Why you might want to disable updates, and what you're trading

Windows updates happen automatically by default, and you can turn that off — but the reason Microsoft makes them automatic is that updates patch security holes. When you disable updates, your computer stops receiving those patches, which means malware and ransomware have an easier time getting in. This is a real trade-off, not a scare tactic: if you disable updates, you are choosing stability or control over the protection that patches provide.

Some people disable updates because a recent patch broke something on their machine, or because they run old software that stops working after an update. Others work on machines that can't afford downtime. Those are legitimate reasons. But you should know what you're giving up before you do it.

Key Takeaways

  • You can pause Windows updates for up to 35 days through Settings, or disable the Windows Update service entirely through Services or Group Policy — the method depends on your Windows version and edition.
  • Disabling updates removes your protection against newly discovered security holes, so this choice makes sense only if you have a specific reason and understand the risk.
  • If you disable updates, you should at least run Windows Defender (the built-in antivirus) and keep your browser and third-party software updated, since those are separate from Windows patches.
  • Home editions of Windows have fewer ways to control updates than Pro or Enterprise, and some methods only work on Pro and above.
  • Even after you disable updates, Windows may re-enable them on its own after a major version release, so you may need to repeat these steps.

Pausing updates for 35 days (works on all Windows versions)

The simplest way to stop updates temporarily is to pause them. This works on Windows 10 and Windows 11, Home and Pro editions. Open Settings (press Windows key + I), go to System > Windows Update, and click Pause updates for 7 days. You can click that button up to five times to pause for a total of 35 days. After 35 days, updates resume automatically.

This is the safest option if you just need breathing room — you're not permanently disabling protection, you're just delaying it. Use this if you've just installed a patch that broke something and you need time to find a workaround, or if you're about to do something critical and don't want Windows restarting in the middle of it.

Disabling the Windows Update service (Windows 10 and 11 Pro, Enterprise)

To stop updates more permanently, you can disable the Windows Update service itself. Press Windows key + R, type services.msc, and press Enter. Scroll down to Windows Update, right-click it, and select Properties. In the Startup type dropdown, select Disabled, then click explore and OK.

This prevents Windows Update from running in the background. However, Windows may re-enable this service after a major update or version upgrade, so you may need to repeat these steps. Also, this method only works reliably on Pro and Enterprise editions — Home edition sometimes overrides this setting.

Using Group Policy to disable updates (Windows 10 and 11 Pro, Enterprise only)

Group Policy is a more permanent way to control updates, but it only exists on Pro and Enterprise editions. Press Windows key + R, type gpedit.msc, and press Enter. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update. Find the policy called Configure Automatic Updates and double-click it.

Select Disabled and click OK. This tells Windows not to read or install updates automatically. You can also set it to 2 - Notify for read and auto install if you want to be notified before updates happen but still have them install automatically, or 3 - Auto read and notify for install if you want to control when they actually install.

What to do if you're on Windows Home edition

Windows Home doesn't have Group Policy or as much control over the Update service. Your best options are to pause updates repeatedly (the 35-day method above), or to use a third-party tool like O&O ShutUp++ or W10Privacy, which modify Windows settings that Home edition doesn't expose in the normal interface. These tools are free and open-source, but they do things behind the scenes that you can't undo through normal Settings, so use them only if you're comfortable with that.

Alternatively, you can set your internet connection as metered. Go to Settings > Network & Internet > WiFi (or Ethernet), click your connection, and toggle Set as metered connection to On. Windows will then avoid downloading large updates over that connection, though it may still read them over a non-metered connection or when plugged in.

Protecting yourself if you disable updates

If you turn off Windows updates, you lose the main way your operating system defends itself against new threats. To reduce the risk, keep these other things updated: your web browser (Chrome, Firefox, Edge), any antivirus software beyond Windows Defender, and any third-party programs you use regularly. These have their own security patches and they matter just as much as Windows patches do.

Also, make sure Windows Defender (the built-in antivirus) is turned on. Go to Settings > Privacy & Security > Windows Security and click Virus & threat protection. Defender won't patch Windows itself, but it will catch some malware before it runs. This is not a substitute for Windows patches, but it's better than nothing.

Re-enabling updates if you change your mind

If you disabled updates through Services, open Services again, find Windows Update, right-click it, go to Properties, set Startup type to Automatic, and click OK. If you used Group Policy, open gpedit.msc again, find the Configure Automatic Updates policy, and set it back to Not Configured or Enabled. After you make either change, restart your computer and Windows will resume checking for updates.

You can also manually check for updates by going to Settings > System > Windows Update and clicking Check for updates. This forces Windows to look for patches right away instead of waiting for the automatic schedule.

Frequently Asked Questions

Will disabling updates make my computer faster?

Possibly, but not by much. Updates do consume disk space and bandwidth while they read and install, and they sometimes cause reboots. However, the performance gain is usually small — a few seconds or minutes per month. The security loss is much larger than the speed gain.

Can I disable updates for just one specific patch that broke something?

Yes. Go to Settings > System > Windows Update > Update history > Uninstall updates, find the patch that caused the problem, and uninstall it. Then pause updates for 35 days to give yourself time to find a workaround before that patch tries to install again. After 35 days, you can pause again if needed.

What happens if I disable updates and then get hacked?

Your computer becomes vulnerable to attacks that exploit known security holes. If malware gets in, it can steal passwords, encrypt your files for ransom, or use your machine to attack other computers. You won't have legal recourse against Microsoft — you chose to disable the protection. This is why disabling updates should be temporary and for a specific reason, not permanent.

Do I need to disable updates if I use a VPN or antivirus software?

No. A VPN protects your internet traffic, not your operating system. Antivirus software catches some malware, but it can't patch the holes that malware exploits. Updates patch those holes. You need both — they do different things.

Will Windows force updates back on if I disable them?

Yes, sometimes. Major version upgrades (like Windows 10 to Windows 11) often re-enable the Update service or override Group Policy settings. If you disable updates and then Windows re-enables them after an upgrade, you'll need to repeat the steps above. This is why pausing updates is often more practical than disabling them permanently.