How to Completely Disable ‘Windows Update’ via Group Policy in Windows 11

Windows Update is a critical component of the Windows 11 operating system, ensuring your machine receives the latest security patches, feature upgrades, and driver updates. However, in strictly managed enterprise environments, manufacturing control floors, or dedicated server-like workstations, allowing Windows to automatically download and install updates—and force a reboot—is unacceptable. An unexpected reboot can ruin a multi-day render, disrupt a medical imaging machine, or break compatibility with a legacy line-of-business application. If you rely on a centralized patching system (like SCCM) or require absolute manual control over your update schedule, you must turn the automated system off.

This guide explains how to completely disable automatic Windows Updates in Windows 11 using the Group Policy Editor.

Disable Automatic Updates via Group Policy

The Local Group Policy Editor provides the most robust method to prevent Windows 11 from silently checking for and applying updates in the background. Note that the Group Policy Editor is only available on Windows 11 Pro, Enterprise, and Education editions.

1. Log into Windows 11 with an Administrator account.
2. Press the Windows Key + R to open the Run dialogue box.
3. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
4. In the left-hand navigation pane, drill down to the following path:

   Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience

5. In the right-hand pane, locate the policy named Configure Automatic Updates.
6. Double-click the policy to open its properties window.
7. Select the radio button next to Disabled.
8. Click Apply, then click OK.

Verify the Policy Application

When you set this specific policy to “Disabled,” it forcefully edits the registry (setting the NoAutoUpdate DWORD to 1) and instructs the Windows Update service to stop all autonomous activity.

To verify the lockdown is successful, open the Windows 11 Settings app and navigate to the Windows Update tab. You will now see a red banner at the top of the screen stating: “Some settings are managed by your organization.”

Windows 11 will absolutely never check for updates, download patches, or prompt you to restart on its own. The only way the machine will receive updates is if an administrator manually opens the Windows Update menu and explicitly clicks the “Check for updates” button, restoring complete control over your maintenance windows.