📘 How to Configure Windows Updates to Run Outside Working Hours via Group Policy

This guide configures Windows devices to download and install updates only outside of business hours (between 4:30 PM and 6:30 AM) using Group Policy. 
 Step 1: Open Group Policy Management Console 
 Start → Run → gpmc.msc 
 Step 2: Create or Edit a GPO 
 
 Navigate to the appropriate OU or domain. 
 Right-click and select "Create a GPO in this domain, and Link it here..." or edit an existing one. 
 Right-click the GPO and choose Edit . 
 
 Step 3: Configure Windows Update Settings 
 Go to: 
 
Computer Configuration
 └── Policies
 └── Administrative Templates
 └── Windows Components
 └── Windows Update
 └── Manage end user experience
 
 Set Active Hours 
 Find the policy: 
 Turn off auto-restart for updates during active hours 
 Enable this setting and configure: 
 
 Start time: 6:30 AM 
 End time: 4:30 PM 
 
 This prevents auto-restart during business hours. 
 Configure Automatic Updates 
 Open the policy: 
 Configure Automatic Updates 
 Enable this policy and set it to: 
 4 - Auto download and schedule the install 
 Then set the scheduled install time outside business hours, for example: 
 
 Every day at 5:00 PM 
 
 Step 4: Configure Automatic Maintenance (Optional) 
 To schedule general maintenance tasks (including updates): 
 
Computer Configuration
 └── Administrative Templates
 └── Windows Components
 └── Maintenance Scheduler
 
 
 Enable and set the time for automatic maintenance to run after hours (e.g., 5:00 PM). 
 
 Step 5: Apply and Test 
 Run this command on a target machine to apply the new settings: 
 gpupdate /force 
 Then verify by opening Windows Update Settings on a client machine and checking the active hours and scheduled install time. 
 
 Note: Clients must be running Windows 10 1607 or newer for Active Hours GPO to work.