Skip to content
  • There are no suggestions because the search field is empty.

Windows OS Patching

Overview:

The Devicie Windows Operating System template provides configuration to ensure Windows endpoints are receiving updates in a timely manner. Feature and Quality updates will be automatically installed within two days. Quality updates are deferred for 14 days; Feature updates are deferred for 90 days. Windows drivers and Microsoft product updates are also deployed, where possible.

Intune Description:

Windows updates. Quality 14-day deferral, Feature 90-day deferral.

Scope:

This baseline should be applied to Users.

Policy Impact Areas:

When deployed, this policy will impact:

  • Enforcing Windows updates. Enforced within 2 days. Quality updates with 14-day deferral period, feature updates with 90-day deferral period.

Deployment Notes

  1. Pre-Deployment Considerations:

    • Consider risk appetite for Windows update time to delivery. Alternate templates may be used with different timelines

  2. Post-Deployment Validation:

    • Verify Windows active hours are set to 8am-5pm

Known Issues and Resolutions

  • Issue 1: None at this time

    • Resolution: N/A 

Configuration Settings:

Name

Value

Settings

Update settings

Microsoft product updates

Allow

Windows drivers

Allow

Quality update deferral period (days)

14

Feature update deferral period (days)

90

Upgrade Windows 10 devices to Latest Windows 11 release

No

Set feature update uninstall period (2 - 60 days)

30

Enable pre-release builds

Not configured

User experience settings

Automatic update behavior

Auto install and restart at maintenance time

Active hours start

8 AM

Active hours end

5 PM

Restart checks (EDU Restart)

Allow

Option to pause Windows updates

Disable

Option to check for Windows updates

Enable

Change notification update level

Use the default Windows Update notifications

Use deadline settings

Allow

Deadline for feature updates

2

Deadline for quality updates

2

Grace period

0

Auto reboot before deadline

No

 

Devicie Template Name

Windows OS Patching (User)

Default Intune Deployed Name

Devicie - Windows OS Patching (User)

Version

3

Template Last Updated

Nov 18, 2024

Document Last Updated:

Jul 24, 2025