I have setup a pilot test group that has a deployment schedule setup. It seems even though they are inside the windows they are deploying outside the windows I I can provide a copy of the schedule and setting if requested for further assistance. But it is set for Thursday First and third after Patch Tuesday between 00:00 and 04:00. It is set to download the patch prior to deployment windows but only run patch during the time stated above. The automatic deployment is setup for approval after 1 day of it testing, and it is set to deploy outside the window and reboot outside the window if missed more then 3 consecutive days.