WSUS vs. Win 10

[Gongalong]

Hi folks,

 

Are any extra GPO changes required to get Win 10 to actually install updates?

 

I've reimaged several hundred PCs with 1803 and from what I can see Windows Update on a client PC is showing updates are there, but it doesn't seem to install them. I know that there's this concept of "Active Hours" with a Win 10 PC, which seem to be set to 8am - 5pm, but having left the PCs overnight the updates are still pending. I've manually rebooted the PCs as well.

 

In terms of GPOs, I have the following set under Computer Config > Policies > Administrative Templates > Windows Components > Windows Update

 

Allow Automatic Updates immediate installation = Enabled

Configure Automatic Updates

Configure Automatic Updating = 4 - Auto download and schedule the install

Schedule install day = 0 - Every day

Scheduled install time = 15:00

Do not connect to any Windows Update Internet locations = Enabled

Enable client-side targeting = Enabled

No auto-restart with logged on users for schedule automatic updates installations = Enabled

Specify intranet Microsoft update service location = WSUS server is defined here

Turn on Software Notifications = Disabled

 

I'm not really that fussed when the updates get installed, just that it doesn't reboot the PC or otherwise interfere with the user on the PC.

 

Any advice appreciated!

 

Thanks

[computer_expert]

What happens if you change the scheduled install time from 1500 to 1800?

[Gongalong]

Looks like it was impatience on my part, as I just happened to look at Windows Updates on a PC around 3:05pm and it suddenly kicked off installing. I've gone back to a PC that also had loads of updates pending, and they have mostly installed. Just a couple of errors which I'm guessing were because it needed a reboot.

 

Does the schedule apply rigorously, or will it run the next time the PC is turned on if it misses the 3pm time?

[Gongalong]

What would be more useful is if it would just check for and install updates when the PC is on, but just not reboot with a user logged in. Anyone got any ideas on what GPO settings would be used to apply that? It seems to only allow a scheduled install, unless it's just a case of turning that off.