This policy controls whether Secure Boot certificate updates are applied automatically through Windows monthly security and non-security updates. Devices that Microsoft has validated as capable of processing Secure Boot variable updates will receive these updates as part of cumulative monthly updates and apply them automatically.

This method offers a straightforward Secure Boot Group Policy setting that domain administrators can set to deploy Secure Boot updates to all domain-joined Windows clients and servers.

Discusses how to use Group Policy to configure Windows Update Delivery Optimization in Windows 10.

Découvrez comment case activée les dernières Mises à jour Windows et les installer pour que votre appareil fonctionne correctement et en toute sécurité.

Microsoft will be providing support for managing the Secure Boot updates using Group Policy in a future update. Note that since Group Policy is for settings, monitoring the device status will need to be done using alternate methods including monitoring registry keys and event log entries.

Under Settings, you can pause the Windows Update from being downloaded and installed for a period of time. You can also select a convenient time to restart your device after the updates are downloaded and installed.

Select Start , then select Settings > Update & Security > Windows Update, and then select Change active hours. Turn on Automatically adjust active hours for this device based on activity.

If Automatic Updates is turned off, or if Automatic Updates is not set to the highest setting, Security Center provides recommendations to turn on or to adjust Automatic Updates.

Découvrez comment activer les mises à jour automatiques des applications dans le Microsoft Store.

This document describes support for deploying, managing, and monitoring the Secure Boot certificate updates using Windows registry keys. The keys consist of the following: