellular network for OS updates.
Note: This requires Windows 10, version 1703 and later.