How to Disable Automatic Updates on Windows 10/11

You can lock your Windows 10 or Windows 11 PC to a specific version by creating three registry entries under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate. This blocks automatic major version upgrades (like 23H2 to 24H2 or Windows 10 to 11) while still receiving all security updates and patches. If you want to disable Windows Update entirely, you can do that through Group Policy or the Services app.

Applies to: Windows 10 (22H2) and Windows 11 (23H2, 24H2, 25H2) | Last updated: April 1, 2026

Key Takeaways

• Lock your version with 3 registry entries — set TargetReleaseVersion, ProductVersion, and TargetReleaseVersionInfo to pin your PC to a specific Windows build. Security updates continue normally.
• This only blocks major version upgrades — cumulative updates, security patches, Defender definitions, and driver updates all still install. Only upgrades like 23H2→24H2 or Windows 10→11 are blocked.
• You can still upgrade manually — using installation media or the Installation Assistant bypasses this lock whenever you choose to upgrade.
• To disable ALL updates entirely, use Group Policy Editor or disable the Windows Update service — but this stops security patches too, so only do this if you have a specific reason.

Quick Steps (Lock Version)

1. Open Registry Editor (regedit) as administrator.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate (create the key if it does not exist).
3. Create DWORD TargetReleaseVersion = 1
4. Create String ProductVersion = Windows 10 or Windows 11
5. Create String TargetReleaseVersionInfo = 22H2, 24H2, 25H2, etc.

In This Guide

This guide covers two approaches to controlling Windows updates, depending on how much you want to block:

• Method 1: Lock to a Specific Version (Registry) — Blocks major upgrades, keeps security updates. (Recommended)
• Method 2: Disable All Automatic Updates — Stops Windows Update entirely via Group Policy, Services, Registry, or Winhance.

Method 1: Lock Your Windows Version Using Registry Editor

This is the recommended approach for most people. It locks your PC to a specific Windows version so that major upgrades (like 23H2 to 24H2, or Windows 10 to Windows 11) are blocked — but you still receive all security updates, cumulative patches, Defender definitions, and driver updates. You stay protected without being forced onto a new version you are not ready for.

Why lock your version?

• Stability — new major Windows releases often ship with bugs. Windows 11 24H2 was a prime example, where many users (especially gamers) stayed on 23H2 for a more stable experience.
• Extended security updates — if you want to stay on Windows 10 22H2 and take advantage of the free extended security updates, locking your version prevents Windows from trying to push you to Windows 11.
• Professional environments — consistent system configurations across multiple machines reduce support issues and ensure software compatibility.

Step 1: Open Registry Editor

Search for regedit in the Start menu and open it as administrator. Navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

If the WindowsUpdate key does not exist, right-click the Windows folder, select New > Key, and name it WindowsUpdate.

Step 2: Create the three registry entries

Inside the WindowsUpdate key, create these three entries:

Entry 1 — TargetReleaseVersion (DWORD): Right-click > New > DWORD (32-bit) Value. Name it TargetReleaseVersion and set the value to 1. This tells Windows you have a specific version target.

Entry 2 — ProductVersion (String): Right-click > New > String Value. Name it ProductVersion and set the value to Windows 10 or Windows 11 (whichever you are running).

Entry 3 — TargetReleaseVersionInfo (String): Right-click > New > String Value. Name it TargetReleaseVersionInfo and set the value to your desired version number — for example 22H2 (Windows 10), 24H2, or 25H2 (Windows 11).

Alternatively, you can create all three entries in one go from the command line. Open Command Prompt as administrator and run:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersion /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ProductVersion /t REG_SZ /d "Windows 11" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersionInfo /t REG_SZ /d "24H2" /f

Tip: Change "Windows 11" to "Windows 10" and "24H2" to "22H2" if you are locking a Windows 10 machine.

Step 3: Verify your configuration

After creating all three entries, your WindowsUpdate key should look like this:

No restart is required — the change takes effect immediately. The next time Windows Update checks for updates, it will skip any major version upgrades that go beyond your target version.

How to undo the version lock

To return to default behavior, open Registry Editor, navigate to the WindowsUpdate key, and delete all three entries (TargetReleaseVersion, ProductVersion, TargetReleaseVersionInfo). Or run this from an elevated Command Prompt:

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersion /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ProductVersion /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersionInfo /f

After deleting, restart your PC. Windows Update will resume its default behavior and offer major version upgrades again.

Method 2: Disable All Automatic Updates Entirely

If you want to stop Windows Update completely — including security updates — the methods below will do that. This is useful if you are on a test machine, an air-gapped system, or simply want full manual control. Just be aware that disabling all updates means you will not receive security patches unless you manually check for them.

Warning: Disabling all updates leaves your system vulnerable to security threats. If you only want to block major version upgrades, use Method 1 instead — it keeps security patches flowing while preventing forced upgrades.

Option A: Group Policy Editor (Windows Pro)

If you have Windows 10 or 11 Pro, the Group Policy Editor is the cleanest way to disable automatic updates.

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
3. Double-click Configure Automatic Updates, set it to Disabled, then click Apply and OK.

If you have Windows Home edition, you can use Policy Plus — a free alternative that provides the same functionality.

Option B: Disable the Windows Update service

This method works on all Windows editions and stops the Windows Update service from running.

1. Press Win + R, type services.msc, and press Enter.
2. Scroll down to Windows Update, double-click it, and set Startup type to Disabled.
3. Click the Recovery tab and set First failure to Take No Action. Set the Reset fail counter to 999 days.
4. Click Apply and OK.

For extra thoroughness, you can also disable the update-related scheduled tasks. Open Task Scheduler, navigate to Task Scheduler Library > Microsoft > Windows > Windows Update, and right-click each task to Disable it. If the Windows Update Assistant is installed, uninstall it from Settings > Apps to prevent it from triggering updates on its own.

Option C: Registry NoAutoUpdate DWORD

This registry method disables automatic updates entirely, similar to the Group Policy option but works on all editions:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 1 /f

To undo this, delete the value:

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /f

Option D: Disable Windows Updates with Winhance

If you prefer a GUI approach, Winhance can disable Windows Update with a single toggle. Open Winhance, go to the Optimizations tab, then Windows Update Settings. You will see the Windows Update Policy options where you can completely disable automatic updates.

Winhance also lets you easily re-enable updates when you are ready — just toggle the setting back. This is the easiest option if you already use Winhance for debloating and optimizing your system.

Tip: If a recent Windows update has caused problems and you want to remove it, see my guide on how to uninstall Windows updates and clear the update cache — it covers removing specific updates and preventing them from reinstalling.

How to Re-enable Updates After Disabling Them

To re-enable automatic updates, reverse whichever method you used:

• Group Policy: Set “Configure Automatic Updates” back to Not Configured.
• Services: Set the Windows Update service Startup type back to Manual and reset the Recovery actions to their defaults.
• Registry: Delete the NoAutoUpdate value or the TargetReleaseVersion entries as shown above.
• Winhance: Open Winhance > Optimizations > Windows Update Settings and toggle updates back on.

After reversing, go to Settings > Windows Update and click Check for updates to resume normal behavior.

---

Frequently Asked Questions

Will I still get security updates if I lock my Windows version?

Yes. The version lock (Method 1) only blocks major version upgrades like 23H2 to 24H2. You will continue to receive all security updates, cumulative patches, Defender definitions, and driver updates for your locked version. This is the key advantage over disabling updates entirely.

Does this work on Windows Home edition?

Yes. The registry methods (both the version lock and the NoAutoUpdate DWORD) work on all Windows editions including Home. The Group Policy method requires Windows Pro, but you can use Policy Plus as a free alternative on Home edition.

Can I still manually upgrade after locking my version?

Yes. The registry lock only prevents automatic upgrades through Windows Update. You can still upgrade at any time using the Windows 11 Installation Assistant, an ISO file, or a bootable USB drive. The lock gives you control over timing — it does not permanently prevent upgrades.

Is it safe to disable all Windows updates?

Disabling all updates (Method 2) stops security patches from installing, which leaves your system exposed to known vulnerabilities. Only do this on machines where you have a specific reason — test environments, air-gapped systems, or temporary situations. For most people, locking to a specific version (Method 1) is the better choice since it keeps security updates flowing.

Can I just pause updates instead of disabling them?

Yes. In Settings > Windows Update, you can pause updates for up to 5 weeks. This is useful for short-term situations where you do not want a reboot. For longer-term control over which major versions you install, the registry version lock is a more permanent solution.