Can't get updates (cumulative, feature, or otherwise) to happen (download, stage, restart, finish install) automatically with GPO.

Question

I need updates to happen (download, stage, restart, finish install) automatically without disrupting the user or requiring their input. Ideally, this would be done via GPO.

I've tried attacking it from different angles somewhat outlined here https://learn.microsoft.com/en-us/windows/deployment/update/waas-wufb-group-policy but I can't consistently get them past the "pending restart" phase.

This includes enabling (in order):

• "target windows feature update" -- machines stuck at pending restart with updates staged.
• "configure automatic updates" GPO to "Auto download and schedule the install" for "3am" -- doesn't seem to do anything as machines still stuck at 'pending' restart
• setting active hours with 'turn off restarts during these active hours' gpo
• "specify deadlines for automatic updates and restarts" -- didn't restart the machine and finish install during off-hours, now is threatening to force the update whenever it wants

An example problematic machine is running W10 Enterprise 20H2 OS build 19042.1288, which is Semi-Annual Channel (SAC).

Answer 1

"We need your help" <- the problem

Answer 2

Bumping this question.