How to disable or block automatic Windows Update
Windows 10 automatically downloads updates and installs them without asking. If you need to disable automatic Windows Update, you’re not alone — this ‘feature’ isn’t popular with users. The installation normally restarts the system when users don’t expect it to, resulting in interrupted workflows or lost work.
How to Disable Automatic Windows Update on Windows 10
Windows 10 users who are tired of updates installing automatically have looked for ways to block them. Generally, blocking updates is not a good idea — they’re often important and contain critical security patches. The best way to prevent the system from restarting while you work is to configure your active hours.
- Open the Settings app with the Win+I keyboard shortcut.
- Select Update & Security.
- Select the Windows Update tab.
- Click Change active hours.
- Turn on the Automatically adjust active hours for this device based on activity option.
- Click Change next to Current active hours.
- Select a time slot when you normally do not use your system.
- Windows 10 will install updates during this time slot, leaving your working hours uninterrupted.
If this doesn’t do the trick for you and you absolutely need to block or disable the updates, try the methods listed below.
Pause Windows Update in Settings
The least disruptive way to stop automatic updates is to use the built-in pause feature. This temporarily halts downloads and installs without touching any services or policies, and it works on all editions of Windows 10 and Windows 11.
Windows 10:
- Open the Settings app with the Win+I keyboard shortcut.
- Select Update & Security.
- Select the Windows Update tab.
- Click Pause updates for 7 days to apply an immediate one-week pause.
- To extend the pause further, click Advanced options, then use the Pause until dropdown to choose a date up to 35 days from today.
Windows 11:
- Open the Settings app with the Win+I keyboard shortcut.
- Select Windows Update.
- Next to Pause updates, open the dropdown and choose how long to pause — up to 5 weeks.
Two important caveats to keep in mind: the pause expires automatically once the chosen period ends, and Windows will require you to install any pending updates before you can pause again after reaching the maximum limit. Clicking Resume updates at any point returns the device to its normal update schedule immediately.
Disable Automatic Windows Update via the Update Service
Windows 10 checks for updates by running a background service. Disabling the Windows Update service (wuauserv) is one of the more direct approaches, but treat this as a temporary and unofficial workaround, not a permanent fix. Windows may re-enable update components automatically after a reboot or a future servicing event through the Windows Update Medic Service (WaaSMedicSvc) and the Update Orchestrator — mechanisms designed specifically to restore update functionality. If your goal is long-term, reliable control, the Pause feature, Group Policy notify mode, or the registry-based policy method described below are more dependable choices.
- Tap the Win+R keyboard shortcut to open the run box.
- In the run box, enter services.msc and tap the Enter key.
- In the window that opens, look for the Windows Update service.
- Double-click the service.
- In the window that opens, open the Startup type dropdown.
- Select Disabled, then click Apply and OK.
- Restart the system.
Important limitation: On many Windows 10 builds, the Windows Update Medic Service (WaaSMedicSvc) is a protected system service and cannot be reliably disabled from the Services console — it will typically revert to its running state after a reboot or the next servicing event. Even if you successfully stop the main Windows Update service, WaaSMedicSvc and the Update Orchestrator may restore update activity without warning. This means the service method may not survive reboots or feature updates, and should not be relied upon as a permanent solution.
Disable Windows Updates – Group Policy
If you’re running Windows 10 Pro, Enterprise, or Education, you can use the Group Policy editor to control how updates are delivered. This method is officially supported on those editions only — Windows 10 Home does not include the Group Policy editor and does not have a supported Group Policy route for this setting. This approach gives you more granular control compared to simply turning off the service.
- Tap the Win+R keyboard shortcut to open the run box.
- In the run box, enter gpedit.msc and tap the Enter key.
- Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience.
- Double-click Configure Automatic Updates.
- In the dialog that opens, select Enabled.
- Under Options, open the Configure automatic updating dropdown and select 2 – Notify for download and auto install.
- Click Apply, then OK.
- To apply the policy immediately, open Command Prompt and run gpupdate /force, or simply restart your computer.
This setting tells Windows to notify you before downloading updates, giving you full control over when the process begins. It’s a safer alternative to fully disabling the update service, since you still receive notifications about available updates.
Disable Windows 10 Updates via Registry Editor
If you’re on Windows 10 Home — which doesn’t include the Group Policy editor — you can achieve the same policy-based update control through the Registry. This is an advanced method intended for experienced users. Before making any registry changes, back up your registry first: open Registry Editor, click File > Export, choose a save location, and keep that file somewhere safe.
Navigate to the following path in Registry Editor (Win+R, type regedit, press Enter):
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
If the WindowsUpdate or AU keys do not exist, right-click the parent key and select New > Key to create them. Once you are inside the AU key, you have two practical options:
- Turn off automatic updates entirely: Right-click inside the AU key, select New > DWORD (32-bit) Value, name it NoAutoUpdate, and set its value data to 1. This tells Windows not to automatically download or install updates.
- Switch to notify-before-download behavior: Right-click inside the AU key, select New > DWORD (32-bit) Value, name it AUOptions, and set its value data to 2. This mirrors the Group Policy “Notify for download and auto install” setting, so Windows alerts you before anything is downloaded.
After creating your chosen value, restart your computer for the change to take effect — there is no gpupdate command on Home editions, so a full reboot is required.
To roll back: Open Registry Editor, navigate back to the same AU key, and either delete the NoAutoUpdate or AUOptions value entirely, or set NoAutoUpdate back to 0. Restart the computer and Windows will return to its default automatic update behavior. You can then go to Settings > Update & Security > Windows Update and click Check for updates to catch up on anything you missed.
Change Network to Metered Connection
Setting your network connection as metered will usually defer most automatic update downloads on Windows 10, but it is not a guaranteed full block — some critical or priority updates can still come through even on a metered connection. Think of it as a workaround that slows down updates rather than stops them entirely. Note that marking a connection as metered may also affect Microsoft Store app downloads and other sync behavior that respects metered status.
For Wi-Fi connections:
- Open the Settings app with the Win+I keyboard shortcut.
- Go to Network and Internet.
- Select the WiFi tab.
- Click Manage known networks.
- Select the network and click Properties.
- Scroll down and turn the Set as metered connection switch On.
For Ethernet connections (supported on current Windows 10 builds):
- Open the Settings app with the Win+I keyboard shortcut.
- Go to Network and Internet.
- Select the Ethernet tab.
- Click on your active Ethernet connection name.
- Scroll down and turn the Set as metered connection switch On.
Third-Party Apps
Generally speaking, using a third-party app to block updates isn’t a good idea. However, if that’s what you want to do, give StopUpdates10 a try. It provides a simple toggle to pause or resume Windows Update activity without requiring manual service changes. Keep in mind that you should still plan to re-enable updates periodically to keep your system secure.
Windows 11 Differences
If you’re on Windows 11, the core methods above still apply, but several Settings paths have changed. Here is what to know before you start.
The main Windows Update page is now at Settings > Windows Update — there is no longer an “Update & Security” category. To manage when restarts happen, go to Settings > Windows Update > Advanced options > Active hours and set your preferred working window there.
For pausing updates on Windows 11, go to Settings > Windows Update and use the Pause updates dropdown directly on the main page to choose up to 5 weeks. There is no permanent off switch anywhere inside the Windows 11 Settings app. If you need updates stopped beyond the pause limit, you must use one of the deeper methods: Group Policy (Pro, Enterprise, and Education editions), the Windows Update service in services.msc, or a metered connection. Each of those methods works on Windows 11 exactly as described in the sections above.
Conclusion
Blocking updates for an OS isn’t a good idea in the long run. Microsoft regularly releases security patches that protect against newly discovered vulnerabilities, and skipping them leaves your system exposed. It is also worth noting that standard Windows 10 support ended on October 14, 2025, meaning many Home and Pro PCs no longer receive regular security patches unless they are covered by Extended Security Updates (ESU), an LTSC release, or a managed enterprise arrangement. If your Windows 10 build is still receiving patches, disabling updates is risky — but running an already out-of-support Windows 10 system with updates blocked is even riskier, because there may be no future fixes to install even if you re-enable updates later. If a specific update is causing problems, try blocking just that update instead of disabling all updates entirely.
When you’re ready to return to normal updating, here is how to reverse each method you may have used:
- Windows Update service: Open services.msc, double-click Windows Update, set Startup type back to Automatic (Delayed Start), click Start to run the service immediately, and do the same for Windows Update Medic Service.
- Group Policy: Open gpedit.msc, navigate back to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience > Configure Automatic Updates, and set the policy to Not Configured. Run gpupdate /force or restart.
- Metered connection: Go to Settings > Network & Internet > WiFi > Manage known networks, select your network, open Properties, and turn the Set as metered connection switch Off.
- Pause: Go to Settings > Update & Security > Windows Update (Windows 10) or Settings > Windows Update (Windows 11) and click Resume updates.
After reversing any of the above, go to Settings > Windows Update and click Check for updates to download and install anything you missed.
Choosing the right method matters. Use Active hours if your only complaint is unexpected restarts — it lets updates install without interrupting your work. Use Pause if you need a short break from updates, such as before a big presentation or deadline. Use Group Policy notify mode if you want to approve each update manually before it downloads. Reserve disabling the Windows Update service entirely for situations where no other option is practical, and treat it as a temporary measure only.
If you’re blocking updates because installing them interrupts your work, make sure you schedule time each month — if not each week — to install them manually. An outdated system is a system that’s at risk. Use the methods above responsibly, and always re-enable automatic Windows Update once your immediate need has passed.
