How to Configure Windows Update Reboot Windows with Intune Update Rings

How to Control Reboots for Update Rings in Intune

Intune doesn’t use MECM-style maintenance windows, but you can still manage when devices restart after Windows updates. By tweaking Windows Update for Business settings in your update rings, you’ll give users clear notification and defer options, while keeping installations on track.

1. Define Active Hours

Active hours tell Windows when users are working so automatic reboots won’t interrupt them.

  • Go to Devices → Windows → Update rings for Windows 10 and later.

  • Edit or create an update ring.

  • Under Restart behavior, set Active hours start and Active hours end (for example, 8 AM–6 PM).

Windows won’t reboot devices during those times.

2. Enable Auto Restart Outside Active Hours

Allow updates to finish the install with a reboot once users are off the clock.

  • In the same Restart behavior section, turn on Auto restart outside active hours.

This makes sure devices stay updated without disrupting your team’s day.

3. Show Restart Notifications and Grace Periods

Notify users before a reboot and let them postpone if needed.

  • Enable Show restart experience to display a toast notification.

  • Set Number of auto-reboot grace hours. This is how long users can snooze the restart (for example, 4 hours).

They’ll see a clear countdown and can delay the reboot within your defined limit.

4. Configure Update Deadlines

You can force updates and reboots after a set number of days.

  • Under Settings, pick a Deadline (days) for the update.

  • After that deadline, Windows applies updates and reboots automatically, even if users postpone earlier.

Deadlines ensure critical patches install in a timely manner.


By combining active hours, outside-hours restarts, notifications with grace periods, and update deadlines, you get full control over restart timing in Intune—without needing MECM maintenance windows. Your users stay productive, and your devices stay secure.

Leave a Reply

Your email address will not be published. Required fields are marked *

Previous Post

How to Stop and Prevent Unexpected Auto-Wipes in Intune Environments

Next Post

Why SCCM-Imaged Devices Show the Enrollment Status Page (ESP) After Vendor Serial Uploads

Related Posts