An execution date is also specified, which means the patches will be installed forcibly at that date. Please note the time of execution is specified as well as the restart condition. Users are advised to manually install the update - just by clicking the 'Start Now' button - as soon as possible. This is like installing a regular application with CMF:

To view which patches (or applications) need to be installed. You need to right-click on the icon and choose 'Pending Actions':

In this first step, the updates are not mandatory installed. You are notified that new patches are available when the CMF icon in the system tray (lower right of the screen) is pulsing in orange : This happens before patches are forced to install. First step: user-controlled patch installation In case you know you are away for some time, please consult the following article KB0006582! to get your machine configured to download patches using Microsoft Windows Updates. The normal configuration is made to get the updates using the internal CERN patching schedule. Long-term off-site period (COVID-19 teleworking period included) This is necessary in order for the patches to be really installed and the computer to be protected against the security vulnerabilities. In most cases a reboot is needed and scheduled after the patches have been installed. In the second step (which normally comes a couple of days after the first step), patch installation is mandatory. During this first step, users have complete control on the patching process and can postpone it. In the first step, new patches are notified to users, but aren't installed automatically. Grace period of 7 days after the dead line is reachedĪ two-step approach is used. Dead line of 21 days after availability Feature updates (mainly new windows build): Grace period of 3 days after the dead line is reached Quality updates (security patches, stability improvements): New Feature updates (mainly new Windows Build version), will become available at CERN 120 days after their initial release to help improve stability. If possible, pending updates will be installed during the night at 3h AM, except if the machine is running on batteries to avoid using it.

Pausing update feature will be disabled (for obvious security reason) Nothing will be installed during active hours (by default those active hours are from 8h to 17h, but will adjust automatically to your usage) Updates will be downloaded in the background when the machine is not used or lightly used as soon as they are available Windows 10/11: Create your own MS Monthly Patches Long-term off-site period (COVID-19 teleworking period included)įirst step: user-controlled patch installation

Windows 10 update to windows 11