Configure Automatic Updates, how exactly do the "weekly" options work?

Question

With the newer versions of Windows 10 in the GPO's for Configure Automatic Updates there was added the ability to control weekly, bi-weekly, monthly through the addition of new settings that map to new registry values. The issue I have is the documentation doesn't describe this in detail enough to answer some questions I have. Scouring the web I haven't found my answer yet either.

From the image below you can see the new options for First, Second, Third, Fourth week of the month but my issue is what defines a week? Do these correspond to Microsoft's Patch Release weeks? 222376

IE week 2 = B, week 3 = C, week 4 = D Meaning that even if a month starts on a Wed, Thu, Friday that's not week 1 because there isn't a Tuesday in it to be the first "patching" week of a month allowing the 2nd week to be the 2nd Tue of the month?

Or does a month starting on Wed, Thu, Fri count as week 1 for this setting which if it does throws patch Tuesday's out of whack?

Answer 1

Hello @Leith Tussing ,

Thank you for posting here.

Based on my understanding and discussion with my colleague, I think the option 2 from you is the correct understanding for one week. I mean a complete week is a week.

Option 1
IE week 2 = B, week 3 = C, week 4 = D Meaning that even if a month starts on a Wed, Thu, Friday that's not week 1 because there isn't a Tuesday in it to be the first "patching" week of a month allowing the 2nd week to be the 2nd Tue of the month?

Option 2
Or does a month starting on Wed, Thu, Fri count as week 1 for this setting which if it does throws patch Tuesday's out of whack?

For example (October):

Hope the information above is helpful. If anything is unclear, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Who is to say Sunday is the first day of the week? What if it was Monday, or even Tuesday as you suggest.

My belief is that for your example your Windows 10 (build 1709) and Windows Server 2019 computers will check for updates on the second Tuesday and third Tuesday of each month.

Option 3
A month starting on Wed, then Wed, Thu, Fri, Sat, Sun, Mon, Tue count as week 1.

But there is an easy way to answer to your question:

• Set it to Every Tuesday and only Fourth week of the month
• Release an update on patch Tuesday
• Check which date the patch applied

This raises several other questions (which can be answered the same way)

• If a computer is turned off for the week/day it is supposed to patch, will it patch when it is turned back on, or wait until the following month?
• If a computer is set to patch in the first week and you release patches in the second week will it wait until the following month?
• If you do a clean install, will it have to wait for the right week before it gets any patches?

That last one can be resolved with a "NewBuild" policy that applies updates daily. Once a computer has patched that policy can be removed. Alternatively you can trigger patching during the build.

Answer 3

Hi.
Just a quick question...
We have a maintenance window evert last Tuesday of the month.
Can we use the "Forth week of the month" option with the logic provided here.

Just as for example August 2022 is interesting as it falls on the fifth Tuesday of the month (last Tuesday of the month).
Would the option "Forth week of the month" initiate patches on both 23 of August and 30 of August.

Or what sort of WSUS "automation" options do I have when our Maintenance is on the last Tuesday of the month.
Thanks - salle