Windows 10: Windows Updates GPO settings?

Just wondering here on this GPO setting which I am considering to change from Option 2 to Option 4 is which to Download the Updates automatically and have those installed on a schedule.
The default schedule is 3:00AM but I tend to leave my laptop off entirely during the night and most of the day.
Therefore, my question is, when the time passes to install the updates, will the system continue to install the updates even if the desired time schedule is missed due to leaving the machine OFF?

I would guess that Option 4 is more better suited for enterprises where machines are left powered ON the whole time.

Or is it just better to leave it at Option 2 (Notify for Download and Auto Install)?

:)

 

GPOs linked to user OUs not appearing in Results Wizard

Hello, I'm noticing an issue in my domain where GPOs linked to user OUs are not being applied and not even appearing in the Group Policy Results Wizard report (neither under Applied GPO's nor Denied GPO's, like they don't exist at all).

A few clues:

• I did recently release June Windows updates including MS16-072. However, I was aware of the security processing change and all the related GPO's already had "Authenticated Users" with Read and Apply permission. I added "Domain Computers" to one GPO as a
  test but no luck.
• So far, issue is appearing on Windows 10 computers only. Computers are correctly processing GPO's linked to the computer's OU/hierarchy. A GPO containing loopback-processed user settings does appear under the user settings in the Results wizard, but that
  GPO is linked to a "computers" OU.
• If I link a "user" GPO to a "computers" OU, it appears in the Results Wizard under user settings. However, this is a drastic change in behavior and will interfere with desired outcomes such as a user having drives mapped to their department's files regardless
  of which computer they use.

Please advise, do I need to adjust some setting in Windows 10 to restore processing of GPO's linked to user OU's?

Thanks in advance for any assistance.

 

Update KB4056892 (Meltdown, Spectre) not offered

I will look into that. The settings "Windows Update for Business GPO" have just been introduced recently with build 1709, so I don't know what the settings are in our Active Directory.

 

Definitely leave on Notify. That way you've control of everything and can choose to e.g. update a disk image set before any update, complete work... then approve the update.

Should you miss it for some reason it'll be caught on a subsequent update scan.

(The scheduled option also refers to updates being applied as part of automatic maintenance, which can be set to wake the machine and thus also update it).