Dashboard guide

Maintenance windows

A maintenance window says when approved changes may run. Open Windows under Remediation in the sidebar.

#Create a window

New window (admin, owner):

Edit or Delete a window from the list. A window that an open plan still uses cannot be deleted.

Without any window, approved plans run right away ("now"). The page says: No maintenance windows yet. Plans run "now" (after approval) until one exists.

#Using a window

• When you create a plan (Fix, Fix selected, Fix all), choose Now or a window by name.
• An approved plan waits for its window. Then the jobs are signed and sent, in waves.
• A reboot that a change needs (for example a Windows update with host.reboot allowed) happens inside the window too.

#Two layers of windows

Each host can also have local windows in its local policy (local_windows). Both apply: a real job only runs when the console window and the local window allow it. If a job arrives outside the local window, the agent refuses it (policy:local_windows). Dry runs are not limited by windows; they never change anything.

Use console windows for your organisation's schedule, and local windows when a host owner wants a hard limit of their own.