Windows Updates Policy | Configuration Details

This topic provides detailed information about the configuration settings available for the Windows Modern Update Policy in SOTI MobiControl.

Updates Tab

Feature Updates
Auto Restart Deadline Period Specifies the number of days after an update installation before the device automatically restarts outside active hours. Supported values: 2–30. (Requires Windows 10, version 1809 or later).
Configure Deadline Period Specifies the number of days after an update is offered before it is automatically installed. Supported values: 0–30. (Requires Windows 10, version 1903 or later).
Deadline for Grace Period Days Set the number of days that must pass before automatic restarts are triggered after a missed deadline. (Requires Windows 10, version 20H2 or later).
Configure Uninstall Period Sets the duration (in days) that a feature update can be uninstalled after installation. Supported values range from 2 to 60 days. (Requires Windows 10, version 1803 or later).
Defer Period Delays the installation of feature updates for the specified number of days. Supported values range from 0 to 365 days. (Requires Windows 10, version 1607 or later).
Note: The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607, to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specifies the number of days before a pending restart is automatically scheduled and executed outside active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Pause Feature Updates Temporarily pauses the installation of feature updates for up to 35 days. (Requires Windows 10, version 1607 or later).
Start Date Defines the date from which feature updates are paused for 35 days. (Requires Windows 10, version 1703 or later).
Note: Appears when enabling Pause Feature Updates.
Quality Updates
Auto Restart Deadline Period Specifies the number of days before a scheduled restart is automatically executed outside active hours. Supported values range from 2 to 30 days.
Configure Deadline Period Specify the number of days a user has before quality updates are automatically installed on their devices. Supported values range from 0 to 30 days. (Requires Windows 10, version 1903 or later).
Deadline for Grace Period Days Sets a minimum number of days before automatic restarts are triggered after a missed deadline. (Requires Windows 10, version 20H2 or later).
Defer Period Delays the installation of quality updates for a specified number of days. Supported values: 0–365 days. (Requires Windows 10, version 1607 or later).
Note: The maximum number of days to defer an update has increased from 180 in Windows 10, version 1607 to 365 in Windows 10, version 1703.
Engaged Restart Deadline Specify the deadline (in days) before automatically scheduling and executing a pending restart outside of active hours. Supported values range from 2 to 30 days.
Engaged Restart Snooze Schedule Specify the number of days a user can snooze engaged restart reminder notifications.
Engaged Restart Transition Schedule Specify the timing (in days) before transitioning from automatic restarts scheduled outside of active hours to engaged restarts, which require the user to schedule. Supported values range from 2 to 30 days.
Exclude Windows Update Drivers Prevents device drivers from being downloaded and installed via Windows Update. (Requires Windows 10, version 1607 or later).
Pause Quality Updates Pauses the installation of quality updates for up to 35 days. (Requires Windows 10, version 1607 or later).
Start Date (Appears when enabling Pause Feature Updates) Defines the date from which quality updates are paused for 35 days. (Requires Windows 10, version 1703 or later).
Services And Configurations
Update Source Select the update source for the device. Choose from either the Microsoft Update service or a local Windows Server Update Services (WSUS) deployment.
Branch Readiness Level Specify the branch from which the device will receive updates. (Requires Windows 10, version 1607 and later).

Choose from:

  • Windows Insider Build - Fast
  • Windows Insider Build - Slow
  • Release Windows Insider Build
  • Semi-annual Channel (Targeted)
  • Semi-annual Channel
Manage Preview Builds Manage how the device handles Windows Insider Preview builds. (Requires Windows 10, version 1709 and later).

Choose from:

  • Disable Preview Builds
  • Disable Preview Builds Once the Next Release Is Public
  • Enable Preview Builds
Other Microsoft Products Enable or disable scanning for updates to other Microsoft products through Microsoft Update. (Requires Windows 10, version 1607 and later).
Target Release Version Specify the Windows build version that devices should migrate to or remain on until end of service. (Requires Windows 10, version 1803 and later).
Dual Scan Specify whether the Windows Update client can automatically scan for updates while update deferral policies are enabled. (Requires Windows 10, version 1709 and later, or 1607 and 1703 service releases).
Windows Update for Business Safeguards Specify whether safeguards are enabled to block upgrades until the safeguard is cleared.
Note: Available on Windows Update for Business (WUFB) devices running Windows 10, version 1809 and later, with the October 2020 security update.
Configure Pause Access Specify whether the user can access the Pause updates feature in Windows.
Configure Access to Windows Scan Specify whether the user can access the Windows Update scan, download, and install features.
OS Version
Upgrade OS Choose your Windows OS version from the following options:
  • Not Configured
  • Windows 10
  • Windows 11
Select Agree and Continue to proceed.
Note: Only devices that meet Microsoft's minimum OS upgrade requirements will be upgraded.
Target Release Version Enter the target release version for the OS upgrade.
Change OS Edition
Product Key Enter the 25-character Windows product key.
Delivery Optimization
Enable Delivery Optimization

Enable Delivery Optimization to manage bandwidth consumption by using alternate sources on a network and Microsoft servers. Enabling this lets you configure all other Delivery Optimization options.
Absolute Max Cache Size Specify the maximum size (in GB) of the Delivery Optimization cache. Range: 0 to 2147483647. (Requires Windows 10, version 1607 and later).
Allow VPN Peer Caching Enable this property to specify whether the device is allowed to participate in Peer Caching while connected to the domain network via Virtual Private Network (VPN). (Requires Windows 10, version 1703 and later).
Caching Source Choose a relevant source for updates: Hosted Mode or Peer Mode.
Cache Host Source (Appears when selecting Hosted Mode as your Caching source) Specify Microsoft Connected Cache for dynamic discovery. (Requires Windows 10, version 2004 and later).

Choose from:

  • Cache Host URL
  • DHCP Option ID
  • DHCP Option ID Force
Cache Host Enable one or more Microsoft Connected Cache servers for use. (Requires Windows 10, version 1809 and later).
Delay Background Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a background download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647. (Requires Windows 10, version 1803 and later).
Delay Foreground Download From HTTP Specify the delay time (in seconds) for using an HTTP source in a foreground download that permits peer-to-peer usage. The recommended value is 3600 seconds. Range: 0 to 2147483647. (Requires Windows 10, version 1803 and later).
Delay Cache Server Fallback Background Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a background content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000. (Requires Windows 10, version 1903 and later).
Delay Cache Server Fallback Foreground Specify the delay time (in seconds) for fallback from the Cache Server to the HTTP source for a foreground content download. The Delay Background Download From HTTP policy takes precedence over this policy to download from peers first. Range: 0 to 2592000. (Requires Windows 10, version 1903 and later).
Download Mode

Specify the download method that Delivery Optimization can use for Windows Updates, Apps, and App updates. (Requires Windows 10, version 1507 and later).

Choose from:

  • HTTP only, no peering

  • HTTP blended with peering behind the same NAT

  • HTTP blended with Internet peering

  • Simple download mode with no peering

  • Bypass mode
Max Background Download Bandwidth Specify the maximum background download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647. (Requires Windows 10, version 2004 and later).
Max Foreground Download Bandwidth Specify the maximum foreground download bandwidth (in Kilobytes/second) the device can use across all concurrent download activities using Delivery Optimization. Range: 0 to 2147483647. (Requires Windows 10, version 2004 and later).
Max Cache Age Specify the maximum time (in seconds) that the Delivery Optimization cache holds each file after downloading successfully. The value 0 means unlimited. Range: 0 to 2147483647. (Requires Windows 10, version 1507 and later).
Max Cache Size Specify the maximum cache size that Delivery Optimization can use as a percentage of disk size. Range: 1 to 100. (Requires Windows 10, version 1507 and later).
Min Download QoS Specify the minimum download Quality of Service or speed (in Kilobytes/sec) for background downloads. This policy affects the blending of peer and HTTP sources. Range: 1 to 2147483647. (Requires Windows 10, version 1607 and later).
Min Battery Percentage Allowed To Upload Specify the value to let the device upload data to LAN and Group peers while on DC power (Battery). The recommended value is 40. Range: 0 to 100. (Requires Windows 10, version 1703 and later).
Min Disk Size Allowed To Peer Specify the required minimum disk size (in GB) for the device to use Peer Caching. Recommended values: 64 GB to 256 GB. Range: 1 to 100000.
Min File Size To Cache Specify the minimum content file size (in MB) enabled for Peer Caching. Range: 1 to 100000. (Requires Windows 10, version 1703 and later).
Min RAM Allowed To Peer Specify the minimum RAM size (in GB) required to use Peer Caching. Recommended values: 1 GB to 4 GB. Range: 1 to 100000. (Requires Windows 10, version 1703 and later).
Modify Cache Drive Specify the drive used for caching. By default, %SystemDrive% stores the cache. Specify the drive location using environment variables, drive letters, or a full path. (Requires Windows 10, version 1607 and later).
Monthly Upload Data Cap Specify the maximum total bytes (in GB) allowed to upload to internet peers each calendar month. The value 0 means unlimited. Range: 0 to 2147483647. (Requires Windows 10, version 1607 and later).
Percentage Max Background Bandwidth Specify the maximum background download bandwidth used across all concurrent download activities as a percentage of available download bandwidth. The default value of 0 dynamically adjusts to use the available bandwidth for background downloads. Range: 0 to 100. (Requires Windows 10, version 1803 and later).
Percentage Max Foreground Bandwidth Specify the maximum foreground download bandwidth used across all concurrent download activities (define this as a percentage of available download bandwidth). The default value of 0 dynamically adjusts to use the available bandwidth for foreground downloads. Range: 0 to 100. (Requires Windows 10, version 1803 and later).
Update Approval
Require Update Approval Restricts updates installed on a device to only those on an update approval list.
Note: The IT Administrator must accept the End User License Agreement (EULA) for the approved update on behalf of the end-users.
Auto Approved Updates Enable to allow updates of selected types to install automatically without waiting for approval. Choose from:
  • Applications
  • Connectors
  • Critical
  • Definition
  • Developer Kits
  • Feature Updates
  • Guidance
  • Security
  • Service Packs
  • Tools
  • Update Rollups
  • Other Updates
Note: This simply auto approves the selected updates and does not define the type of updates.

Settings Tab

Notifications Settings
Auto-Restart Notifications Schedule Set the time for the auto restart reminder notification to alert users. (RequiresWindows 10 version 1703 and later).
Auto-Restart Required Notification Dismissal Choose how the auto restart required notification is dismissed. Choose from Auto and User. (Requires Windows 10 version 1703 and later).
Note: By default, the notification is dismissed after 25 seconds.
Disable Auto-Restart Notifications Enable this toggle to manage auto restart notifications for update installations, including reminders and warnings. (Requires Windows 10 version 1703 and later).
Schedule Imminent Restart Warning Set the notification time for users before a scheduled restart, giving them an opportunity to save their work. Users cannot delay the restart once the deadline has reached. (Requires Windows 10 version 1703 and later).
Schedule Restart Warning Specify the notification time for users before an automatic restart, allowing them enough time to save their work. (Requires Windows 10 version 1703 and later).
Update Notification Level Configure the Windows Update notification level for users. (Requires Windows 11 version 22H2 and later).
Installation Settings
Auto-Update Settings Configures how the device handles update scanning, downloading, and installation. (Requires Windows 10 version 1507 and later).

Choose from:

  • Notify the User before Downloading
  • Auto Install and Notify
  • Auto Install and Restart
  • Auto Install and Restart at a Specified Time
  • Auto Install and Restart without User Control
  • Turn Off Automatic Updates
Note: If this configuration is not assigned, the default behavior is Auto install and restart.
Maximum Active Hours Set the maximum number of hours users can designate as their active hours, beginning from a specified start time. (Requires Windows 10 version 1703 and later).
Active Hours Start Time Configure the start time for active hours to prevent the device from automatically restarting for updates during these hours. The PC will try to restart outside of the designated active hours. (Requires Windows 10 version 1607 and later).
Active Hours End Time Configure the end time for active hours to prevent the device from automatically restarting for updates during these hours. The PC will try to restart outside of the designated active hours. (Requires Windows 10 version 1607 and later).
Automatic Maintenance Wake Up Enables Automatic Maintenance to request the operating system to wake the device for daily scheduled maintenance, if necessary. (Requires Windows 10 version 1607 and later).
No Auto Reboot Deadline Prevents the device from automatically restarting outside of active hours until the deadline and grace period expire, even if an update is ready for restart. (Requires Windows 10 version 1607 and later).
Network Download Settings
Auto Download Over Metered Network Enable automatic download of updates, even over metered data connections (charges may apply). (Requires Windows 10 version 1607 and later).
Ignore Mobile Operator App Download Limit Enable the toggle to ignore the mobile operator's download limit over a cellular network for apps and their updates. (Requires Windows 10 version 1703 and later).
Ignore Mobile Operator Update Download Limit Enable the toggle to ignore the mobile operator's download limit over a cellular network for OS updates. (Requires Windows 10 version 1703 and later).

Schedule Tab

Scheduled Installation
Install Day Schedule the day for the update installation.
Install Time Schedule the time for the update installation.
Install Week Schedule the week for the update installation. (Requires Windows 10, version 1709 and later).