Force install updates on PC shutdown and restart on Windows 10/11

Question

Hello,

Having set up a WSUS server to manage updates within my company,

I want updates to install automatically when PCs are shut down and restarted but I can't use active hours because it's not possible to set active hours to suit all services of the company.

The concern being that on Windows 10 and 11, the user has the choice of restarting or shutting down the machine without installing the updates, which means that many machines are left with updates awaiting restart, in particular the updates feature day.

I would therefore like to be able to remove the possibility for the user to stop or restart the machine without doing the updates.

But I did not find this possibility by GPO, do you have any ideas?

Thanks in advance,

Best regards,

Hugo LEGEARD.

Answer 1

Try navigating to Computer Configuration > Windows Update policy settings, there is a policy called Do not display Install updates and Shut Down option in Shut Down Windows dialog, you may set it to Disabled and see if it works as you expected.