Page tree
Skip to end of metadata
Go to start of metadata

As some Microsoft updates can sometimes cause stability issues, if you are in a critical environment without given time to test and eventually to roll back the Microsoft updade, you may choose to disable the Windows updates.
Still, some Windows system vulnerabilities are fixed on a regular basis by Microsoft, therefore you may want to update your Windows system from time to time.
Your antivirus software has to be updated as well; if you are using a third party antivirus, disabling the Windows update service has no influence on it.  If you are using the embedded Windows Defender, see below how to update it.

When updating your Windows to a new major version (Windows 10 Anniversary to Creator for example), some settings will be reset to default, please see this page for details. 



To completely turn off the Windows updates

On Windows 7

  • Go in Windows Control Panel > Administrative Tools > Services
  • Locate the Windows update service, right click on it and select Properties.
  • Change its Startup type to Disabled
  • Restart the computer.

On Windows 10

Depending on the Windows 10 version, additional services and tasks have to be disabled, and some cannot be disabled through the Services panel.

1.Services
  • Download and extract this zip file in any convenient place : W10UpdatesDisable.zip
    Double click on the W10updateDisable.reg file to include it in your Windows registry, and restart the computer.
  • If you prefer to do this modification manually (at your own risk), go in Windows Control Panel > Administrative Tools > Registry Editor.
    Browse to HKEY_LOCAL_MACHINE > SYSTEM >CurrentControlSet > Services
    Go in the wuauserv folder, and change the "Start" value to 4.
    Go in the UsoSvc folder, and change the "Start" value to 4.  Depending on your Windows 10 version, this folder may not exist, you can skip this step.
    Go in the WaaSMedicSvc folder, and change the "Start" value to 4.  Depending on your Windows 10 version, this folder may not exist, you can skip this step.
    Restart the computer for the changes to apply.

2.Tasks
  • Go in Windows Control Panel > Administrative Tools > Task Scheduler.
    Browse the Task scheduler library to Microsoft > Windows > WindowsUpdate.
    Right click on task(s) and select Disable (depending on the Windows 10 version, there might be several tasks)
  • Some tasks can only be modified by the "System" user, which by default not accessible even with administrator rights.
    If you are an advanced user, please download this zip file W10TaskDisable.zip
    Extract it at the root of drive C: (all files must be in a "C:/W10TaskDisable" folder)
    Right click on MTTaskSched.bat and select Run as Administrator.
    Click Agree on the license agreement window, the Task Scheduler window will then automatically open.
    Browse the Task Scheduler Library to Microsoft > Windows > UpdateOrchestrator
    Select the tasks that are not disabled, and right click to disable those.
    Browse now to WaaSMedic, and disable the Performance Remediation task.
    Browse to WindowsUpdate and make sure the task(s) are disabled.

    Do not  modify any other task, this may prevent Windows to work properly.
    Do not delete any task, this may prevent Windows to work properly.
  • If you have to set back those tasks to their default Status :
    UpdateOrchestrator : see screenshot above.
    WaaSMedic, - Performance Remediation : Ready
    WindowsUpdate - Scheduled Start : Ready



Note :
-If you browse to Windows Settings > Updates & Security, an error message might be displayed, or the window will close (depending on your Windows version).  As the update services are disabled, that is the expected behavior.
-Windows Store Apps cannot be installed or updated when the Windows Update service is not running.
-Some programs may require the Windows updates service to run for their installation, but that does not mean you need to be connected to the internet, you may turn off your internet connection during the installation to avoid Windows updates installation.
-Sealevel GPIO requires .NET 3.5, which is by default not installed on Windows 10.  Please follow point 2 or 3 on this page to enable .NET 3.5 without the Windows update service running.



Windows Defender antivirus update

If you are using the Windows Defender antivirus protection, you should update its Threat definitions on a regular basis:


To re-enable the Windows updates

On Windows 7

  • Go in Windows Control Panel > Administrative Tools > Services
  • Locate the Windows update service, right click on it and select Properties.
  • Change its Startup type to Automatic-Delayed (Windows 7).
  • Restart the computer.

On Windows 10

  • Go in Windows Control Panel > Administrative Tools > Task Scheduler.
    Browse the Task scheduler library to Microsoft > Windows > WindowsUpdate.
    Right click on task(s) and select Enable (depending on the Windows 10 version, there might be several tasks)
  • Download and extract this zip file in any convenient place : W10UpdatesDisable.zip
    Double click on the W10updateDefault.reg file to include it in your Windows registry, and restart the computer.
  • If you prefer to do this modification manually (at your own risk), go in Windows Control Panel > Administrative Tools >Registry Editor.
    Browse to HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services
  • Go in the wuauserv folder, and change the "Start" value to 3.
  • Go in the UsoSvc folder, and change the "Start" value to 2.  Depending on your Windows 10 version, this folder may not exist, you can skip this step.
  • Go in the WaaSMedicSvc folder, and change the "Start" value to 3.  Depending on your Windows 10 version, this folder may not exist, you can skip this step.


How to apply specific updates when Windows Update service is disabled

  • Download the specific update through https://www.catalog.update.microsoft.com/home.aspx 
    (you can download from any computer, and copy the downloaded update on the target computer)
    Search for the KB Number, then download the version corresponding to your operating system.
  • Some updates are available as "Delta" or "Cumulative" updates.
    Please download "Cumulative" updates, as it contains all the required elements.
  • Disable your internet network adapter (with Network and Sharing Center - Change Adapter settings) or remove the internet network cable.
  • Go in Windows Control Panel > Administrative Tools > Services
    Locate the Windows update service, right click on it and select Properties.
    Change its Startup type to Manual, click on Apply and Start the service.
  • Double click on the update file and follow the instructions to install the update.
  • Once your system is restarted, disable the Windows update service.