Windows restarted overnight? Find the update and missed warning

After an overnight restart, open Settings > Windows Update > Update history. Check what was installed, then look for any earlier warning in a notification log that was already running. An update installed that day is a useful clue, but it does not by itself prove why the computer restarted.

This guide uses the Windows 11 Settings layout. On a managed work PC, your organisation may control restart and update settings.

Check installed updates before changing anything

Open Update history and note the update name and installation date. Return to Windows Update to see whether another restart is still pending. Microsoft's Windows Update FAQ describes checking installed updates and scheduling a restart when Windows offers that option.

Compare those records with what you know: when you last used the PC, whether it was plugged in and whether you had already scheduled a restart. Avoid uninstalling an update simply because it shares a date with the interruption.

If update history does not explain the restart, investigate the system event separately. A saved banner is not a crash report. The Event Viewer and notification-history guide explains which record serves each task.

Look for the warning that arrived before the restart

Open Notification Center first if the warning is still there. If it has gone and you already use Notification Logger, filter the saved history to the period before the restart. Check available Windows or system senders, then search for words such as restart or update in the language your PC uses.

Compare the captured text and time with the update record. A useful entry may tell you that a restart was requested or scheduled. It does not show whether Windows ultimately restarted for that reason.

Capture depends on Windows exposing the notification while the logger is running and authorised to read it. Some prompts are shown inside Settings instead of as ordinary Windows notifications. Check what was actually recorded on your PC; do not rely on a complete archive of every update prompt.

Set active hours around the time you actually work

In Windows 11, open Settings > Windows Update > Advanced options > Active hours. Microsoft's active-hours instructions describe automatic adjustment based on device activity and a manual schedule.

If you regularly work late, review the displayed period rather than assuming it covers your evening. For an overnight task, save its progress and arrange any pending update restart before starting it. Active hours help with update timing; they are not a guarantee that an unattended task will survive every interruption.

On a work PC, ask IT about the approved update schedule if settings are unavailable or a policy deadline is shown. Keep the policy in place while arranging a time that fits the task.

Prepare for the next update without turning protection off

1. Finish and save open work before a scheduled restart.
2. Check Windows Update for a pending restart and choose a convenient time where the option is available.
3. Review active hours after your working schedule changes.
4. Keep a note of the task's recovery or resume procedure if it must run unattended.
5. Use the originating app and system records to investigate an unexpected interruption.

Do not disable update services, edit the registry or remove security updates just to suppress a restart warning. Scheduling and saved work address the immediate problem without sacrificing the update process.

If you want to preserve future warning text, review Notification Logger's capture, search and retention controls. Its log supplements Windows Update history; it cannot recover an alert from before capture began.

Windows 11 update paths were checked against Microsoft documentation on 10 October 2026.

Frequently asked questions