How to perminantely disable windows 10 updates

Gillespie, Jess 26 Reputation points
2021-09-07T16:17:41.45+00:00

How can we completely disable windows 10 pro 20H2 update. We stopped the service and set it to disable, but over time the service restarts and updates continue to happen. Our systems do not have internet access so this causes a problem and sometimes restarts the computer.

thanks.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
7,445 questions
{count} votes

8 answers

Sort by: Most helpful
  1. kashanrat 16 Reputation points
    2022-02-16T03:50:21.5+00:00

    Disclaimer

    Credit goes to original finder (not me). This workaround disables ALL windows updates permanently and works on all windows 10 versions.

    >>Caution! Modifying the registry can cause serious system problems, if you do not know what you are doing. Disabling updates also puts you at risk of existing vulnerabilities<<<

    Do not attempt this method if “Update and shutdown” or “Update and restart” options are shown in power. The workaround is completely reversible so if you decide you want to enable updates later, you can do so.

    FOREWARNING:

    Microsoft Store will no longer be able to connect to internet (already installed programs will not be affected) -will be normal again once the process is reversed

    Windows defender - I don’t use this garbage so I can’t attest to the affected function of this component -will also be normal again once the process is reversed if it was affected. To be fair, no one uses that garbage anyways....

    VIDEO TUTORIAL OF THE SAME https://www.youtube.com/watch?v=6atgKRQjsKA

    Solution - Cut off access to the 3 services, "Update Orchestrator Service", "Windows Update", "Windows Update Medic Service"

    Method:

    Go to registry editor, and go to HKLM\SYSTEM\CurrentControlSet\Services

    Scroll down to UsoSvc>Right Click>Permissions>Advanced>Change owner>Advanced>Find Now>Select Administrator>OK>OK>Disable inheritance>Remove all inherited permissions from this object>Tick "replace all child object permissions...">Apply>Yes>Yes>OK>OK>OK

    Do the same for "WaaSMedicSvc" and "wuauserv"

    >>After changing as shown in video, no one will be able to read or write from them (including system and yourself)<<<

    To confirm: Run>Services.msc>Action>Refresh

    "Update Orchestrator Service", "Windows Update", "Windows Update Medic Service" should be having an error message in description

    Restart PC

    To confirm: Run>Services.msc>Action>Refresh

    "Update Orchestrator Service", "Windows Update", "Windows Update Medic Service" should have disappeared from the list.

    Open Windows Update window and it will display "Something went wrong. Try to reopen Settings later"

    If you decide you want updates later in life, you can just use the reversal method mentioned below and everything will be as it was.

    Reversing disabling updates

    Go to registry editor, and go to HKLM\SYSTEM\CurrentControlSet\Services

    Scroll down to UsoSvc and select it. Will give you an error. Press OK and close error window.

    Now UsoSvc is already selected>Right Click>Permissions>Press OK on warning window>Advanced>Press OK on warning window>Change owner>Advanced>Find Now>Select Everyone>OK>OK>Apply>Enable inheritance>Apply>Tick "replace all child object permissions...">Apply>Yes>>OK>OK>

    Do the same for "WaaSMedicSvc" and "wuauserv"

    Restart PC

    Enable and start the following services if not already running in services (Run>services.msc):

    -Update Orchestrator Service

    -Windows Update

    -Windows Update Medic Service

    1 person found this answer helpful.
    0 comments No comments

  2. S.Sengupta 7,246 Reputation points MVP
    2021-09-08T01:20:50.56+00:00

    You can pause the update as suggested here:

    Manage updates in Windows 10

    Here are tips on how to permanently turn off Windows Update....

    0 comments No comments

  3. Limitless Technology 37,746 Reputation points
    2021-09-08T07:59:15.83+00:00

    Hello,

    Thanks for reaching out.
    You may check below GPO settings to prevent updates being installed.

    If the device is running Windows 10 Pro or Enterprise, you can use the Group Policy Editor to set target feature update version.
    To configure a target feature update version with Group Policy, use these steps:
    Search for gpedit and click the top result to open the Group Policy Editor.
    Browse the following path:
    Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business
    Double-click the Select target Feature Update version policy.
    Check the Enabled option.
    Under the “Options” section, confirm the target version of the feature update you want to set the device.

    Thanks,

    0 comments No comments

  4. Kapil Arya 6,116 Reputation points MVP
    2021-09-08T11:50:39.833+00:00

    Hello,

    You can use Group Policy to block automatic updates. This ensures updates are downloaded/installed only when you want them:

    1. Open GPO snap-in by running gpedit.msc command.
    2. Go to Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update.
    3. Double click Configure Automatic Updates policy setting, select Enabled. Then under 'Configure automatic updating' section, choose 2 - Notify for download and notify for install.
    4. Click Apply, followed by OK.

    Multiple reboots will finally disable auto updates.

    Reference: https://www.kapilarya.com/avoid-windows-updates-automatic-download-windows-10

    Let us know if this helps!

    Note: Included link in this reply refers to blog post by a trusted Microsoft MVP. 

    0 comments No comments

  5. Reza-Ameri 15,186 Reputation points
    2021-09-08T15:41:24.543+00:00

    It is not a good idea to turn off Windows Update when you could easily manage it and delay restart , take a look at:
    https://learn.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb
    https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates
    Like it has been mentioned, you may disable it using the Group Policy but it will put your system at risk.