Windows Update runs automatically by default, but you can stop it from installing updates without your permission
Windows automatically downloads and installs updates in the background, often restarting your computer without warning. If you need to control when updates happen — because you work on a deadline, run software that conflicts with updates, or simply want to choose the timing yourself — you can disable automatic updates through Settings or Group Policy, depending on your Windows version.
The method you use depends on whether you have Windows Home or Windows Pro/Enterprise. Home editions have fewer options, while Pro and Enterprise give you more control. Either way, you will still receive security patches; you will just decide when to install them.
Key Takeaways
- Windows Home users can pause updates for up to 35 days through Settings, but cannot disable them permanently.
- Windows Pro, Enterprise, and Education users can use Group Policy to turn off automatic updates entirely.
- Disabling updates does not remove security patches — you can still install them manually whenever you choose.
- If you disable updates and forget about them, your computer becomes more vulnerable to security threats over time.
- Restarting the Windows Update service will re-enable automatic updates if you change your mind later.
Pause updates for up to 35 days (Windows Home)
If you have Windows Home, you cannot turn off updates permanently, but you can pause them for up to 35 days. This is useful if you need to avoid restarts during a busy period and plan to re-enable updates afterward.
Open Settings by pressing Windows key + I. Click Update & Security on the left side. Under Windows Update, click Pause updates for 7 days. The button will change to show how many days remain. You can click it again to extend the pause, up to a maximum of 35 days total.
When the pause period ends, Windows will resume downloading and installing updates automatically. If you want to install updates before the pause expires, click Resume updates.
Disable automatic updates using Group Policy (Windows Pro and Enterprise)
Windows Pro, Enterprise, and Education editions include Group Policy, a tool that lets you disable automatic updates completely. Home editions do not have Group Policy.
Press Windows key + R to open the Run dialog. Type gpedit.msc and press Enter. If you see an error saying the file cannot be found, you have Windows Home and will need to use the pause method instead.
In the Group Policy window, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update. Look for the policy called Configure Automatic Updates. Double-click it to open the settings.
Select Disabled from the dropdown menu at the top of the window. Click Apply, then OK. Close the Group Policy window. Your computer will no longer download or install updates automatically.
Turn off the Windows Update service directly
If Group Policy is not available or you prefer a different method, you can disable the Windows Update service itself. This works on all Windows versions, though the setting may re-enable itself after major updates.
Press Windows key + R and type services.msc, then press Enter. Scroll down and find Windows Update in the list. Right-click it and select Properties.
In the Startup type dropdown, select Disabled. Click Stop to stop the service immediately, then click Apply and OK. Windows Update will no longer run in the background.
Be aware that disabling the service this way sometimes reverses itself after a major Windows update. If you want a permanent solution, Group Policy is more reliable.
Install updates manually when you choose
Even with automatic updates disabled, you can still install updates whenever you want. This lets you pick a time that works for you, like a weekend or after you finish important work.
Open Settings and go to Update & Security > Windows Update. Click Check for updates. Windows will scan for any available updates and show you what is ready to install. You can then choose to install them immediately or wait.
Microsoft releases major updates on the second Tuesday of each month (called Patch Tuesday). Checking for updates around that time ensures you get the latest security patches. Even if you disable automatic updates, checking manually once a month is a reasonable practice.
Re-enable automatic updates if you change your mind
If you disable updates and later decide you want them back on, the process is straightforward and reversible.
If you used Group Policy, open gpedit.msc again, navigate back to Configure Automatic Updates, and select Enabled instead of Disabled. If you disabled the Windows Update service, open services.msc, find Windows Update, and change the Startup type back to Automatic. Click Start to begin the service immediately.
Windows will resume checking for and installing updates on its normal schedule. You may see a notification that updates are pending — this is normal and means Windows is catching up on anything it missed while updates were disabled.
What to know about security when updates are off
Disabling automatic updates gives you control, but it also puts responsibility on you to stay current. Security vulnerabilities are discovered regularly, and updates patch them. If you disable updates and do not install them manually, your computer becomes more exposed to malware and hackers over time.
If you work in a corporate environment, your IT department may have policies about updates that you need to follow. Some workplaces require updates to be installed by a certain date or disable the ability to turn them off entirely.
A reasonable middle ground is to disable automatic restarts (which is different from disabling updates) so Windows can download and prepare updates without forcing an immediate restart. You can then restart on your own schedule. This keeps your computer secure while giving you control over timing.
Frequently Asked Questions
Will disabling updates remove security patches from my computer?
No. Disabling automatic updates stops Windows from installing them without your permission, but the patches still exist and you can install them manually whenever you want. You are responsible for checking for and installing them yourself.
Can I disable updates on Windows Home?
You cannot disable them permanently on Windows Home, but you can pause them for up to 35 days. If you need permanent control, you would need to upgrade to Windows Pro or use the Windows Update service method, though that may re-enable after major updates.
Why does Windows restart without warning even though I disabled updates?
If you paused updates rather than disabled them, the pause period may have ended and updates resumed. If you used Group Policy or disabled the service, check that the setting is still in place — sometimes Windows resets these after a major update. Open Settings to verify your current update status.
Is it safe to disable Windows updates permanently?
It is safe in the short term, but risky long-term. Disabling updates means you are responsible for installing security patches manually. If you forget or delay, your computer becomes vulnerable. Most people are better off using the pause feature or letting updates run on a schedule you control.
What is the difference between pausing updates and disabling them?
Pausing stops updates temporarily for a set number of days, then they resume automatically. Disabling turns off automatic updates entirely, and you must manually install them. Pausing is available on all Windows versions; disabling permanently requires Windows Pro or Enterprise.