Body
Understand the Windows update process for MHC-owned office computers running Windows 11.
Overview
MHC's Windows update configuration is designed to align with the experience that a user might have on their personally-owned computer at home, while enforcing a deadline to install updates that meets our security guidance.
For the best experience,
don't turn off your computer at the end of the day. Instead, close out all the programs you had open, then let the machine go to sleep:
- Laptops: Simply close the lid. Plug in the computer to power (updates will not occur on battery).
- Desktops: Lock the screen (windows button + L) and turn off the monitor.
What is the Windows update process?
- Computers check for updates several times a day. Updates will be downloaded and staged, and a deadline set for 21 days from release day.
- The computer will attempt to restart outside of normal usage hours (called "Active Hours") for that computer.
- If open applications or other factors prevent restarts, the computer continue to attempt to restart.
- At the deadline, if the computer has been unsuccessful in restarting, it will notify of the pending restart and offer options for managing the restart.
- A grace period of 7 days is available to allow for vacation, out of office, and busy weeks.
- After the deadline plus grace period has passed (28 days since the patch was released), the computer will notify for a restart -- which may finally occur during active hours.
By the time you see a "Your organization requires a restart" message, your computer has already tried multiple times to restart overnight.
Optional updates
Optional updates, such as those provided by a hardware component manufacturer, such as Intel or Dell, are not automatically installed. LITS will alert the MHC community if any urgent updates are released. Otherwise it's a good idea to periodically check for these updates.
- Go to Settings > Windows Updates
- Go to Advanced options > Optional updates
- Select the driver and other updates you would like to install
- Follow any instructions shown in the update or restart windows (such as not interrupting the update)
Find applied update settings
To find which updates are applied to a computer, follow these steps:
- Go to Settings > Windows Update
- Go to Advanced options > and scroll down for Configured update policies
- The list shows which policies for Windows update settings are applied to the computer along with descriptions of the settings