Skip to content
  • There are no suggestions because the search field is empty.

Windows OS Patching - UAT

Overview:

The Devicie Windows OS Patching - UAT template provides configuration to ensure Windows endpoints are receiving updates in a timely manner. This template is usually assigned to a group of users, preferably from different departments, to validate the Windows updates are not causing any bugs, errors, or performance degradation.

Feature and Quality updates will be automatically installed within two days. Quality updates are deferred for 7 days, Feature updates are deferred for 60 days. Windows drivers and Microsoft product updates are also deployed, where possible. 

Intune Description:

Windows updates. Quality 7-day deferral, Feature 60-day deferral.

Scope:

This baseline should be applied to Users.

Policy Impact Areas:

When deployed, this policy will impact:

  • Enforcing Windows updates. Enforced within 2 days. Quality updates with 7 day deferral period, feature updates with 60 day deferral period.

Deployment Notes

  1. Pre-Deployment Considerations:

    • Consider risk appetite for Windows update time to delivery. Alternate templates may be used with different timelines

  2. Post-Deployment Validation:

    • Verify Windows active hours are set to 8am-5pm

Known Issues and Resolutions

  • Issue 1: None at this time

    • Resolution: N/A 

Configuration Settings:

Name

Value

Settings

Update settings

Microsoft product updates

Allow

Windows drivers

Allow

Quality update deferral period (days)

7

Feature update deferral period (days)

60

Upgrade Windows 10 devices to Latest Windows 11 release

No

Set feature update uninstall period (2 - 60 days)

30

Enable pre-release builds

Not configured

User experience settings

Automatic update behavior

Auto install and restart at maintenance time

Active hours start

8 AM

Active hours end

5 PM

Restart checks (EDU Restart)

Allow

Option to pause Windows updates

Disable

Option to check for Windows updates

Enable

Change notification update level

Use the default Windows Update notifications

Use deadline settings

Allow

Deadline for feature updates

2

Deadline for quality updates

2

Grace period

0

Auto reboot before deadline

No

Devicie Template Name

Windows OS Patching - UAT (User)

Default Intune Deployed Name

Devicie - Windows OS Patching - UAT (User)

Version

1.0

Template Last Updated

Nov 18, 2025

Document Last Updated:

Jul 24, 2025