Turning Windows Updates off

[PommysDK]

A way to stop updates:

 

Windows 10 dosent allow for the windows update service to get disabled (you can stop it an disable it but it will get reactivated), it has different methods to reactivate the service, so in an effort to disable or control when it installs updates, you could control it with the windows update settings in Registry or Thrue policy (which does the same thing).

 

to turn it off you would set your update settings to use a wsus server, but dont define a wsus server. To turn it on again you would either correct the wsus server setting to your existing wsus server or disable that it should use wsus server altogether. With the settings i have below you can stil search for updates if you click the update button manually, but it wont find updates automatic in the background.

 

so this means that windows update is still running, but it wont be able to find any updates or download them when it checks for updates in the background 

worth to note is that if you want these settings to take effect immediately you have to restart the wuauserv service.

 

To time this you could then scheduled a script to turn it on, the day that you what updates say the 5. of every month that gives you 2-3 weeks delay on updates and a good chance that "bad" updates would have been removed before you update. Or you could just do it manuelly by clicking the update button when you remember to do it

We have a centralized server/system that controls the timing and it has worked so far, we then have a different script to control when we install the Feature Upgrades or Build Upgrades

 

Updates off. (put in a blank file and name the exstension .reg)

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"TargetGroupEnabled"=dword:00000000
"AcceptTrustedPublisherCerts"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000004
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAUShutdownOption"=dword:00000000
"NoAUAsDefaultShutdownOption"=dword:00000000
"RebootRelaunchTimeout"=dword:000005a0
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootWarningTimeoutEnabled"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"AUPowerManagement"=dword:00000000
"AcceptTrustedPublisherCerts"=dword:00000001
"AlwaysAutoRebootAtScheduledTime"=dword:00000000
"AlwaysAutoRebootAtScheduledTimeMinutes"=dword:00000000
"EnableFeaturedSoftware"=dword:00000000
"IncludeRecommendedUpdates"=dword:00000000
"NoAutoUpdate"=dword:00000001
"UseWUServer"=dword:00000001
"AUOptions"=dword:00000004
"AutomaticMaintenanceEnabled"=dword:00000000
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000007
 

Updates On (put in a blank file and name the exstension .reg)

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"TargetGroupEnabled"=dword:00000001
"AcceptTrustedPublisherCerts"=dword:00000001
"WUServer"="http://YOURWSUSSERVERNAMEHERE:8530"
"WUStatusServer"="http://YOURWSUSSERVERNAMEHERE:8530"
"TargetGroup"="Windows 10 Ring 3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000004
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAUShutdownOption"=dword:00000000
"NoAUAsDefaultShutdownOption"=dword:00000000
"RebootRelaunchTimeout"=dword:000005a0
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootWarningTimeoutEnabled"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"AUPowerManagement"=dword:00000000
"AcceptTrustedPublisherCerts"=dword:00000001
"AlwaysAutoRebootAtScheduledTime"=dword:00000000
"AlwaysAutoRebootAtScheduledTimeMinutes"=dword:00000000
"EnableFeaturedSoftware"=dword:00000000
"IncludeRecommendedUpdates"=dword:00000000
"NoAutoUpdate"=dword:00000000
"UseWUServer"=dword:00000001
"AUOptions"=dword:00000003
"AutomaticMaintenanceEnabled"=dword:00000000
 

[ahuckphin]

simple. set all connections to the internet, wireless and wired as metered connections. 

It's that simple. 

[PommysDK]

Windows will stil download priority updates on a metered connection, so number of updates you get is limited but not turned off