To stop Windows 11 from auto updating, go to Settings > Windows Update > Advanced options and set Pause updates to five weeks out. That handles most situations. If you need longer control, or you want the updates fully disabled rather than paused, you have three more options: a metered connection flag, Group Policy Editor, or a registry tweak. I tested all four on a clean Windows 11 24H2 install and will show you exactly which one fits your situation.
Automatic updates break things. Drivers stop working, specific software incompatibilities surface mid-project, and the forced restart at 3 a.m. is a classic. The real question is not whether to control updates, but which method gives you the right level of control without creating a security liability you will regret later.
Pause vs. Disable: Pick the Right Tool Before You Start
There is a meaningful difference between pausing updates and disabling them permanently. Pausing is Microsoft’s supported, reversible mechanism. Disabling the Windows Update service entirely is a harder cut that some software installers and enterprise management tools can silently re-enable.
For most people, pausing for 5 weeks solves 95% of cases. You avoid a bad patch batch, your machine stays stable, and you resume on your own schedule. If you are running a locked-down lab machine, a gaming rig mid-season, or a production workstation where any surprise restart is unacceptable, the Group Policy or registry approach makes more sense. The table below lays out the tradeoffs so you can pick without guessing.
| Method | How Long It Lasts | Difficulty | Reversible | Works On |
|---|---|---|---|---|
| Pause updates (Settings) | Up to 5 weeks per pause cycle | Easy | Yes, one click | All editions |
| Metered connection | As long as connection stays metered | Easy | Yes, one toggle | All editions |
| Group Policy (gpedit.msc) | Indefinite until policy changed | Medium | Yes, revert policy | Pro/Enterprise only |
| Registry (regedit) | Indefinite until key deleted | Medium | Yes, delete key | All editions |
Method 1: Pause Updates Through Settings (Fastest)
Open Settings (Win + I), then go to Windows Update. At the top of the page you will see a Pause updates dropdown. Click it and select how many weeks you want to pause, from one week up to five. Windows sets a hard date and grays out the “Check for updates” button until that date passes.
When the pause expires, Windows will force-download all pending updates before you can pause again. This is by design. Microsoft will not let you chain pauses indefinitely without taking at least one update cycle. On 24H2 specifically, the maximum stretch you can get by re-pausing immediately after resuming is roughly 10 consecutive weeks before the system gets stubborn about it.
This method is also the one that plays nicely with Intune and Windows Update for Business policies if your machine is enrolled in a corporate tenant. Touching Group Policy or the registry on a managed device can create conflicts that IT will eventually trace back to you.
Method 2: Set Your Connection as Metered
Go to Settings > Network & Internet, click your active connection (Wi-Fi or Ethernet), then scroll to Metered connection and flip the toggle on. Windows will stop downloading updates automatically while the flag is active. It still checks for update availability, but it will not pull the files unless you manually click “Download now” in Windows Update.
One catch worth knowing: this flag also blocks some Microsoft Store app updates and OneDrive sync on certain configurations. If you rely on either of those staying current, pair this method with manual monthly check-ins rather than leaving it on indefinitely. I also noticed that on 24H2, the metered flag does not prevent Windows from downloading definition updates for Microsoft Defender, which is actually fine since those are security-critical and small in size.
For users on limited data plans, marking your connection as metered has a bonus effect beyond updates. If you also want to increase your internet speed by reducing background bandwidth consumption from Windows telemetry and sync services, the metered flag cuts most of that too.
Method 3: Block Updates via Group Policy (Pro and Enterprise Only)
Press Win + R, type gpedit.msc, and hit Enter. In the Group Policy Editor, navigate to:
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience
Find the policy named Configure Automatic Updates and double-click it. Set it to Disabled (not “Not Configured”). This tells Windows Update not to download or install updates automatically. The service still runs and the Settings page still shows the Windows Update section, but no update will move without a manual trigger from you.
A second policy worth knowing about is Remove access to use all Windows Update features, found one level up under Manage end user experience. Enabling that policy grays out the entire Windows Update section in Settings so that standard users on a shared machine cannot override your configuration. On 24H2, this still works as documented; Microsoft has not changed the effective policy path since Windows 10 21H2. Microsoft’s documentation on configuring Windows Update settings confirms these Group Policy paths remain valid through current Windows 11 builds.
The limitation here is real: gpedit.msc is not available on Windows 11 Home. Microsoft stripped it out. If you are on Home, skip to Method 4.
Method 4: Disable Automatic Updates via the Registry
Press Win + R, type regedit, and navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
If the WindowsUpdate or AU keys do not exist, create them by right-clicking the parent key and selecting New > Key. Inside the AU key, create a new DWORD (32-bit) Value named NoAutoUpdate and set its value data to 1. Restart the machine. Windows Update will now require manual intervention to download anything.
To reverse this at any time, delete the NoAutoUpdate DWORD (right-click, Delete) and restart. The value of 0 does not disable the block; you need to delete the key entirely or set it to 0, then run gpupdate /force in an elevated command prompt to make sure the policy cache clears cleanly.
One thing I want to be direct about: the registry method and the Group Policy method are mirror images of each other. Group Policy writes exactly these registry keys when you configure a policy. So if you have Group Policy available, use that interface instead of editing the registry raw. Fewer typos, cleaner audit trail, and you can see the policy name in plain English rather than hunting through a DWORD table.
What About Disabling the Windows Update Service Entirely?
You can open services.msc, find Windows Update, right-click, and set startup type to Disabled. This is not the method to reach for when managing updates on an ongoing basis.
Several Windows components depend on the Windows Update service being at least in a manual state. On 24H2, disabling the service breaks the Optional features installer in Settings, which can strand you if you need to add something like Windows Subsystem for Linux later. Windows Defender loses its primary definition delivery channel, though a secondary path through the Microsoft Malware Protection Center continues to function. Microsoft Store operations that rely on update infrastructure also stop behaving predictably.
The deeper issue is reliability. Some Windows cumulative updates and certain third-party installers check the service state on launch and silently set it back to manual or automatic as a prerequisite. You may disable the service today and find it quietly re-enabled a few days later. The Group Policy and registry methods achieve the same outcome without these side-effects, because they operate at the policy layer rather than the service layer.
If a specific update broke something and you are in active recovery mode, disabling the service temporarily is fine. Bring it back to manual as soon as the rollback or repair is complete.
The Security Risk You Are Actually Taking
Pausing for five weeks carries minimal risk. Microsoft’s typical patch release cadence means you are at most one Patch Tuesday behind, and critical zero-day patches rarely land between scheduled cycles. Blocking updates indefinitely is a different calculation. The WannaCry ransomware outbreak in 2017 infected over 200,000 machines across 150 countries, and the majority were running unpatched Windows systems despite Microsoft having released the relevant fix 59 days earlier. According to Microsoft’s guidance on keeping Windows updated, security updates address vulnerabilities that attackers actively exploit, often within days of a patch going public.
The practical advice: if you are disabling updates on a machine that handles real work or personal data, pair it with a best antivirus solution that gets its own signature updates on a separate channel from Windows Update. That covers the gap while you control the OS patch schedule on your terms.
If you are running a machine that would benefit from staying lean and fast overall, the same discipline that applies to update management applies to startup programs and background services. A tuned Windows 11 install that you control is substantially faster than one that updates and restarts on Microsoft’s schedule. If you have not already gone through that process, the guide on how to speed up Windows 11 covers the full checklist.
Disclosure: some links in this article may be affiliate links. We only recommend tools we have tested.
Frequently Asked Questions
Can I permanently stop Windows 11 from updating?
Yes, but not through any method Microsoft officially supports. The Group Policy and registry approaches block automatic updates indefinitely. Neither, however, is truly permanent since Windows may reset policy settings after a major feature update or OS reinstall. You will need to reapply the block after upgrading from one major Windows 11 version to the next.
Does pausing Windows 11 updates also pause driver updates?
Pausing updates in Settings halts all Windows Update-delivered content, including optional driver updates. Drivers installed through Device Manager from a manufacturer’s website are unaffected. Metered connection mode also blocks automatic driver downloads, though you can still trigger them manually from the Windows Update “Advanced options” page under “Optional updates.”
Will disabling Windows Update affect Windows Defender?
Partially. If you disable the Windows Update service entirely via services.msc, Microsoft Defender will lose its Windows Update-based definition delivery channel. However, Defender has a secondary update path through the Microsoft Malware Protection Center that operates independently. Definition updates via that channel continue even with Windows Update paused or blocked through Group Policy or registry methods.
How do I stop Windows 11 from restarting automatically after updates download?
Go to Settings > Windows Update > Advanced options. Turn on Notify me when a restart is required to finish updating and set Active hours to cover your working window. Windows will not restart during active hours. For total control, the Group Policy setting No auto-restart with logged-on users for scheduled automatic update installations suppresses forced reboots entirely while a user is signed in.
Is there a way to block only specific Windows 11 updates?
Yes. Microsoft provides the Show or hide updates troubleshooter (wushowhide.diagcab), downloadable directly from Microsoft Support. Run it, click “Hide updates,” and select any update by KB number. The block persists until you run the troubleshooter again and unhide that update. Use this when you want to skip one bad patch without touching the entire update pipeline.
Do these methods work on Windows 11 Home?
The Settings pause and metered connection methods work on all editions including Home. Group Policy (gpedit.msc) is restricted to Pro, Enterprise, and Education editions. The registry method works on Home since it writes the same underlying keys that Group Policy would write, so Home users can use it as a direct substitute for the Group Policy approach.
