To make WSUS clients restart automatically after updates are installed, configure scheduled installation and make sure the policy that blocks auto-restart for signed-in users is not enabled.
- In Group Policy, open: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates
- Set it to Enabled.
- Choose 4 - Auto download and schedule the install.
- Set the scheduled install time.
Then configure:
- Always automatically restart at the scheduled time = Enabled
- Set the restart timer to the required value, such as 15 minutes.
Important behavior:
- Always automatically restart at the scheduled time starts the restart timer immediately after Windows Update installs important updates.
- This policy is a legacy policy and isn't applicable for Windows 11.
- If No auto-restart with logged on users for scheduled automatic updates installations is Enabled, then Always automatically restart at the scheduled time has no effect.
So if the client is not auto-restarting, check this policy:
- Computer Configuration > Administrative Templates > Windows Components > Windows Update > No auto-restart with logged on users for scheduled automatic updates installations
- Set it to Disabled or Not Configured if automatic restart is required.
Related default behavior:
- With Configure Automatic Updates = 4, if updates require a restart, Windows restarts automatically.
- If a user is signed in, the user is notified and can delay the restart.
- For scheduled installations, the default wait before restart is 15 minutes unless changed by policy.
If using registry instead of Group Policy, the restart-related settings are under:
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
Warning: Direct registry editing is risky. Back up the registry first. Incorrect changes can cause serious system problems.
References: