Disable Windows 11 Auto Update Permanently

Turning off automatic updates in Windows 11 is possible, but there is no supported switch for it — and every method here is a trade-off against your own security. If you have a machine that genuinely needs it, our new PCArmour Guard app does it with one toggle and keeps it that way.

Should you disable updates at all?

Usually not. Updates protect the machine from security threats and carry important fixes and improvements, and Microsoft designed Windows to update automatically for good reasons. The one case where it genuinely makes sense is a fixed-function machine such as a digital signboard, where an unattended restart is worse than a delayed patch — and where someone is committed to patching it manually instead.

If you are sure, note that none of the manual methods below are guaranteed to be permanent. Major system updates from Microsoft can override your settings. Back up your system before making changes, especially when editing the Registry or Group Policy.

Every method on this page, in one toggle

Each manual method below tackles a single layer, and none is guaranteed to last. Guard handles all of them together, plus the parts they don't reach.

• Policies, covering the Group Policy and registry settings from methods 1 and 2.
• Services and medic components, including the Windows Update Medic Service from method 3 that exists to restore the update service.
• The update orchestrator and the scheduled tasks that re-trigger scans, which the manual methods don't touch.
• No update-driven reboots, so a signboard or kiosk isn't restarted unattended.
• Held in place through reboots, cumulative updates and Windows' 'self-healing', rather than quietly reverting.

More than an update switch

Alongside Windows Update control, Guard includes six more lockdowns for machines that need to stay exactly as you set them.

1. Using the Group Policy Editor

Available in Windows 11 Pro, Enterprise and Education editions. This is one of the more effective and semi-permanent ways to control updates.

1. Press Win + R, type gpedit.msc and press Enter.
2. Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience.
3. Double-click Configure Automatic Updates.
4. Select Disabled, then click Apply and OK.
5. Restart the PC to apply the changes.

With this setting disabled, Windows will no longer install updates automatically — you will have to check for them manually under Settings > Windows Update. Alternatively, enable the setting and choose Option 2: Notify for download and auto install, which lets you control when updates happen without turning them off completely.

2. Using the Registry Editor

Works on all editions, including Windows 11 Home. This method is more technical, so proceed carefully and back up the registry first.

1. Press Win + R, type regedit and hit Enter. You may need admin approval.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows.
3. Right-click the Windows folder, select New > Key and name it WindowsUpdate.
4. Right-click the new WindowsUpdate key, select New > Key and name it AU.
5. Inside AU, right-click and choose New > DWORD (32-bit) Value, and name it NoAutoUpdate.
6. Double-click NoAutoUpdate and change its value from 0 to 1.
7. Restart the PC for the change to take effect.

To undo this, change the value back to 0 or delete the NoAutoUpdate entry. If you would rather be notified before updates install, create another DWORD in the same location named AUOptions and set its value to 2.

3. Disabling the Windows Update service

This stops the update service from running, but Windows may try to restart it later.

1. Press Win + R, type services.msc and press Enter.
2. Find Windows Update in the list.
3. Right-click it and select Stop.
4. Double-click it, set Startup type to Disabled, then click Apply and OK.

You can also disable the Windows Update Medic Service (WaaSMedicSVC), which exists specifically to restore the update service.

4. Setting a metered connection

Less reliable, but simple. Marking the connection as metered may make Windows delay non-essential updates.

1. Open Settings with Win + I.
2. Go to Network & Internet, then click your current connection (Wi-Fi or Ethernet).
3. Click Properties and toggle Metered connection to On.

This will not stop everything — critical updates may still download.

In most cases the answer isn't off, it's controlled.

Safer alternatives

If the real problem is unwanted restarts rather than the updates themselves, these give you control without leaving the machine unpatched.