MCM install software update and restart when without user login

Question

MCM install software update and restart when without user login

Chong 871

Hi,

In MCM, can we create the package only will install and restart client without user login. If any user login the client, the update will not install and wait until next evaluation checking?

Thanks

1 answer

Your answer

Answer 1

AllenLiu-MSFT 49,311 Microsoft External Staff

Hi,

Thank you for posting in Microsoft Q&A forum.

You may configure the maintenance window, then the updates will only install within the maintenance window.

To achieve this, you can create a required deployment with an installation deadline and select the option to suppress system restarts for servers and workstations. This will ensure that the software updates are installed, and the system is restarted automatically without user intervention.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Chong 871 Reputation points

2024-01-08T07:55:31.2933333+00:00

My target is configured a deployment that if the machine don't have user login at specific time (e.g. 2AM), the update will be installed. But if there are user using the machine at 2AM, the update will not install or restart.
Sherry Kissinger 5,526 Reputation points

2024-01-08T18:50:41.1966667+00:00

My opinion... who provided you this requirement? You may want to 'manage expectations' with that person or manager.

Although there are convoluted methods to configure 'things' to not run when a user is logged on, they are convoluted, and in my opinion, unnecessary, when a simple conversation about Service Windows will suffice.

If you haven't already researched and read how Service Windows work in CM please do that first, then have a conversation with that person who gave you that "no user logged in requirement", to instead work with them for THEM to provide you with Acceptable Service Windows for a set of devices.

Just ensure that whatever Service Window they provide, it at a minimum 4 consecutive Hours, and I would suggest at least weekly, more often if possible.

For example, there are many scenarios where a line of business may indicate that "these 20 machines" can get updates and reboot on Saturday and Sunday, from midnight to midnight. and "these 20 machines" can get updates and reboot nightly between 11pm and 4am. and these 20 machines can get updates between 4am and noon.

again, my opinion... but if the criteria is "no user logged on", what happens is people are... people. And they simply will never, ever logoff. ever.
Chong 871 Reputation points

2024-01-08T20:00:46.45+00:00

Thanks for your opinion.

The management have this requirement as we using WSUS for patching and can control this type of requirement. Now we move to MCM so they still have this requirement.

Anyway, can we control the update still install in the machine but user can delay the restart?

So if no user login, the update will install and then machine reboot. When have user login, user will have notification and control the machine reboot later.
AllenLiu-MSFT 49,311 Reputation points Microsoft External Staff

2024-01-09T05:57:23.36+00:00

Hi, @Chong

We can configure device restart notifications in client settings to make the user control the machine reboot later.

For the details:

https://learn.microsoft.com/en-us/mem/configmgr/core/clients/deploy/device-restart-notifications#client-settings
AllenLiu-MSFT 49,311 Reputation points Microsoft External Staff

2024-01-11T07:03:57.8+00:00

Just checking if there's any progress or updates?

Share via

MCM install software update and restart when without user login

1 answer

Your answer