GPO Windows Update Settings to schedule installs and reboots

I need to set GPO settings on a domain to schedule the install reboot for windows updates. The device is public facing so don't want any pop's on screen and want it all to happen out of hours. I have set configured automatic updates to auto download and schedule the install. Set the install time to be 20:00 every Monday with active hours to be between 8am -7pm. However the issue is that I am noticing from the event log that it is still installing updates during the active hours. If anyone can provide any tips, that would be appreciated. TIA

Question by Hhorto on Super User, licensed CC BY-SA. We show a short excerpt and link to the original thread as credit.