What is the best way to stop Windows 11 from updating unless I SPECIFICALLY tell it to?

[Azurael]

I am sick an tired of Microsoft shoving shit down my throat. I want to be able to control EXACTLY when my PC checks for updates, when and what updates I let it install.

[MiszS]

There isn't a way to prevent WINDOWS from doing that, but nothing like that will happen if you install linux

[Average Nerd]

15 minutes ago, Azurael said:

I am sick an tired of Microsoft shoving shit down my throat. I want to be able to control EXACTLY when my PC checks for updates, when and what updates I let it install.

While you can't really control what updates Windows wants to install (mandatory really does mean mandatory in Windows), you can control when you want to install them.

You can pause automatic updates for up to 5 weeks, during that period Windows won't check for new updates, but will resume doing that once the time runs out or you tell it to resume.

[okkee]

17 minutes ago, Azurael said:

I am sick an tired of Microsoft shoving shit down my throat. I want to be able to control EXACTLY when my PC checks for updates, when and what updates I let it install.

if you go to windows update advanced options, you can set it to pause updates for up to 35 days but i'm not too sure if you can keep repeating the process forever.

[Average Nerd]

3 minutes ago, okkee said:

if you go to windows update advanced options, you can set it to pause updates for up to 35 days but i'm not too sure if you can keep repeating the process forever.

As far as I know you can pause updates again after pending updates were installed, but I could be wrong.

[porina]

Another "when" method I've used in the past is to basically firewall off MS servers. Windows can't update if it can't reach MS servers. MS has a list somewhere of the servers/ports for WU to work. You can simply use that in reverse to only block MS servers. Note this also blocks MS Store in case that matters.

 

Edit: I don't know if this is the list I used before but it is a current reference:

https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#211-configure-your-firewall-to-allow-your-first-wsus-server-to-connect-to-microsoft-domains-on-the-internet

[Azurael]

54 minutes ago, Average Nerd said:

While you can't really control what updates Windows wants to install (mandatory really does mean mandatory in Windows), you can control when you want to install them.

You can pause automatic updates for up to 5 weeks, during that period Windows won't check for new updates, but will resume doing that once the time runs out or you tell it to resume.

So there is no way to stop it in the Registery or group policies like in past versions of Windows?

[Average Nerd]

49 minutes ago, Azurael said:

So there is no way to stop it in the Registery or group policies like in past versions of Windows?

You can, but it's more effort to get the machine to update when you want to with these methods, as they disable WU permanently (or rather until reverted).

Group policies only work on Windows 11 Pro.

[Doobeedoo]

Just update Windows and then configure to not auto download and install but to prompt.

[Azurael]

5 hours ago, Average Nerd said:

You can, but it's more effort to get the machine to update when you want to with these methods, as they disable WU permanently (or rather until reverted).

Group policies only work on Windows 11 Pro.

I have windows 11 pro. I NEVER use hime because it litmits my control of the system and I hate it.

[Average Nerd]

11 minutes ago, Azurael said:

I have windows 11 pro. I NEVER use hime because it litmits my control of the system and I hate it.

Then you can simply use whichever method works best for you.

There are lots of guides for all of them available online.

[starsmine]

14 hours ago, Azurael said:

I am sick an tired of Microsoft shoving shit down my throat. I want to be able to control EXACTLY when my PC checks for updates, when and what updates I let it install.

You think you do, but you don't. 
But also, you are using pro, you already can delay indefinitely

 

 

[Mark Kaine]

On 4/23/2024 at 11:36 PM, starsmine said:

You think you do, but you don't. 
But also, you are using pro, you already can delay indefinitely

 

 

1 week =/= indefinitely tho (lol)

[Mark Kaine]

On 4/23/2024 at 9:20 AM, porina said:

Another "when" method I've used in the past is to basically firewall off MS servers. Windows can't update if it can't reach MS servers. MS has a list somewhere of the servers/ports for WU to work. You can simply use that in reverse to only block MS servers. Note this also blocks MS Store in case that matters.

 

Edit: I don't know if this is the list I used before but it is a current reference:

https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#211-configure-your-firewall-to-allow-your-first-wsus-server-to-connect-to-microsoft-domains-on-the-internet

i don't understand why the never made sledgehammer available for win 11... its such a braindead way of doing this... you can even use the store (temporarily) and update (if you want to)

 

*they even have a defcon check to see if its safe to update (hint: it almost never is ) 

[starsmine]

7 minutes ago, Mark Kaine said:

1 week =/= indefinitely tho (lol)

1 week is the shortest option.