MicrosoftI'd recommend checking the "Don't auto-restart until end of grace period" under:
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > Specify deadline for automatic updates and restarts
The reasoning is, the updates apply and the end user receives a notice their organization requires a restart in x days to apply the updates. The user interprets this as they have x days before they'll need to restart. Not so. When the active hours expire, the PC reboots. Users may lose data if they weren't expecting a reboot. Or, change the notification to the PC will reboot anytime today after x (end of active hours) if the user is inactive/idle.
