Windows Updates GPO and restarts

Question

Our environment consists of 15-20 Windows 2008 virtual servers, and ideally I would like for updates to download and install at a specified time. Getting that right seems easy enough via GPO, but what I am trying to avoid is the server auto-restarting afterwards.
My goal is to just be able to go in manually after scheduled updates should have occurred and reboot the server on my own. 
I can see where you can enable "No auto-restart with logged on users for scheduled automatic updates installations", but my concern is the "logged on users" part.
Meaning, I log on and off to my servers via RDP to do anything. So with that in mind, if my scheduled updates are taking place late at night when nobody is "logged on", it would seem this setting would have it auto-restart because nobody appears
logged on.  Am I thinking correctly on this?

Answer 1

this topic gets discussed a lot in the WSUS forum, since it's all about the WUAgent behaviour and the settings WUAgent is influenced by (and some settings are offered by GP but are not honoured on all versions of Windows).
Although the templates and settings are part of GP, it's not actually a GP function, it's actually a WUAgent thing.
WUAgent settings are a little "misleading", in that you can nominate the day/time to perform a scan + install, but you can't control the day/time of any subsequent restart, using basic GP settings (which is why there are other products like ConfigMgr and
3rd party products, both of which use the WU APIs and SDK)
Lawrence has written a number of blog posts on his solarwinds blog, detailing the various settings and how they behave, on different versions of Windows.
http://thwack.solarwinds.com/community/application-and-server_tht/patchzone/blog/2013/03/21/configuring-the-windows-update-agent--general-settings-part-2
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)