3,621 settings · 25H2 · 1.0 · 29 Sep 2025

11 settingsCSV

Windows Components › Windows Update › Manage end user experience

Configure Automatic Updates

ComputerNative Intune settingAutoUpdateCfg

Supported on Windows XP Professional Service Pack 1 or At least Windows 2000 Service Pack 3 Option 7 only supported on servers of at least Windows Server 2016 edition

25H2 · 1.0

What it does

Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service. Note: This policy does not apply to Windows RT. This setting lets you specify whether automatic updates are enabled on this computer. If the service is enabled, you must select one of the four options in the Group Policy Setting: 2 = Notify before downloading and installing any updates. When Windows finds updates that apply to this computer, users will be notified that updates are ready to be downloaded. After going to Windows Update, users can download and install any available updates. 3 = (Default setting) Download the updates automatically and notify when they are ready to be installed Windows finds updates that apply to the computer and downloads them in the background (the user is not notified or interrupted during this process). When the downloads are complete, users will be notified that they are ready to install. After going to Windows Update, users can install them. 4 = Automatically download updates and install them on the schedule specified below. When "Automatic" is selected as the scheduled install time, Windows will automatically check, download, and install updates. The device will reboot as per Windows default settings unless configured by group policy. (Applies to Windows 10, version 1809 and higher) Specify the schedule using the options in the Group Policy Setting. For version 1709 and above, there is an additional choice of limiting updating to a weekly, bi-weekly, or monthly occurrence. If no schedule is specified, the default schedule for all installations will be every day at 3:00 AM. If any updates require a restart to complete the installation, Windows will restart the computer automatically. (If a user is signed in to the computer when Windows is ready to restart, the user will be notified and given the option to delay the restart.) On Windows 8 and later, you can set updates to install during automatic maintenance instead of a specific schedule. Automatic maintenance will install updates when the computer is not in use and avoid doing so when the computer is running on battery power. If automatic maintenance is unable to install updates for 2 days, Windows Update will install updates right away. Users will then be notified about an upcoming restart, and that restart will only take place if there is no potential for accidental data loss. 5 = Allow local administrators to select the configuration mode that Automatic Updates should notify and install updates. (This option has not been carried over to any Win 10 Versions) With this option, local administrators will be allowed to use the Windows Update control panel to select a configuration option of their choice. Local administrators will not be allowed to disable the configuration for Automatic Updates. 7 = Notify for install and notify for restart. (Windows Server only) With this option from Windows Server 2016, applicable only to Server SKU devices, local administrators will be allowed to use Windows Update to proceed with installations or reboots manually. If the status for this policy is set to Disabled, any updates that are available on Windows Update must be downloaded and installed manually. To do this, search for Windows Update using Start. If the status is set to Not Configured, use of Automatic Updates is not specified at the Group Policy level. However, an administrator can still configure Automatic Updates through Control Panel.

What it writes

Hive: HKEY_LOCAL_MACHINE
Registry key: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
Value name: NoAutoUpdate
When enabled: DWORD 0
When disabled: DWORD 1

In Intune

Native Intune setting: Yes — Policy CSP

./Device/Vendor/MSFT/Policy/Config/Update/AllowAutoUpdateUpdate on Microsoft LearnSets the option “Configure automatic updating”.Windows builds listed: 10.0.10240.
./Device/Vendor/MSFT/Policy/Config/Update/AllowMUUpdateServiceUpdate on Microsoft LearnSets the option “Install updates for other Microsoft products”.Windows builds listed: 10.0.14393.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallDayUpdate on Microsoft LearnSets the option “Scheduled install day”.Windows builds listed: 10.0.10240.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallEveryWeekUpdate on Microsoft LearnSets the option “Every week”.Windows builds listed: 10.0.16299.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallFirstWeekUpdate on Microsoft LearnSets the option “First week of the month”.Windows builds listed: 10.0.16299.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallFourthWeekUpdate on Microsoft LearnSets the template element ScheduledInstallFourthWeek.Windows builds listed: 10.0.16299.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallSecondWeekUpdate on Microsoft LearnSets the template element ScheduledInstallSecondWeek.Windows builds listed: 10.0.16299.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallThirdWeekUpdate on Microsoft LearnSets the template element ScheduledInstallThirdWeek.Windows builds listed: 10.0.16299.
./Device/Vendor/MSFT/Policy/Config/Update/ScheduledInstallTimeUpdate on Microsoft LearnSets the option “Scheduled install time”.Windows builds listed: 10.0.10240.

From Microsoft's Policy CSP DDF files (DDF v2 Files, February 2026), read 18 Oct 2026.

Options

Option	Type	Registry value	Allowed values
Configure automatic updatingRequiredDefault: 3 - Auto download and notify for install	Drop-down list	`AUOptions`	2 - Notify for download and auto install`2` 3 - Auto download and notify for install`3` 4 - Auto download and schedule the install`4` 5 - Allow local admin to choose setting`5` 7 - Auto Download, Notify to install, Notify to Restart`7`
Install during automatic maintenanceDefault: unchecked	Checkbox	`AutomaticMaintenanceEnabled`	On (1) or off (0)
Scheduled install dayRequiredDefault: 0 - Every day	Drop-down list	`ScheduledInstallDay`	0 - Every day`0` 1 - Every Sunday`1` 2 - Every Monday`2` 3 - Every Tuesday`3` 4 - Every Wednesday`4` 5 - Every Thursday`5` 6 - Every Friday`6` 7 - Every Saturday`7`
Scheduled install timeRequiredDefault: 02:00	Drop-down list	`ScheduledInstallTime`	Automatic`24` 00:00`0` 01:00`1` 02:00`2` 03:00`3` 04:00`4` 05:00`5` 06:00`6` 07:00`7` 08:00`8` 09:00`9` 10:00`10` 11:00`11` 12:00`12` 13:00`13` 14:00`14` 15:00`15` 16:00`16` 17:00`17` 18:00`18` 19:00`19` 20:00`20` 21:00`21` 22:00`22` 23:00`23`
Install updates for other Microsoft productsDefault: unchecked	Checkbox	`AllowMUUpdateService`	On (1) or off (0)
Every weekDefault: checked	Checkbox	`ScheduledInstallEveryWeek`	On (1) or off (0)
First week of the monthDefault: unchecked	Checkbox	`ScheduledInstallFirstWeek`	On (1) or off (0)
Second week of the monthDefault: unchecked	Checkbox	`ScheduledInstallSecondWeek`	On (1) or off (0)
Third week of the monthDefault: unchecked	Checkbox	`ScheduledInstallThirdWeek`	On (1) or off (0)
Fourth week of the monthDefault: unchecked	Checkbox	`ScheduledInstallFourthWeek`	On (1) or off (0)

Configure and deploy

Choose a state and the option values; the output below is generated from the template for exactly that.

State Enabled Disabled Not configured

Options used when Enabled

Configure automatic updating

Install during automatic maintenance

Scheduled install day

Scheduled install time

Install updates for other Microsoft products

Every week

First week of the month

Second week of the month

Third week of the month

Fourth week of the month

Enabled · Computer · template defaults

Registry file (.reg)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AllowMUUpdateService"=-
"AutomaticMaintenanceEnabled"=-
"ScheduledInstallFirstWeek"=-
"ScheduledInstallFourthWeek"=-
"ScheduledInstallSecondWeek"=-
"ScheduledInstallThirdWeek"=-
"AUOptions"=dword:00000003
"NoAutoUpdate"=dword:00000000
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallEveryWeek"=dword:00000001
"ScheduledInstallTime"=dword:00000002

PowerShell

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Configure Automatic Updates
# Name: AutoUpdateCfg
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'NoAutoUpdate' -PropertyType 'DWord' -Value 0

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AUOptions' -PropertyType 'DWord' -Value 3

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AutomaticMaintenanceEnabled'

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallDay' -PropertyType 'DWord' -Value 0

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallTime' -PropertyType 'DWord' -Value 2

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AllowMUUpdateService'

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallEveryWeek' -PropertyType 'DWord' -Value 1

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFirstWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallSecondWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallThirdWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFourthWeek'

These deployment candidates come from the ADMX template; they are separate from the native CSP mapping above.

The OMA-URI is an inferred ADMX-backed Policy CSP candidate derived from the source ADMX file name and policy name.
Some Microsoft policies use built-in Policy CSP pages whose area names don't match the ADMX file name, so verify the candidate against Microsoft Learn before deployment.

ADMX profile candidate (OMA-URI)

./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsUpdate/AutoUpdateCfg

ADMX SyncML candidate

<SyncML xmlns="SYNCML:SYNCML1.2">
  <SyncBody>
    <Replace>
      <CmdID>1</CmdID>
      <Item>
        <Meta>
          <Format>chr</Format>
          <Type>text/plain</Type>
        </Meta>
        <Target>
          <LocURI>./Device/Vendor/MSFT/Policy/Config/ADMX_WindowsUpdate/AutoUpdateCfg</LocURI>
        </Target>
        <Data>&lt;enabled/&gt;
&lt;data id="AutoUpdateMode" value="3"/&gt;
&lt;data id="AutoUpdateAutomaticMaintenanceEnabled" value="false"/&gt;
&lt;data id="AutoUpdateSchDay" value="0"/&gt;
&lt;data id="AutoUpdateSchTime" value="3"/&gt;
&lt;data id="AllowMUUpdateServiceId" value="false"/&gt;
&lt;data id="AutoUpdateSchEveryWeek" value="true"/&gt;
&lt;data id="AutoUpdateSchFirstWeek" value="false"/&gt;
&lt;data id="AutoUpdateSchSecondWeek" value="false"/&gt;
&lt;data id="AutoUpdateSchThirdWeek" value="false"/&gt;
&lt;data id="AutoUpdateSchFourthWeek" value="false"/&gt;</Data>
      </Item>
    </Replace>
    <Final/>
  </SyncBody>
</SyncML>

Intune remediation scripts

Detection

$ErrorActionPreference = 'Stop'
$reasons = [System.Collections.Generic.List[string]]::new()

function Test-RegistryValueExists {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    return $null -ne (Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue)
}

function Test-RegistryValueEquals {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $Kind,
        [Parameter(Mandatory = $true)][object] $Expected
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return $false
    }

    $valueObject = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction SilentlyContinue
    if ($null -eq $valueObject) {
        return $false
    }

    $actual = $valueObject.$Name
    switch ($Kind) {
        'String' { return [string]$actual -ceq [string]$Expected }
        'ExpandString' { return [string]$actual -ceq [string]$Expected }
        'DWord' { return [uint32]$actual -eq [uint32]$Expected }
        'QWord' { return [uint64]$actual -eq [uint64]$Expected }
        'MultiString' {
            $actualArray = @($actual)
            $expectedArray = @($Expected)
            if ($actualArray.Count -ne $expectedArray.Count) { return $false }
            for ($index = 0; $index -lt $actualArray.Count; $index++) {
                if ([string]$actualArray[$index] -cne [string]$expectedArray[$index]) { return $false }
            }
            return $true
        }
        'Binary' {
            $actualArray = [byte[]]$actual
            $expectedArray = [byte[]]$Expected
            if ($actualArray.Length -ne $expectedArray.Length) { return $false }
            for ($index = 0; $index -lt $actualArray.Length; $index++) {
                if ($actualArray[$index] -ne $expectedArray[$index]) { return $false }
            }
            return $true
        }
        default { return [string]$actual -ceq [string]$Expected }
    }
}

# Policy: Configure Automatic Updates
# Name: AutoUpdateCfg
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'NoAutoUpdate' -Kind 'DWord' -Expected 0
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate') | Out-Null
}

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AUOptions' -Kind 'DWord' -Expected 3
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AutomaticMaintenanceEnabled'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AutomaticMaintenanceEnabled') | Out-Null
}

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallDay' -Kind 'DWord' -Expected 0
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallDay') | Out-Null
}

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallTime' -Kind 'DWord' -Expected 2
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallTime') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AllowMUUpdateService'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AllowMUUpdateService') | Out-Null
}

$isMatch = Test-RegistryValueEquals -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallEveryWeek' -Kind 'DWord' -Expected 1
if (-not $isMatch) {
    $reasons.Add('Value mismatch: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallEveryWeek') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFirstWeek'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallFirstWeek') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallSecondWeek'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallSecondWeek') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallThirdWeek'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallThirdWeek') | Out-Null
}

$exists = Test-RegistryValueExists -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFourthWeek'
if ($exists) {
    $reasons.Add('Value should be absent: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallFourthWeek') | Out-Null
}

if ($reasons.Count -eq 0) {
    Write-Output 'Compliant'
    exit 0
}

$reasons | ForEach-Object { Write-Output $_ }
exit 1

Remediation

$ErrorActionPreference = 'Stop'

function Set-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name,
        [Parameter(Mandatory = $true)][string] $PropertyType,
        [Parameter(Mandatory = $true)][object] $Value
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        New-Item -Path $Path -Force | Out-Null
    }

    New-ItemProperty -LiteralPath $Path -Name $Name -PropertyType $PropertyType -Value $Value -Force | Out-Null
}

function Remove-RegistryValue {
    param(
        [Parameter(Mandatory = $true)][string] $Path,
        [Parameter(Mandatory = $true)][string] $Name
    )

    if (Test-Path -LiteralPath $Path) {
        Remove-ItemProperty -LiteralPath $Path -Name $Name -Force -ErrorAction SilentlyContinue
    }
}

function Clear-RegistryKeyValues {
    param(
        [Parameter(Mandatory = $true)][string] $Path
    )

    if (-not (Test-Path -LiteralPath $Path)) {
        return
    }

    foreach ($propertyName in (Get-Item -LiteralPath $Path).Property) {
        Remove-ItemProperty -LiteralPath $Path -Name $propertyName -Force -ErrorAction SilentlyContinue
    }
}

# Policy: Configure Automatic Updates
# Name: AutoUpdateCfg
# Scope: Machine
# State: Enabled
# Source: WindowsUpdate.admx

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'NoAutoUpdate' -PropertyType 'DWord' -Value 0

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AUOptions' -PropertyType 'DWord' -Value 3

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AutomaticMaintenanceEnabled'

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallDay' -PropertyType 'DWord' -Value 0

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallTime' -PropertyType 'DWord' -Value 2

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'AllowMUUpdateService'

Set-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallEveryWeek' -PropertyType 'DWord' -Value 1

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFirstWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallSecondWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallThirdWeek'

Remove-RegistryValue -Path 'Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Name 'ScheduledInstallFourthWeek'

History 5 retained releases

22H2 · 1.015 Jul 2024
- Already present in the first release ChangeIntel keeps.

4 later releases left it unchanged.

Template

Internal name: AutoUpdateCfg
Namespace: Microsoft.Policies.WindowsUpdate
Template file: WindowsUpdate.admx
Release: Windows 11 25H2 · 1.0 · file set de4e49983ebd651f…

Definition, editor controls and support

Definition

<policy class="Machine" displayName="$(string.AutoUpdateCfg)" explainText="$(string.AutoUpdateCfg_Help)" key="Software\Policies\Microsoft\Windows\WindowsUpdate\AU" name="AutoUpdateCfg" presentation="$(presentation.AutoUpdateCfg)" valueName="NoAutoUpdate" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.WindowsUpdate:WindowsUpdateExperience" />
      <supportedOn ref="Microsoft.Policies.WindowsUpdate:WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016" />
      <enabledValue>
        <decimal value="0" />
      </enabledValue>
      <disabledValue>
        <decimal value="1" />
      </disabledValue>
      <elements>
        <enum id="AutoUpdateMode" required="true" valueName="AUOptions">
          <item displayName="$(string.AutoUpdateModeNotify)">
            <value>
              <decimal value="2" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateModeDownload)">
            <value>
              <decimal value="3" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateModeAuto)">
            <value>
              <decimal value="4" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateModeAdminChooses)">
            <value>
              <decimal value="5" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateModeNotifyToInstallNotifyToReboot)">
            <value>
              <decimal value="7" />
            </value>
          </item>
        </enum>
        <boolean id="AutoUpdateAutomaticMaintenanceEnabled" valueName="AutomaticMaintenanceEnabled" />
        <enum id="AutoUpdateSchDay" required="true" valueName="ScheduledInstallDay">
          <item displayName="$(string.AutoUpdateSchDay_Everyday)">
            <value>
              <decimal value="0" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Sunday)">
            <value>
              <decimal value="1" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Monday)">
            <value>
              <decimal value="2" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Tuesday)">
            <value>
              <decimal value="3" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Wednesday)">
            <value>
              <decimal value="4" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Thursday)">
            <value>
              <decimal value="5" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Friday)">
            <value>
              <decimal value="6" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchDay_Saturday)">
            <value>
              <decimal value="7" />
            </value>
          </item>
        </enum>
        <enum id="AutoUpdateSchTime" required="true" valueName="ScheduledInstallTime">
          <item displayName="$(string.AutoUpdateSchTimeAuto)">
            <value>
              <decimal value="24" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime0)">
            <value>
              <decimal value="0" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime1)">
            <value>
              <decimal value="1" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime2)">
            <value>
              <decimal value="2" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime3)">
            <value>
              <decimal value="3" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime4)">
            <value>
              <decimal value="4" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime5)">
            <value>
              <decimal value="5" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime6)">
            <value>
              <decimal value="6" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime7)">
            <value>
              <decimal value="7" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime8)">
            <value>
              <decimal value="8" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime9)">
            <value>
              <decimal value="9" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime10)">
            <value>
              <decimal value="10" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime11)">
            <value>
              <decimal value="11" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime12)">
            <value>
              <decimal value="12" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime13)">
            <value>
              <decimal value="13" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime14)">
            <value>
              <decimal value="14" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime15)">
            <value>
              <decimal value="15" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime16)">
            <value>
              <decimal value="16" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime17)">
            <value>
              <decimal value="17" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime18)">
            <value>
              <decimal value="18" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime19)">
            <value>
              <decimal value="19" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime20)">
            <value>
              <decimal value="20" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime21)">
            <value>
              <decimal value="21" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime22)">
            <value>
              <decimal value="22" />
            </value>
          </item>
          <item displayName="$(string.AutoUpdateSchTime23)">
            <value>
              <decimal value="23" />
            </value>
          </item>
        </enum>
        <boolean id="AllowMUUpdateServiceId" valueName="AllowMUUpdateService" />
        <boolean id="AutoUpdateSchEveryWeek" valueName="ScheduledInstallEveryWeek" />
        <boolean id="AutoUpdateSchFirstWeek" valueName="ScheduledInstallFirstWeek" />
        <boolean id="AutoUpdateSchSecondWeek" valueName="ScheduledInstallSecondWeek" />
        <boolean id="AutoUpdateSchThirdWeek" valueName="ScheduledInstallThirdWeek" />
        <boolean id="AutoUpdateSchFourthWeek" valueName="ScheduledInstallFourthWeek" />
      </elements>
    </policy>

Editor controls

<presentation id="AutoUpdateCfg" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <dropdownList defaultItem="1" refId="AutoUpdateMode">Configure automatic updating:</dropdownList>
        <text>The following settings are only required and applicable if 4 is selected.</text>
        <checkBox defaultChecked="false" refId="AutoUpdateAutomaticMaintenanceEnabled">Install during automatic maintenance</checkBox>
        <dropdownList defaultItem="0" refId="AutoUpdateSchDay">Scheduled install day: </dropdownList>
        <dropdownList defaultItem="3" refId="AutoUpdateSchTime">Scheduled install time:</dropdownList>
        <text>If you have selected “4 – Auto download and schedule the install” for your scheduled install day and specified a schedule, you also have the option to limit updating to a weekly, bi-weekly or monthly occurrence, using the options below:</text>
        <checkBox defaultChecked="true" refId="AutoUpdateSchEveryWeek">Every week</checkBox>
        <checkBox defaultChecked="false" refId="AutoUpdateSchFirstWeek">First week of the month</checkBox>
        <checkBox defaultChecked="false" refId="AutoUpdateSchSecondWeek">Second week of the month</checkBox>
        <checkBox defaultChecked="false" refId="AutoUpdateSchThirdWeek">Third week of the month</checkBox>
        <checkBox defaultChecked="false" refId="AutoUpdateSchFourthWeek">Fourth week of the month</checkBox>
        <text> </text>
        <checkBox defaultChecked="false" refId="AllowMUUpdateServiceId">Install updates for other Microsoft products</checkBox>
      </presentation>

Supported platforms and category

Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateCat
<category displayName="$(string.WindowsUpdateCat)" name="WindowsUpdateCat" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
    </category>
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateExperience
<category displayName="$(string.WindowsUpdateExperience)" name="WindowsUpdateExperience" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat" />
    </category>
Microsoft.Policies.WindowsUpdate:definition:WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016
<definition displayName="$(string.WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016)" name="WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <or>
          <range maxVersionIndex="12" minVersionIndex="4" ref="unresolved(products):MicrosoftWindows" />
        </or>
      </definition>
Microsoft.Policies.WindowsUpdate:unresolved:unresolved(products):MicrosoftWindows
<unresolved reference="unresolved(products):MicrosoftWindows" />
Microsoft.Policies.Windows:category:WindowsComponents
<category displayName="$(string.WindowsComponents)" explainText="$(string.WindowsComponents_Help)" name="WindowsComponents" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="Microsoft.Policies.Windows:WindowsComponents">Windows Components</string><string id="Microsoft.Policies.Windows:WindowsComponents_Help">Contains settings for operating system components.</string></strings>
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateCat
<category displayName="$(string.WindowsUpdateCat)" name="WindowsUpdateCat" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.Windows:WindowsComponents" />
    </category>
<strings><string id="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat">Windows Update</string></strings>
Microsoft.Policies.WindowsUpdate:category:WindowsUpdateExperience
<category displayName="$(string.WindowsUpdateExperience)" name="WindowsUpdateExperience" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="Microsoft.Policies.WindowsUpdate:WindowsUpdateCat" />
    </category>
<strings><string id="Microsoft.Policies.WindowsUpdate:WindowsUpdateExperience">Manage end user experience</string></strings>
Microsoft.Policies.WindowsUpdate:definition:WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016
<definition displayName="$(string.WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016)" name="WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <or>
          <range maxVersionIndex="12" minVersionIndex="4" ref="unresolved(products):MicrosoftWindows" />
        </or>
      </definition>
<strings><string id="Microsoft.Policies.WindowsUpdate:WU_SUPPORTED_XPSP1_or_Win2kSP3_AUOption7_SUPPORTED_Server2016">Windows XP Professional Service Pack 1 or At least Windows 2000 Service Pack 3
Option 7 only supported on servers of at least Windows Server 2016 edition</string></strings>