Windows 10 Update GPO Confusion

%3CLINGO-SUB%20id%3D%22lingo-sub-1760525%22%20slang%3D%22en-US%22%3EWindows%2010%20Update%20GPO%20Confusion%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1760525%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20configuring%20a%20new%20Windows%2010%20update%20scheme%20using%20Group%20Policy.%3C%2FP%3E%3CP%3EI%20won't%20post%20all%20of%20the%20details%20about%20how%20I%20have%20it%20configured%2C%20but%20I%20am%20running%20into%20a%20conflict%20in%20the%20descriptions%20of%20two%20GPO%20settings%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20auto-restart%20with%20logged%20on%20users%20for%20scheduled%20automatic%20update%20installations%20-%20Disabled.%3C%2FP%3E%3CP%3EAlways%20automatically%20restart%20at%20the%20scheduled%20time%20-%20Enabled%20-%20180%20Minutes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20'No%20auto-restart'%20GPO%20description%20suggests%20that%20when%20a%20Windows%20Update%20is%20installed%20(scheduled%20for%204PM%2C%20daily)%2C%20the%20user%20will%20be%20given%205%20minutes'%20warning%20and%20then%20will%20be%20forced%20to%20reboot.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20I%20configured%20the%20'Always%20automatically%20restart'%20GPO%20for%20180%20minutes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhich%20is%20it%3F%26nbsp%3B%20Will%20the%20computer%20reboot%20in%205%20minutes%2C%20or%20180%20minutes%3F%26nbsp%3B%20They%20seem%20to%20conflict%20to%20me.%26nbsp%3B%20I%20don't%20want%20the%20user%20booted%20after%205%20minutes.%26nbsp%3B%20But%20I%20can't%20seem%20to%20figure%20out%20the%20resulting%20action%20with%20these%20two%20GPO%20set.%26nbsp%3B%20I%20performed%20a%20lot%20of%20research.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20help%2C%20Phil.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

I am configuring a new Windows 10 update scheme using Group Policy.

I won't post all of the details about how I have it configured, but I am running into a conflict in the descriptions of two GPO settings:

 

No auto-restart with logged on users for scheduled automatic update installations - Disabled.

Always automatically restart at the scheduled time - Enabled - 180 Minutes.

 

The 'No auto-restart' GPO description suggests that when a Windows Update is installed (scheduled for 4PM, daily), the user will be given 5 minutes' warning and then will be forced to reboot.

 

However, I configured the 'Always automatically restart' GPO for 180 minutes.

 

Which is it?  Will the computer reboot in 5 minutes, or 180 minutes?  They seem to conflict to me.  I don't want the user booted after 5 minutes.  But I can't seem to figure out the resulting action with these two GPO set.  I performed a lot of research.

 

Thanks for your help, Phil.

 

1 Reply

Hi @PhilM1435

 

When looking at the policy setting descriptions and the docs.microsoft page for Managed device restarts after updates, we can determine that the "default behavior" would be a warning and reboot in 5 minutes if you have "No auto-restart with logged on users for scheduled automatic update installations" set to Not Configured or Disabled.

 

Configuring the "Always automatically restart at the scheduled time" would then alter the "default behavior" to whatever value you set.

 

So theoretically the outcome would be a countdown to 180 minutes and then restart.

 

But as always be sure to test it out in a test environment or on a limited subject :)