Edytuj

Udostępnij za pośrednictwem

Windows quality update policies

  • Artykuł

Important

The information in this article or section only applies if you have Windows Enterprise E3+ or F3 licenses (included in Microsoft 365 F3, E3, or E5) licenses and have activated Windows Autopatch features.

Feature activation is optional and at no additional cost to you if you have Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) licenses.

For more information, see Licenses and entitlements. If you choose not to go through feature activation, you can still use the Windows Autopatch service for the features included in Business premium and A3+ licenses.

Conflicting and unsupported policies

Deploying any of the following policies to a Windows Autopatch device makes that device ineligible for management since the device prevents us from delivering the service as designed.

Update policies

Window Autopatch deploys mobile device management (MDM) policies to configure devices and requires a specific configuration. If any policies from the Update Policy CSP are deployed to devices that aren't on the permitted list, those devices are excluded from management.

Allowed policy Policy CSP Description
Active hours start Update/ActiveHoursStart This policy controls the end of the protected window where devices don't restart.

Supported values are from zero through to 23, where zero is 12∶00AM, representing the hours of the day in local time on that device. This value can be no more than 12 hours after the time set in active hours start.
Active hours end Update/ActiveHoursEnd This policy controls the end of the protected window where devices don't restart.

Supported values are from zero through to 23, where zero is 12∶00AM, representing the hours of the day in local time on that device. This value can be no more than 12 hours after the time set in active hours start.
Active hours max range Update/ActiveHoursMaxRange Allows the IT admin to specify the max active hours range.

This value sets the maximum number of active hours from the start time. Supported values are from eight through to 18.

Group policy and other policy managers

Group policy and other policy managers can take precedence over mobile device management (MDM) policies. For Windows quality updates, if any policies or configurations are detected which modify the following hives in the registry, the device could become ineligible for management:

  • HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate