From 4a3d1d34c3d56db0533a93a84d9f5355fffcd8d1 Mon Sep 17 00:00:00 2001 From: Marius Wyss <53998264+MrWyss-MSFT@users.noreply.github.com> Date: Fri, 21 Apr 2023 14:30:46 +0200 Subject: [PATCH 1/3] additional information for ScheduledInstall*week policies --- .../mdm/policy-csp-update.md | 36 +++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 28b396eb2f..3215ea8066 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -3069,6 +3069,15 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie +The ScheduledInstall*week policies operate on numeric days. + +- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 +- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 +- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 +- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 + +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. + > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3167,6 +3176,15 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie +The ScheduledInstall*week policies operate on numeric days. + +- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 +- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 +- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 +- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 + +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. + > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3265,6 +3283,15 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie +The ScheduledInstall*week policies operate on numeric days. + +- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 +- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 +- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 +- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 + +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. + > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3363,6 +3390,15 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie +The ScheduledInstall*week policies operate on numeric days. + +- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 +- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 +- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 +- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 + +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. + > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. From 60f70f92a8a99d13c1885fb6ed6797636cfee926 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Mon, 24 Apr 2023 10:52:31 -0400 Subject: [PATCH 2/3] Update policy-csp-update.md --- .../mdm/policy-csp-update.md | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 3215ea8066..50b88f32ed 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -3071,12 +3071,12 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie The ScheduledInstall*week policies operate on numeric days. -- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 -- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 -- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 -- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 +- [ScheduledInstallFirstWeek](#scheduledinstallfirstweek): First week of the month (Days 1-7). +- [ScheduledInstallSecondWeek](#scheduledinstallsecondweek): Second week of the month (Days 8-14). +- [ScheduledInstallThirdWeek](#scheduledinstallthirdweek): Third week of the month (Days 15-21). +- [ScheduledInstallFourthWeek](#scheduledinstallfourthweek): Fourth week of the month (Days 22-31). -These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday), it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. If the device is unavailable at the scheduled time, it can postpone installation of updates until the next month. > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3178,12 +3178,12 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie The ScheduledInstall*week policies operate on numeric days. -- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 -- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 -- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 -- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 +- [ScheduledInstallFirstWeek](#scheduledinstallfirstweek): First week of the month (Days 1-7). +- [ScheduledInstallSecondWeek](#scheduledinstallsecondweek): Second week of the month (Days 8-14). +- [ScheduledInstallThirdWeek](#scheduledinstallthirdweek): Third week of the month (Days 15-21). +- [ScheduledInstallFourthWeek](#scheduledinstallfourthweek): Fourth week of the month (Days 22-31). -These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday), it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. If the device is unavailable at the scheduled time, it can postpone installation of updates until the next month. > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3285,12 +3285,12 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie The ScheduledInstall*week policies operate on numeric days. -- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 -- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 -- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 -- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 +- [ScheduledInstallFirstWeek](#scheduledinstallfirstweek): First week of the month (Days 1-7). +- [ScheduledInstallSecondWeek](#scheduledinstallsecondweek): Second week of the month (Days 8-14). +- [ScheduledInstallThirdWeek](#scheduledinstallthirdweek): Third week of the month (Days 15-21). +- [ScheduledInstallFourthWeek](#scheduledinstallfourthweek): Fourth week of the month (Days 22-31). -These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday), it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. If the device is unavailable at the scheduled time, it can postpone installation of updates until the next month. > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. @@ -3392,12 +3392,12 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie The ScheduledInstall*week policies operate on numeric days. -- first week of the month [ScheduledInstallFirstWeek](#scheduledinstallfirstweek) = Days 1-7 -- second week of the month [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) = Days 8-14 -- third week of the month [ScheduledInstallThirdWeek](#scheduledinstallthirdweek) = Days 15-21 -- fourth week of the month [ScheduledInstallFourthWeek](#scheduledinstallfourthweek) = Days 22-31 +- [ScheduledInstallFirstWeek](#scheduledinstallfirstweek): First week of the month (Days 1-7). +- [ScheduledInstallSecondWeek](#scheduledinstallsecondweek): Second week of the month (Days 8-14). +- [ScheduledInstallThirdWeek](#scheduledinstallthirdweek): Third week of the month (Days 15-21). +- [ScheduledInstallFourthWeek](#scheduledinstallfourthweek): Fourth week of the month (Days 22-31). -These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday) it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#ScheduledInstallSecondWeek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. **Important**, if the first day of the month is a Wednesday, the 2nd Wednesday will be 6 days before 2nd Tuesday. If the device happens to be unavailable at this scheduled time, it can postpone installation of updates until the next month if it misses the install window for a given month. +These policies are not exclusive and can be used in any combination. Together with [ScheduledInstallDay](#scheduledinstallday), it defines the ordinal number of a weekday in a month. E.g. [ScheduledInstallSecondWeek](#scheduledinstallsecondweek) + [ScheduledInstallDay](#scheduledinstallday) = 3 is 2nd Tuesday of the month. If the device is unavailable at the scheduled time, it can postpone installation of updates until the next month. > [!NOTE] > This policy will only take effect if [Update/AllowAutoUpdate](#allowautoupdate) has been configured to option 3 or 4 for scheduled installation. From df62af6f3f8989d9510d3da38731228c24e11802 Mon Sep 17 00:00:00 2001 From: Stephanie Savell <101299710+v-stsavell@users.noreply.github.com> Date: Mon, 24 Apr 2023 10:43:17 -0500 Subject: [PATCH 3/3] Update policy-csp-update.md Acro edits. --- .../client-management/mdm/policy-csp-update.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-update.md b/windows/client-management/mdm/policy-csp-update.md index 34a1970df8..8bf785ab2e 100644 --- a/windows/client-management/mdm/policy-csp-update.md +++ b/windows/client-management/mdm/policy-csp-update.md @@ -2143,9 +2143,9 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie | Value | Description | |:--|:--| -| 0 | Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel. | -| 1 | Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during "Automatic Maintenance" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shutdown properly on restart. | -| 2 (Default) | Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during "Automatic Maintenance" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shutdown properly on restart. | +| 0 | Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option, users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel. | +| 1 | Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during "Automatic Maintenance" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shut down properly on restart. | +| 2 (Default) | Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during "Automatic Maintenance" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shut down properly on restart. | | 3 | Auto install and restart at a specified time. The IT specifies the installation day and time. If no day and time are specified, the default is 3 AM daily. Automatic installation happens at this time and device restart happens after a 15-minute countdown. If the user is logged in when Windows is ready to restart, the user can interrupt the 15-minute countdown to delay the restart. | | 4 | Auto install and restart without end-user control. Updates are downloaded automatically on non-metered networks and installed during "Automatic Maintenance" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This setting option also sets the end-user control panel to read-only. | | 5 | Turn off automatic updates. | @@ -3551,7 +3551,7 @@ If the status is set to Not Configured, use of Automatic Updates is not specifie -This setting allows to remove access to "Pause updates" feature. +This setting allows removal access to "Pause updates" feature. Once enabled user access to pause updates is removed. @@ -3693,7 +3693,7 @@ The following rules are followed regarding battery power: - Above 40% - allowed to reboot; - Above 20% - allowed to continue work. -This setting overrides the install deferral behaviour of [AllowAutoUpdate](#allowautoupdate). +This setting overrides the install deferral behavior of [AllowAutoUpdate](#allowautoupdate). These settings are designed for education devices that remain in carts overnight that are left in sleep mode. It is not designed for 1:1 devices. @@ -4311,7 +4311,7 @@ Enable this policy to control the timing before transitioning from Auto restarts You can specify the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. -You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. +You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed, within the specified period. If you do not specify a deadline or if the deadline is set to 0, the PC won't automatically restart and will require the person to schedule it prior to restart. @@ -4381,7 +4381,7 @@ Enable this policy to control the timing before transitioning from Auto restarts You can specify the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. -You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. +You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed, within the specified period. If you do not specify a deadline or if the deadline is set to 0, the PC won't automatically restart and will require the person to schedule it prior to restart. @@ -4451,7 +4451,7 @@ Enable this policy to control the timing before transitioning from Auto restarts You can specify the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. -You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. +You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed, within the specified period. If you do not specify a deadline or if the deadline is set to 0, the PC won't automatically restart and will require the person to schedule it prior to restart. @@ -4521,7 +4521,7 @@ Enable this policy to control the timing before transitioning from Auto restarts You can specify the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. -You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. +You can specify the deadline in days before automatically scheduling and executing a pending restart regardless of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to be automatically executed, within the specified period. If you do not specify a deadline or if the deadline is set to 0, the PC won't automatically restart and will require the person to schedule it prior to restart.