Windows OS Patching - UAT
Overview:
The Devicie Windows OS Patching - UAT template provides configuration to ensure Windows endpoints are receiving updates in a timely manner. This template is usually assigned to a group of users, preferably from different departments, to validate the Windows updates are not causing any bugs, errors, or performance degradation.
Feature and Quality updates will be automatically installed within two days. Quality updates are deferred for 7 days, Feature updates are deferred for 60 days. Windows drivers and Microsoft product updates are also deployed, where possible.
Intune Description:
Windows updates. Quality 7-day deferral, Feature 60-day deferral.
Scope:
This baseline should be applied to Users.
Policy Impact Areas:
When deployed, this policy will impact:
-
Enforcing Windows updates. Enforced within 2 days. Quality updates with 7 day deferral period, feature updates with 60 day deferral period.
Deployment Notes
-
Pre-Deployment Considerations:
-
Consider risk appetite for Windows update time to delivery. Alternate templates may be used with different timelines
-
-
Post-Deployment Validation:
-
Verify Windows active hours are set to 8am-5pm
-
Known Issues and Resolutions
-
Issue 1: None at this time
-
Resolution: N/A
-
Configuration Settings:
Name |
Value |
Settings |
|
Update settings |
|
Microsoft product updates |
Allow |
Windows drivers |
Allow |
Quality update deferral period (days) |
7 |
Feature update deferral period (days) |
60 |
Upgrade Windows 10 devices to Latest Windows 11 release |
No |
Set feature update uninstall period (2 - 60 days) |
30 |
Enable pre-release builds |
Not configured |
User experience settings |
|
Automatic update behavior |
Auto install and restart at maintenance time |
Active hours start |
8 AM |
Active hours end |
5 PM |
Restart checks (EDU Restart) |
Allow |
Option to pause Windows updates |
Disable |
Option to check for Windows updates |
Enable |
Change notification update level |
Use the default Windows Update notifications |
Use deadline settings |
Allow |
Deadline for feature updates |
2 |
Deadline for quality updates |
2 |
Grace period |
0 |
Auto reboot before deadline |
No |
Devicie Template Name |
Windows OS Patching - UAT (User) |
Default Intune Deployed Name |
Devicie - Windows OS Patching - UAT (User) |
Version |
1.0 |
Template Last Updated |
Nov 18, 2025 |
Document Last Updated: |
Jul 24, 2025 |