How can I permanently disable Windows Update service and better control when Update is run?

Question

None of the previous answers work.

None of the suggestions about disabling or anything works.

Update just turns itself back on and runs without my permission.

THIS IS UNACCEPTABLE!!

I need to be able to control MY computer and when Update runs or NOT RUN.

I just lost a bunch of data in the middle of work again because Update decided to randomly take over my computer. Last time I was in the middle of bidding in an auction and Update shut off my computer and started updating, and I was unable to use my computer for over 40 minutes.

And having a schedule of a week or month doesn't work for me.

Just allow me to turn off updates, and when MY schedule allows it, let ME decide at that moment to update.

Simple. It used to be that way. Toggle: Turn Update On, Turn Update Off.

Answer 1

If you really want it disabled, Google or Bing search wub.exe sordum - Windows Update Blocker.

Answer 2

Hello,

Thank you for posting in Q&A forum.

I deeply apologize for any inconvenience caused to you.

We can disable Win11 automatic updates by setting, group policy, and registry

1. By setting

Open settings.

Click Windows Update.

Use the "Pause Updates" setting and select the number of weeks (up to 5 weeks) to disable Windows 11 automatic updates.

2. By modifying the group policy

Open "Start".

Search for gpedit.msc, then click on the top result to launch the local Group Policy Editor.

Navigation to the following path: Computer Configuration>Administrative Templates>Windows Components>Windows Update>Manage end user experience

Double click on the "Configure Automatic Update" policy on the right side.

Select the disable option to permanently turn off automatic updates on Windows 11.

Click the "Apply" button.

Click the "OK" button.

After completing these steps, Windows 11 will automatically stop downloading and installing updates.

• By modifying the registry

Press Win+R to open the "Run" dialog box, enter regedit, and then press Enter to open the Windows Registry Editor.

Enter the following path in the address bar and press enter

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Right-click on the Windows folder and select New > Key. Rename the newly created key as WindowsUpdate and press enter to save. Now, right-click on the new WindowsUpdate folder and select New > Key again. Name the key AU. Move your cursor to the adjacent panel, right-click anywhere, and select New followed by DWORD (32-bit) Value. Rename the new DWORD Value as NoAutoUpdate. Right-click on the NoAutoUpdate value and choose Modify (or double-click on it to bring up the Modify dialogue box). The default value data will be 0, i.e., disabled; change the value data to 1 and enable the NoAutoUpdate.

If you need to update the system, you must manually perform this operation from "Settings">"Windows Update", and then click the "Check for Updates" button.

Best regards，

Jill Zhou

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

One easy way to limit updates was changing your internet connection to a metered connection label and make sure you have the don't download from metered connections. This worked pretty good for me in the recent past. Even if it doesn't stop all updates, it will hold off the massive updates that usually could be more harmful to have auto performed without a system backup. I don't remember having any issues so worth a thought. Going further, If you have a managed switch or router that is capable you can also block Microsoft's websites or change your windows update server from the default Microsoft update server to a non-existent update server vs Custom made windows update server options. Seem to remember we also use to change the default windows update server on some Customers to non-existent to prevent this plus we always did updates manually because critical systems can not have automatic updates for the very reason they are critical all changes need logged via a change log and automatic updates violate this even on some commercial, industrial and government sites which requiring change logs on critical systems for every action (usually no internet on those in the past, but recently people and IT folks think it's ok and safe to connect critical systems to a network with a live internet connection) Also most critical system application vendors don't a get chance to verify the microsoft updates is safe to install until after microsoft releases the update or pushes it. Thus your opening pandora's box for unknown zero day vulnerabilities because the Application vendor didn't get a chance to ok the install of the microsoft updates compatibility with the application. Very dangerous ground that most IT folk ( and microsoft them self) don't think of is the zero day vulnerabilities caused by installing untested windows updates with the software that is installed on the system. to properly update, If you have 11 other custom none microsoft software apps installed each vendor should be contacted before a microsoft update is installed to make sure of compatibility and they don't know of issues. reason is as while closing one zero day Microsoft found you might be opening a new unknown zero day on an application side and or taking down a critical system or life safety system. Some of the larger industrial or commercial software once installed on a microsoft operating system like those of critical nature technically are no longer a pure Microsoft operating system but a truly custom operating system and the Vendor of that software should be the only source of updates vs any untested from microsoft or your putting peoples lives at risk.