-->
Clicking the Update now button will query Microsoft to see if any updates are available. Checking this box should pop up a notification that Windows will eventually restart and install. So this annoying message popup, like the lockscreen does, alt tabbing you out of games, fullscreen apps, and takes completely control over everything, there is no way to get back into what u wanted until you hit GET UPDATES, at this point and time it will load Windows Update but wont download anything because i have it said to notify but thats all, this is something new it only used to show.
If you don't want to receive notifications when a restart is required to apply updates, Windows 10 includes at least two ways to disable this feature using the Windows Update settings or the Local. On the Windows Server 2016 I have Click-To-Run Microsoft Office 365 For Enterprise installed. Users get annoyed with the following banner. I tried to disabled updates with local policies and modifying registry but it still pops up. Could someone please advise how to disable it permanently. Microsoft's free monthly Security Notification Service provides links to security-related software updates and notification of re-released security updates. You can choose between basic and comprehensive formats.These notifications are written for IT professionals, contain in-depth technical information, and are digitally-signed with PGP.
View the Windows 10 Update settings you can configure and manage with Microsoft Intune.
When you configure settings for Windows 10 update rings in Intune, you're configuring the Windows Update settings. If a Windows update setting has a Windows 10 version dependency, the version dependency is noted in the settings details.
Update settings
Update settings control what bits a device will download, and when. For more information about the behavior of each setting, see the Windows reference documentation.
Servicing channel
Default: Semi-Annual Channel
Windows Update CSP: Update/BranchReadinessLevelSet the channel (branch) from which the device receives Windows updates. Different Windows 10 servicing channels can use different deferral periods before updates are delivered.
Intune supports the following Windows 10 Servicing channels:
- Semi-Annual Channel
- Semi-Annual Channel (targeted) for 1809 and below
- Windows Insider – Fast
- Windows Insider – Slow
- Windows Insider - Release Preview
If you select an Insider channel, Intune automatically configures the Windows update setting Update/ManagePreviewBuilds so that the insider build will work.
Important
Beginning with Windows version 1903, the use of the Semi-Annual Channel (targeted) (SAC-T), is retired. With this change, SAC-T merges with the Semi-Annual Channel. To learn more about this change and how it affects Windows Update for Business, see the Windows IT Pro Blog post Windows Update for Business and the retirement of SAC-T.
Microsoft product updates
Default: Allow
Windows Update CSP: Update/AllowMUUpdateService- Allow - Select Allow to scan for app updates from Microsoft Update.
- Block - Select Block to prevent scanning for app updates.
Windows drivers
Default: Allow
Windows Update CSP: Update/ExcludeWUDriversInQualityUpdate- Allow - Select Allow include Windows Update drivers during updates.
- Block - Select Block to prevent scanning for drivers.
Quality update deferral period (days)
Default: 0
Windows Update CSP: Update/DeferQualityUpdatesPeriodInDaysSpecify the number of days from 0 to 30 for which Quality Updates are deferred. This period is in addition to any deferral period that is part of the service channel you select. The deferral period begins when Microsoft releases the update.
Quality Updates are typically fixes and improvements to existing Windows functionality.
Feature update deferral period (days)
Default: 0
Windows Update CSP: Update/PauseFeatureUpdatesPeriodInDaysSpecify the number of days for which Feature Updates are deferred. This period is in addition to any deferral period that is part of the service channel you select. The deferral period begins when Microsoft releases the update.
Supported deferral period:
- Windows version 1709 and later - 0 to 365 days
Feature Updates are typically new features for Windows.
Set feature update uninstall period (2 – 60 days)
Default: 10
Windows Update CSP: Update/ConfigureFeatureUpdateUninstallPeriodConfigure a time after which feature updates can't be uninstalled.
After this period expires, the previous update bits are removed from the device, and it can no longer uninstall to a previous update version.
For example, consider an update ring with a feature update uninstall period of 20 days. After 25 days, you decide to roll back the latest feature update and use the Uninstall option. Devices that installed the feature update over 20 days ago can't uninstall it as they've removed the necessary bits as part of their maintenance. However, devices that only installed the feature update up to 19 days ago can uninstall the update if they successfully check in to receive the uninstall command before exceeding the 20-day uninstall period.
User experience settings
User experience settings control the end-user experience for device restart and reminders. For more information about the behavior of each setting, see the Windows Update CSP documentation.
Microsoft Updates Available Notification On Facebook
Automatic update behavior
Default: Auto install at maintenance time
Windows Update CSP: Update/AllowAutoUpdateChoose how automatic updates are installed and, if necessary, when to restart the device.
Supported options:
Notify download - Notify the user before downloading the update. Users choose to download and install updates.
Important
If the user takes no action, the update will not install until the deadline you have configured is reached.
Auto install at maintenance time - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. When restart is required, users are prompted to restart for up to seven days, and then restart is forced.
This option can restart a device automatically after the update installs. Use the Active hours settings to define a period during which the automatic restarts are blocked:
Active hours start - Specify a start time for suppressing restarts due to update installations.
Default: 8 AM
Windows Update CSP: Update/ActiveHoursStartActive hours end - Specify an end time for suppressing reboots due to update installations.
Default: 5 PM
Windows Update CSP: Update/ActiveHoursEnd
Auto install and restart at maintenance time - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. When restart is required, the device restarts when not being used, which is the default for unmanaged devices.
This option can restart a device automatically after the update installs. Use of the Active hours settings aren't described in Windows Update settings but are used by Intune to define a period during which the automatic restarts are blocked:
Active hours start - Specify a start time for suppressing restarts due to update installations.
Default: 8 AM
Windows Update CSP: Update/ActiveHoursStartActive hours end - Specify an end time for suppressing reboots due to update installations.
Default: 5 PM
Windows Update CSP: Update/ActiveHoursEnd
Auto install and restart at scheduled time - Specify an installation day and time. If unspecified, installation runs at 3 AM daily, followed by a 15-minute countdown to a restart. Logged on users can delay countdown and restart.
Windows Update CSP: Update/AllowAutoUpdateThis option supports additional settings.
Automatic behavior frequency - Use this setting to schedule when updates are installed, including the week, the day, and the time.
Default: Every weekScheduled install day - Specify on which day of the week you want updates to install.
Default: Any DayScheduled install time - Specify the time of day when you want updates to install.
Default: 3 AMImportant
The device might not complete the installation at the specified time because of power policies, user absence, and so on. In this case, it will not attempt installation until the specified time occurs again or until a deadline you have specified is reached.
Auto install and reboot without end-user control - Updates download automatically and then install during Automatic Maintenance when the device isn't in use or running on battery power. When restart is required, the device restarts when not being used. This option sets the end-users control pane to read-only.
Reset to default - Restore the original auto update settings on Windows 10 machines that run the October 2018 Update or later. These original auto update settings allow Windows to use automatically determined active hours to schedule the best time to install updates and restart the system after it installs the updates.
Restart checks
Default: Allow
Windows Update CSP: Update/SetEDURestartTo skip these checks when you restart a device, select Skip.
Option to pause Windows updates
Default: Enable
Windows Update CSP: Update/SetDisablePauseUXAccess- Enable - Allow device users to pause the installation of an update for a number of days.
- Disable - Prevent device users from pausing the installation of an update.
Option to check for Windows updates
Default: Enable
Windows Update CSP: Update/SetDisableUXWUAccess- Enable - Allow device users to use Windows Update scan to find updates.
- Disable - Prevent device users from accessing the Windows Update scan.
Require user approval to dismiss restart notification
Default: Not configured
Windows Update CSP: Update/AutoRestartRequiredNotificationDismissal- No - Automatic Dismissal after 25 seconds.
- Yes - Require User Dismissal.
Remind user prior to required auto-restart with dismissible reminder (hours)
Default: 4
Windows Update CSP: Update/ScheduleRestartWarningSpecify how long in advance of an automatic restart to display a dismissible notification to a device user about that restart. Values of 2, 4, 8, 12, or 24 hours are supported.
When you clear the default value, this setting becomes Not configured.
Remind user prior to required auto-restart with permanent reminder (minutes)
Default: 15
Windows Update CSP: Update/ScheduleImminentRestartWarningSpecify how long in advance of an automatic restart to display a non-dismissible warning to a device user about that restart. Values of 15, 30 or 60 minutes are supported.
When you clear the default value, this setting becomes Not configured.
Change notification Update level
Default: Use the default Windows Update notifications
Windows Update CSP: Update/UpdateNotificationLevelSpecify what level of Windows Update notifications users see. This setting doesn't control how and when updates are downloaded and installed.
Supported options:
- Not configured
- Use the default Windows Update notifications
- Turn off all notifications, excluding restart warnings
- Turn off all notifications, including restart warnings
Use deadline settings
Default: Not configuredAllows user to use deadline settings.
- Not configured
- Allow
When set to Allow, you can configure the following settings for deadlines:
Deadline for feature updates
Default: Not configured
Windows Update CSP: Update/ConfigureDeadlineForFeatureUpdatesSpecifies the number of days a user has before feature updates are installed on their devices automatically (2-30).
Deadline for quality updates
Default: Not configured
Windows Update CSP: Update/ConfigureDeadlineForQualityUpdatesSpecifies the number of days a user has before quality updates are installed on their devices automatically (2-30).
Grace period
Default: Not configuredWindows Update CSP: Update/ConfigureDeadlineGracePeriodSpecifies a minimum number of days after deadline until restarts occur automatically (0-7).
Auto reboot before deadline
Default: YesWindows Update CSP: Update/ConfigureDeadlineNoAutoRebootSpecifies whether the device should auto reboot before deadline.
- Yes
- No
Delivery Optimization download mode
Delivery Optimization is no longer configured as part of a Windows 10 Update Ring under Software Updates. Delivery Optimization is now set through device configuration. However, previous configurations remain available in the console. You can remove these previous configurations by editing them to be Not configured, but they can't otherwise be modified.
To avoid conflicts between new and old policy, see Remove Delivery Optimization from Windows 10 Update Rings and then move your settings to a Delivery Optimization profile.

In Windows 10 IoT Enterprise, we know that having your device ready for use at all time is very important. We have many features to help you maximize control over your devices' update notifications to ensure that you can plan and ahead and control when updates can occur. Below are some common recommended configuration settings. Consider whether each individual configuration setting applies to your device scenario.
Control UI notifications from the Windows Update client
A device can be configured in a way to hide the UI experience for Windows Update while letting the service itself run in the background and update the system. The Windows Update client still honors the policies set for configuring Automatic Updates, this policy controls the UI portion of that experience.
- Open the Group Policy Editor (gpedit.msc) and navigate to Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows UpdateDisplay options for update notifications
- Set the policy to Enabled.
- Specify the update notifications display options to 1 or 2.
Tip
Set the value to 1 to hide all notifications except restart warnings, or to 2 to hide all notifications, including restart warnings.
Disable access to the Windows Update user experience

In some scenarios, configuring Automatic Updates isn't enough to preserve a desired device experience. For example, an end-user may still have access to the Windows Update settings, which would allow manual updates via Windows Update. You can configure Group policy to prohibit access to Windows Update through settings.
To prohibit access to Windows update:
- Open the Group Policy Editor (gpedit.msc) and navigate to Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows updateRemove access to use all Windows update features.
- Set this policy to Enabled to prevent the 'Check for updates' option for users. Note: Any background update scans, downloads, and installations will continue to work as configured. This policy simply prevents the user from accessing the manual check through settings. Use the steps in the previous section to also disable scans, downloads, and installations.
Important
Microsoft Updates Available Notification On Mac
Be sure to have a well-designed servicing strategy for your device. Disabling Windows Update capabilities leaves the device in a vulnerable state if your device isn't getting updates in another way.