Windows Update Ring Issue
Question
Hello All, need one help….For the past few weeks, we have been conducting UAT for a new windows update ring for a specific set of devices. The main goal is that the target devices must be restarted on Sunday only…we have set 20 days deferral period, 2 days deadline, 5 days Grace period and disabled no reboot before deadline option, but we observed that devices are getting restarted before the Grace period ends.. can anyone suggest, is it a expected behavior ? If yes, can you suggest me the correct way of doing it to fulfill our requirement ?
Answer ( 1 )
Hi Pratap,
Why Devices Might Be Restarting Early. The grace period only applies after the deadline has passed.
So, If update is available on Day 0, then:
Deadline = Day 2
Grace period = Days 3–7
Forced restart should happen after Day 7
However, if “No auto-restart with logged on users…” is disabled:
Windows can automatically restart the device when:
The deadline has passed
No user is logged in (or user is inactive)
This means a reboot can happen anytime after the deadline and during grace, if the system finds a window to do so.
Some configurations allow active hours and automatic maintenance windows to trigger earlier restarts
Regarding Sunday Reboot : Unfortunately, Intune Windows Update Rings do not offer a direct policy setting to restrict reboots to a specific day (like Sunday)
Set Active Hours to span most of the day Monday–Saturday, to block restarts.
Let Sunday be mostly outside active hours, allowing reboot.
Example:
Active Hours: Mon–Sat, 08:00 to 23:00
Sunday: No active hours set (or short period)
Combine this with a long grace period (e.g., 6–7 days) so that the device waits for reboot longer.
You can also leverage tasksheduler or Windows Autopatch (if applicable) to configure this requirement