Event banner
Event details
Being Intune Administrator, Is there anyway I can control Win 11 updates on laptops of my fellow employees? Is there any specific policy that stops laptops of employees from being updated before 7 PM?
Also, confirm whether policies for Win 10 also stands valid for devices running Win 11?
- ImranInspired
Microsoft
Hi noor41
In addition to AriaUpdated response, here is a doc that can help with configuring Active hours: Windows Update settings you can manage with Intune Update Ring policies for Windows 10/11 devices. | Microsoft Learn
Hope this helps!
- AriaUpdated
Yep! I'd recommend following our default configuration (reset everything to default), then configuring a deadline of 2 days and a grace period of 5 days. Active hours are configured by default based on user behavior, but if you want to specify it to specifically be some time in the morning until 7PM you can configure Automatic Update to automatically update and set Active hours to 9AM - 7PM for example. With this configuration, the device will automatically download and try to install based on best time for user, then will try to reboot overnight when user is away (assuming plugged in) for the first 5 days until deadline is reached and then will force the reboot after multiple notifications. This will ensure for employees who leave devices plugged in and not shutdown overnight that the device will automatically reboot when they are away.
And yes, policies are the same across Win 10 and 11, you can learn more here: https://www.bing.com/search?q=what+windows+update+policies+to+set+and+why&cvid=296875ad6e7843ccbdfb9d2a89516c4e&gs_lcrp=EgRlZGdlKgYIABBFGDkyBggAEEUYOTIGCAEQABhAMgYIAhAAGEAyBggDEAAYQDIGCAQQABhAMgYIBRAAGEAyBggGEAAYQDIGCAcQABhAMggICBDpBxj8VdIBCDQ1NzFqMGo0qAIIsAIB&FORM=ANAB01&PC=U531&EPC=ExpTester
