Intune - Update rings "deadline" configuration

Question

Intune - Update rings "deadline" configuration

David Moon 631

Hi All

So this is my understanding of these settings.

Deferral period (8 days) - Updates are deferred for set amount of days. So here, patches will show up in Windows Update section 8 days after patch Tuesday.

Deadline (7 days) - Is how long patch will stay available in Windows Update section until force installed. So force installed 15 days after patch Tuesday.

Grace period (3 days) - Is how long until a reboot is forced. So 3 days after pending reboot.

However, in one environment, i saw big number of devices being compliant from around 9th day after patch Tuesday.

Hence my question about "Deadline" setting. So is this the number of days from Patch Tuesday? Or after the deferral period?

Thanks.

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Lu Dai-MSFT 28,516

@David Moon Thanks for posting in our Q&A.

It is an expected behavior. From your settings, when the device gets the update patch, windows update will start after 8 days.

The deadline and grace are configured for the latest time to start windows update. What did you configure "Automatic update behavior"? For example, if you set it to "Auto install at maintenance time", but when the device is in use, it will not start windows update. So, the Windows update will be completed by the 16th day at the latest.

Hope it will clarify something.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

David Moon 631 Reputation points

2023-07-12T03:42:31.82+00:00

Thanks for the quick Reply.

The deadline and grace are configured for the latest time to start windows update.

I'm not sure what you mean by this. Are you able to clarify this statement please?

"Automatic update behavior" is set as "Auto install at maintenance time".

So you said based on my configuration, you said the device should be patched by 16th day after patch Tuesday.

So if that is the case,

Deferral (8 days) + Deadline (7 days) = patch and reboot after 15th day?

So when does the Grace Period (3 days) come into play?

After the PC gets patched on 15th day after the deadline, if no action is taken by user, shouldn't it wait for another 3 days, before a forced reboot is triggered? (Provided the machine is never shutdown by the user).

Thanks, Dave.
Lu Dai-MSFT 28,516 Reputation points

2023-07-12T05:56:46.61+00:00

@David Moon I just count patch Tuesday as the first day. So according to my algorithm is 16th day.

Grace period is configured to define the number of days from update installation until restarts occur automatically. Based on my understanding, if you restart the device manually, it will not wait for 3 days. If you want this device restart automatically, it will wait for 3 days.

Share via

Intune - Update rings "deadline" configuration

0 additional answers

Your answer