Starting with Windows 10 Fall Creators Update, the OS includes the ability to delay the installation of feature updates for up to a year. This feature might be useful for both system administrators and users who have a reason to postpone the update.
This new feature has options which can be configured with either Group Policy or the Registry. Unfortunately, the policy setting has issues. When it is enabled, Windows 10 Fall Creators update blocks security updates!
The affected policy is as follows:
Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > "Select when Preview Builds and Feature Updates are received".
It can be set to a range of days from 0 to 365 according to the user's preferences.
Right now, Group Policy incorrectly blocks all cumulative updates if you change the number of days to anything besides 0. The only fix is to disable the option or set the days to 0.
Probably, the same bug affects options in the Settings app. Deferring the updates in Settings -> Update & Security -> Windows Update -> Advanced Options -> Choose when Updates are installed has the same effect for some users. In addition, disabling the option "Give me updates for other Microsoft products when I update Windows" stops Fall Creators Update from receiving cumulative updates.
This is a serious security issue for users who need to postpone feature updates in Windows 10 but wish to receive security updates. We can only hope that Microsoft fixes it as soon as possible.
Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options: