Windows updating best practice
The table below lists the recommended settings for running Windows Updates; This allows the updates to be installed but will limit the time where the computer is not protected.
If other tasks need to be run administrators should ensure the Windows Update task runs last so it does not interfere with other tasks if it runs long.
Windows Software Update Services WSUS is a component of the Windows Server operating system that can be added to an existing server through the Add Roles / Features wizard in the Server Manager on Server 2008 or Server 2012.
When updates are downloaded through the Microsoft Update Service Deep Freeze will only install updates that have been marked as Critical or Security updates.
Please note that the message will be shown at the scheduled maintenance time and the computer will then reboot into a thawed state after this time period.
As such the computer will not enter a thawed state until 3 min past the start time.
Setting a long warning time may delay the start of the maintenance period in a undesired manner.
Customers who wish to maintain control of the update process should investigate using the Long Term Service (LTS) branch of Windows 10 Enterprise and a WSUS server in their environment.The updated versions of Deep Freeze (8.35 and higher) incorporate a option that allows the software to perform additional reboots to clear out any pending updates when a computer is attempting to transition between a Tahwed and a Frozen state.This option is intended to prevent systems getting stuck in a reboot loop attempting to apply updates.When selected this option will suppress the Windows Update Service, and in some version the BITS services on the client machine.More information on this behaviour can be found here.