This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
None
Delegation
These groups and users have the specified permission for this GPO
Name
Allowed Permissions
Inherited
EMEA\Domain Admins
Edit settings, delete, modify security
No
EMEA\PL-L-SEC-Delegation Modify Group Policy Settings Access
Edit settings, delete, modify security
No
NT AUTHORITY\Authenticated Users
Read
No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Read
No
NT AUTHORITY\SYSTEM
Edit settings, delete, modify security
No
ROOT\Enterprise Admins
Edit settings, delete, modify security
No
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Windows Components/Windows Update/Legacy Policies
Policy
Setting
Comment
Delay Restart for scheduled installations
Enabled
Wait the following period before proceeding with a scheduled
restart (minutes):
5
Policy
Setting
Comment
No auto-restart with logged on users for scheduled automatic updates installations
Disabled
Windows Components/Windows Update/Manage end user experience
Policy
Setting
Comment
Always automatically restart at the scheduled time
Enabled
The restart timer will give users this much time to save their
work (minutes):
30
Policy
Setting
Comment
Configure Automatic Updates
Enabled
Configure automatic updating:
3 - Auto download and notify for install
The following settings are only required and applicable if 4 is selected.
Install during automatic maintenance
Disabled
Scheduled install day:
0 - Every day
Scheduled install time:
03:00
If you have selected “4 – Auto download and schedule the install” for your scheduled install day and specified a schedule, you also have the option to limit updating to a weekly, bi-weekly or monthly occurrence, using the options below:
Every week
Enabled
First week of the month
Disabled
Second week of the month
Disabled
Third week of the month
Disabled
Fourth week of the month
Disabled
Install updates for other Microsoft products
Disabled
Windows Components/Windows Update/Manage updates offered from Windows Server Update Service