📘 How to Configure Windows Updates to Run Outside Working Hours via Group Policy

This guide configures Windows devices to download and install updates only outside of business hours (between 4:30 PM and 6:30 AM) using Group Policy.

Step 1: Open Group Policy Management Console

Start → Run → gpmc.msc

Step 2: Create or Edit a GPO

1. Navigate to the appropriate OU or domain.
2. Right-click and select "Create a GPO in this domain, and Link it here..." or edit an existing one.
3. Right-click the GPO and choose Edit.

Step 3: Configure Windows Update Settings

Go to:

Computer Configuration
 └── Policies
     └── Administrative Templates
         └── Windows Components
             └── Windows Update
                 └── Manage end user experience

Set Active Hours

Find the policy:

Turn off auto-restart for updates during active hours

Enable this setting and configure:

• Start time: 6:30 AM
• End time: 4:30 PM

This prevents auto-restart during business hours.

Configure Automatic Updates

Open the policy:

Configure Automatic Updates

Enable this policy and set it to:

4 - Auto download and schedule the install

Then set the scheduled install time outside business hours, for example:

• Every day at 5:00 PM

Step 4: Configure Automatic Maintenance (Optional)

To schedule general maintenance tasks (including updates):

Computer Configuration
 └── Administrative Templates
     └── Windows Components
         └── Maintenance Scheduler

• Enable and set the time for automatic maintenance to run after hours (e.g., 5:00 PM).

Step 5: Apply and Test

Run this command on a target machine to apply the new settings:

gpupdate /force

Then verify by opening Windows Update Settings on a client machine and checking the active hours and scheduled install time.

---

Note: Clients must be running Windows 10 1607 or newer for Active Hours GPO to work.