Disable: 'Reschedule Automatic Updates scheduled installations' This policy setting determines the amount of time before previously scheduled Automatic Update installations will proceed after system startup. If you configure this policy setting to Enabled, a previously scheduled installation will begin after a specified number of minutes when you next start the computer. If you configure this policy setting to Disabled or Not configured, previously scheduled installations will occur during the next regularly scheduled installation time. Note: This policy setting only works when Automatic Updates is configured to perform scheduled update installations. If the Configure Automatic Updates setting is Disabled, the Reschedule Automatic Updates scheduled installations setting has no effect. You can enable the latter two settings to ensure that previously missed installations will be scheduled to install each time the computer restarts. Counter Measure: Configure the Reschedule Automatic Updates scheduled installations setting to Enabled and specify 10 minutes. Potential Impact: Automatic Updates will not start until 10 minutes after the computer restarts. (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update\Reschedule Automatic Updates scheduled installations (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RescheduleWaitTimeEnabled,RescheduleWaitTime oval:org.secpod.oval:def:35051 oval:org.secpod.oval:def:35051 oval:org.secpod.oval:def:35051 SCAP Repo OVAL Definition 2016-06-10