Update management settings
The Update management settings configure automatic update settings for a Windows device. These settings are independent of the MaaS360® Advanced Patch Management service for Laptops and Desktops, which is a stand-alone cloud-based patch management service that is provided by MaaS360.
| Policy setting | Description | Supported devices |
|---|---|---|
| Configure update settings | Enable this setting to configure the update management settings. |
|
| Disallow user to scan windows update | Enable this setting to prevent the user from scanning for Windows Updates. |
|
| Disallow user to pause updates | Enable this setting to prevent the user from pausing the Windows Updates. |
|
| Update service channel | Specifies when and how Windows devices receive
feature updates and quality updates. A service channel is a new method that is provided by Microsoft to deliver feature updates and quality updates to Windows 10+ devices. For more information on Windows as a service and service channels, see https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview#servicing-channels. The following service channels are available.
Note: You cannot set the Semi-Annual Channel option for Windows 10 version 1903 and later devices. Setting this option
might cause other settings to not work properly on a device.
|
|
| Configure install options | Choose from the options about update installation and user notification behavior to scan, download, and install updates. |
|
| Installation day |
Select the day of the week when updates must be installed. This parameter is available only if Configure Install options is either of Auto install and restart at specific time or Auto install and restart without user interaction. |
|
| Installation time |
Select the time of the day when updates must be installed. This parameter is available only if Configure Install options is either of Auto install and restart at specific time or Auto install and restart without user interaction. |
|
| Active hours start time | Specify the start time during which update reboots are not permitted on the device. This
period must end no later than 18 hours after the specified end time. The supported values are 0 - 23, where 0 is 12 AM, 1 is 1 AM. The default value is 8 (8 AM). This option applies to the auto installation and restart without user interaction and the auto installation and restart at specific time settings. Note: This
option is supported on Windows 10 version 1607 and later.
|
|
| Active hours end time | Set the end time during which update reboots are restricted on the device. The duration from
the specified start time must not exceed 12 hours. The supported values are 0 - 23, where 0 is 12 AM, 1 is 1 AM. The default is 17 (5 PM). Note: This option is supported on Windows 10 version 1607 and later.
|
|
| Update drivers as part of quality updates | Drivers are updated during a scheduled update. Note: This option is supported on Windows 10 version 1607 and later.
|
|
| Allow app updates from microsoft service | Enable this setting to receive app updates from Microsoft Update. |
|
| Disable Update Service | Enabling this policy prevents devices from downloading updates from Microsoft Update and the Microsoft Store. To provide updates from your organization instead, enter the URL of your internal update service (such as a WSUS server). |
|
| Restart prompt duration | Specifies the time that restarts reminder notifications are automatically sent to the
administrator after the update on the devices is complete. The supported values are 15, 30, 60, 120, and 240 minutes. The default value is 15 minutes. Note: This option is supported on Windows 10 version 1703 and later.
|
|
| Defer quality updates (days) | Specifies the number of days (0 - 30 days) to defer quality updates on Windows devices. The default value is 7 days. |
|
| Defer feature updates (days) | Specifies the number of days (0 - 365 days) to defer feature updates on Windows devices. |
|
| Update scan frequency (Every) | The frequency at which a patch scan needs to be performed. |
|
| Allow update service | Enabling this setting disables public updates from Microsoft updates or the Microsoft Store. |
|
| Configure URL for update service | Specify the intranet update service or WSUS URL to check for updates from the WSUS server
instead of from a Microsoft update. Use this option to
update devices that cannot connect to the internet. Note: If you want to change the URL to check for
updates, you cannot reset this value over-the-air (OTA). You must initiate MDM control removal on
the device.
|
|
| Windows update notifications | Specifies which Windows Update notifications are visible to users. This setting does not affect the timing or method of update downloads and installations. |
|
| Notify user before restart (Minutes) | Specify the amount of time before a scheduled restart to notify the user. |
|
| Allow user to dismiss restart notification | Enable the setting to allow the user to close restart notification. |
|
| Configure deadline and grace period | Enable this setting to allow the user to configure deadline and grace period. |
|
| Deadline for quality updates (Days) | Number of days before quality updates are installed on devices automatically regardless of active hours. |
|
| Deadline for feature updates (Days) | Number of days before feature updates are installed on devices automatically regardless of active hours. |
|
| Grace period for feature updates (Days) | The minimum number of days from update installation until restarts occur automatically for feature updates. |
|
| Grace period for quality updates (Days) | The minimum number of days from update installation until restarts occur automatically for quality updates. |
|