Deferring Updates

Hi guys, I apologise if this has been previously discussed but I couldn’t find clarity on the answer we require.
We have recently upgraded to the latest creators fall feature update and unfortunately for us it pushed its self through with a restart when one of PCs was on site which cost us a tidy penny on the evening.
I’m looking for a way to defer both ‘feature’ updates and the usual smaller security updates so I may do them at a time that suits the business. I have clicked the defer option and selected 365 and played with the group policy settings setting the windows update to 2 - Just notify. Was this the correct way to do this and have I missed anything because we can’t be in a position on evenings when computers are turned on that any update can be pushed though.

Sorry for what may seem a novice question

Thanks in advance

Paul

Hi, Notify is a good setting for updates.

Defer:


Windows Update - Defer Feature and Quality Updates in Windows 10 Windows 10 Tutorials

No auto restart:


You might consider:

My (limited) understanding is that pause affects when the system scans for updates

You can also pause a system from receiving Quality Updates for a period of up to 35 days from when the value is set. After 35 days has passed, pause functionality will automatically expire and the system will scan Windows Updates for applicable Quality Updates. Following this scan, Quality Updates for the device can then be paused again.

Configure Windows Update for Business (Windows 10) | Microsoft Docs

Notify gives you (as you know) the option to allow the download to proceed or not.

That is, these are two separate things.

However, it's always possible that MS- as with metered connections- may have a policy of overriding user choices in some circumstances.

I've not tested what you're asking... but I've never had an unscheduled update-related restart either.

Paul121177 said:

Thanks for the quick response. Is there a way of defering quality updates for longer than 30 days as set in advanced settings. Does group policy setting to notify supersede this?

In The CU I had it set in Group Policy to delay for 365 Days

Deferred upgrades, notify, active hours. And I switch my PC off overnight.

(I found it interesting that a couple of times when I'd accepted an update which was due to restart during Active Hours, that actually nothing happened when the Active Hours period expired).