Could you please provide guidance on how to permanently disable the Windows Update service to prevent it from auto-starting?

Question

I am experiencing an issue with the Windows Update service (wuauserv) on my VDI desktop. Despite multiple attempts to disable and stop the service, it continues to auto-start after a short period. Below are the details of the methods I have used to try to resolve this issue, but none have been effective in permanently preventing the service from starting.

1. Using Group Policy:
   • Open Local Group Policy Editor (gpedit.msc).
   • Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
   • Set Configure Automatic Updates to Disabled.
2. Using Registry Editor:
   • Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.
   • Create or modify NoAutoUpdate (DWORD) and set its value to 1. Additional Notes:
     • Event Viewer Logs: I have checked the Event Viewer logs and observed that the Service Control Manager is restarting the Windows Update service shortly after it is stopped.
     • Windows Update Medic Service: I have disabled the WaaSMedicSvc service as well, but this did not resolve the issue.

Answer 1

Usually what works best is an OU with specific limitations on Windows Updates.

This is especially helpful for environments implementing WSUS and bypassing general Windows Updates from MS.

Answer 2

Hi Saurabh,

Thanks for your post. Please kind understand that there is limit way to permanently stop Windows updates. However, you can delay them by setting your internet connection as metered, which can prevent automatic updates from downloading. Keep in mind that delaying updates for too long can leave your system vulnerable to security risks, so it's important to stay up to date with updates as much as possible.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.