Blog Post

Windows IT Pro Blog
7 MIN READ

Common policy configuration mistakes for managing Windows updates

AriaUpdated's avatar
AriaUpdated
Icon for Microsoft rankMicrosoft
Jan 20, 2021
Misconfigured policies can prevent devices from updating and negatively affect monthly patch compliance. Explore common policy configuration mistakes that can hinder update adoption and result in a p...
Updated Feb 02, 2023
Version 2.0
servicing and updates
tips and tricks
KyleSchroeder's avatar
KyleSchroeder
Copper Contributor
Jun 26, 2023

Hello,

Trying to verify a configuration setting and behaviors - if we set the DeferQualityUpdatesPeriodInDays = 13, ConfigureDeadlineForQualityUpdates = 3, and  ConfigureDeadlineGracePeriod = 0, what will result?  Assumption is:

  • Updates will install on Monday (i.e for June 2023, on June 26 following update release on June 13) due to DeferQualityUpdatesPeriodInDays setting
  • Installation will be forced after 3 days, potentially during "Active Hours" on June 29 (assuming no inactive time before then)
  • Reboot will be forced immediately after installation due to ConfigureDeadLineGracePeriod = 0

If we want to avoid unprompted reboots, but still ensure reboot within 3 days of patch installation, we should instead set the ConfigureDeadLineGracePeriod = 3 correct?  To be clear this is all with using CSP settings manually, no GPO in effect,