# 📘 How to Configure Windows Updates to Run Outside Working Hours via Group Policy

#   


This guide configures Windows devices to download and install updates only **outside of business hours** (between 4:30 PM and 6:30 AM) using Group Policy.

## Step 1: Open Group Policy Management Console

```
Start → Run → gpmc.msc
```

## Step 2: Create or Edit a GPO

1. Navigate to the appropriate **OU** or domain.
2. Right-click and select **"Create a GPO in this domain, and Link it here..."** or edit an existing one.
3. Right-click the GPO and choose **Edit**.

## Step 3: Configure Windows Update Settings

Go to:

```

Computer Configuration
 └── Policies
     └── Administrative Templates
         └── Windows Components
             └── Windows Update
                 └── Manage end user experience

```

### Set Active Hours

Find the policy:

```
Turn off auto-restart for updates during active hours
```

**Enable** this setting and configure:

- **Start time:** 6:30 AM
- **End time:** 4:30 PM

This prevents auto-restart during business hours.

### Configure Automatic Updates

Open the policy:

```
Configure Automatic Updates
```

**Enable** this policy and set it to:

```
4 - Auto download and schedule the install
```

Then set the scheduled install time outside business hours, for example:

- **Every day at 5:00 PM**

## Step 4: Configure Automatic Maintenance (Optional)

To schedule general maintenance tasks (including updates):

```

Computer Configuration
 └── Administrative Templates
     └── Windows Components
         └── Maintenance Scheduler

```

- **Enable** and set the time for automatic maintenance to run after hours (e.g., 5:00 PM).

## Step 5: Apply and Test

Run this command on a target machine to apply the new settings:

```
gpupdate /force
```

Then verify by opening **Windows Update Settings** on a client machine and checking the active hours and scheduled install time.

---

*Note: Clients must be running Windows 10 1607 or newer for Active Hours GPO to work.*