Windows 10: Windows 10 restarting during Active Hours, updates KB4601345, KB4598230 for example.

I need some help with the configuration of this GPO.

The clients are restarting during the work hours.

May be I have some policy worng, can you review the configuration?


The last CU for Windows 10 for example force the restart of machine.

KB4601345, KB4598230


And the behavior that I have is the following:

The updates are downloading during night and during active hours too, this is fine?

Some updates are installing during active hours and restarting while the user are working, this is bad, true? Please I need fix this behavior.

PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Allow Automatic Updates immediate installation[/COLOR]Enabled
[COLOR=rgba0, 0, 255, 1]Automatic Updates detection frequency[/COLOR]Enabled
Check for updates at the following
interval hours: 12
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Configure Automatic Updates[/COLOR]Enabled
Configure automatic updating:4 - Auto download and schedule the install
The following settings are only required and applicable if 4 is selected.
Install during automatic maintenanceDisabled
Scheduled install day: 3 - Every Tuesday
Scheduled install time:02:00
If you have selected “4 – Auto download and schedule the install” for your scheduled install day and specified a schedule, you also have the option to limit updating to a weekly, bi-weekly or monthly occurrence, using the options below:
Every weekEnabled
First week of the monthDisabled
Second week of the monthDisabled
Third week of the monthDisabled
Fourth week of the monthDisabled
Install updates for other Microsoft productsEnabled
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box[/COLOR]Disabled
[COLOR=rgba0, 0, 255, 1]Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box[/COLOR]Disabled
[COLOR=rgba0, 0, 255, 1]Enable client-side targeting[/COLOR]Enabled
Target group name for this computerGroupX
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Remove access to use all Windows Update features[/COLOR]Disabled
[COLOR=rgba0, 0, 255, 1]Re-prompt for restart with scheduled installations[/COLOR]Enabled
Wait the following period before
prompting again with a scheduled
restart minutes: 30
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Reschedule Automatic Updates scheduled installations[/COLOR]Enabled
Wait after system
startup minutes: 15
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Specify active hours range for auto-restarts[/COLOR]Enabled
Specify the max active hours range:
Max range: 14
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Specify intranet Microsoft update service location[/COLOR]Enabled
Set the intranet update service for detecting updates:https://wsusserver
Set the intranet statistics server:https://wsusserver
Set the alternate download server:
example: https://IntranetUpd01
Download files with no Url in the metadata if alternate download server is set.Disabled
Do not enforce TLS certificate pinning for Windows Update client for detecting updates.
Select the proxy behavior for Windows Update client for detecting updates:
PolicySettingComment
[COLOR=rgba0, 0, 255, 1]Turn off auto-restart for updates during active hours[/COLOR]Enabled
Active Hours
Start: 8 AM
End:10 PM

I wait your comments and help.


best regards,

Roque.

:)

 

Installing Updates and Restarting During my Active Hours?

Hi,



Thank you for writing to Microsoft Community Forums.



We understand the inconvenience caused to you as the Active Hour feature is not working as it should be.
In order to get clarity and to assist you accordingly, please reply with the answers to the questions below.

• What is the Windows 10 version and Build installed? (Type
  winver in Windows search/Run command)
  
• Are you aware of any recent changes on the PC, prior to this issue?

Meanwhile, we would suggest you to perform these steps and check if that fix the issue.



Configuring active hours with Group Policy.



Please refer the section for Configure active hours
and make the changes accordingly. If the PC installed with Windows 10 Pro then follow the steps under
Configuring active hours with Group Policy and if it is
Windows 10 Home then follow steps under Configuring active hours through Registry
from this article: Manage device restarts after updates.



Note: Important this section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify
the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.



Follow the steps to take
backup of registry.




Please let us know the status of the issue,



Aditya Roy

Microsoft Community – Moderator

 

Windows update and restart during active hours

Hi susanahlburg,

There will be situations when Windows Update can override the set active hours due to a bug. As a workaround, I suggest that you set your connection as metered to control when updates are installed.

To set a Wi-Fi network connection as metered:

• Select Start > Settings > Network & Internet >
  Wi-Fi > Manage known networks.
• Select the Wi-Fi network > Properties > turn on Set as metered connection.

In addition, if you are experienced in modifying group policies and registry keys, you can configure a forced restart after a specified installation time, and then turn off auto-restart for updates during active hours. Should you choose to proceed with modifying
group policies and registry keys, I suggest that you seek assistance from an IT professional or technician to avoid further issues with the system. Here is an
article on how to manage device restarts after updates. Refer to
Schedule update installation and Delay automatic reboot.

Let us know how it turns out.

 

Windows 10 update being enabled.

Anyway , You are luckier than me. My computer was locked directly after updated to Windows 10 . but the solution is easy.