A bug in Group Policy breaks updates in Windows 10

Starting with Windows 10 Fall Creators Update, the OS includes the ability to delay the installation of feature updates for up to a year. This feature might be useful for both system administrators and users who have a reason to postpone the update.
Windows 10 Group Policy Logon

This new feature has options which can be configured with either Group Policy or the Registry. Unfortunately, the policy setting has issues. When it is enabled, Windows 10 Fall Creators update blocks security updates!

The affected policy is as follows:
Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > "Select when Preview Builds and Feature Updates are received".

It can be set to a range of days from 0 to 365 according to the user's preferences.

Right now, Group Policy incorrectly blocks all cumulative updates if you change the number of days to anything besides 0. The only fix is to disable the option or set the days to 0.

Probably, the same bug affects options in the Settings app. Deferring the updates in Settings -> Update & Security -> Windows Update -> Advanced Options -> Choose when Updates are installed has the same effect for some users. In addition, disabling the option "Give me updates for other Microsoft products when I update Windows" stops Fall Creators Update from receiving cumulative updates.

This is a serious security issue for users who need to postpone feature updates in Windows 10 but wish to receive security updates. We can only hope that Microsoft fixes it as soon as possible.

Sources: MSPowerUser, Windows Latest.

Support us

Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:

If you like this article, please share it using the buttons below. It won't take a lot from you, but it will help us grow. Thanks for your support!

1 thought on “A bug in Group Policy breaks updates in Windows 10

  1. Shane King

    Your article is incorrect – its not the GP’s fault. GP is applying and processing as expected, its the UPdate service not having correct interprations of the value

    Reply

Leave a Reply

Your email address will not be published.