The Problem
Windows 11 will restart for updates in the middle of a render, a match, or a client demo. Pausing or controlling updates is reasonable when you need stability today and can patch on your own schedule.
Be clear about the trade-off first: most Patch Tuesday updates close security holes that are already being exploited. The goal here is to control when you patch, not to stop patching. Everything below is ordered from safest to most drastic.
Option 1: Fix the Reboot, Not the Update
Often the real complaint is the restart, not the patch. Two settings solve that on their own.
- Settings → Windows Update → Advanced options.
- Turn on Notify me when a restart is required to finish updating. Windows then asks instead of scheduling one behind your back.
- Set Active hours to cover your working day—Settings → Windows Update → Advanced options → Active hours. Choose Manually and set a range of up to 18 hours. Windows will not auto-restart inside it.
For most people this is the whole fix, with no security cost.
Option 2: Pause Updates (Up to 5 Weeks)
The supported way to buy yourself time.
- Open Settings (
Win + I). - Click Windows Update.
- Next to Pause updates, open the dropdown.
- Choose 1 to 5 weeks.
Once the pause expires you must install the pending updates before you can pause again—Windows deliberately prevents indefinite chaining. This is the right tool before a deadline, a trip, or a big project.
Option 3: Metered Connection
Windows holds back large optional downloads on a connection it believes is billed by the gigabyte.
- Settings → Network & internet → Wi-Fi (or Ethernet).
- Click your connected network.
- Turn Metered connection on.
Security updates classed as critical still come through, which is arguably the correct behaviour. Note that this also changes how OneDrive, the Microsoft Store, and some apps sync.
Option 4: Delay Feature Updates with Group Policy (Pro Editions)
Windows 11 Pro can defer the big annual feature update without touching security patches.
- Press
Win + R, typegpedit.msc, press Enter. - Go to Computer Configuration → Administrative Templates → Windows Components → Windows Update → Manage updates offered from Windows Update.
- Open Select the target Feature Update version and set the version you want to stay on—or use Windows Update for Business deferral policies to delay quality updates by up to 30 days and feature updates by up to 365.
This is what businesses actually do, and it is far safer than disabling the service.
Option 5: Disable the Windows Update Service (Last Resort)
This stops updates entirely, including security patches. Only do it on a machine you deliberately keep isolated, or for a short, defined period.
- Press
Win + R, typeservices.msc, press Enter. - Find Windows Update (
wuauserv). - Right-click → Properties.
- Set Startup type to Disabled.
- Click Stop under Service status, then Apply → OK.
- Open the Recovery tab and set all three failure actions to Take No Action—otherwise Windows restarts the service for you.
Also disable Update Orchestrator Service and Windows Update Medic Service if they restart it. Windows Update Medic Service is protected and may refuse; that is expected.
To reverse it: set Windows Update back to Manual (its default), start the service, and check for updates immediately.
What Not to Do
- Don't delete the SoftwareDistribution folder as a "fix". That is a repair step for a broken update, not a way to prevent updates—see fix Windows Update stuck.
- Don't use registry hacks from forums that set
NoAutoUpdateon Home editions. Home ignores most of those policies, and a half-applied policy leaves Windows Update in a state that is hard to diagnose later. - Don't disable updates permanently on a PC that handles email, banking, or work files. Unpatched machines are how most home ransomware cases start—see what to do if hit by ransomware.
A Sane Middle Ground
The setup most technicians actually run:
- Active hours covering the working day.
- Notify me when a restart is required turned on.
- Pause updates for a week when something important is in progress.
- A monthly calendar reminder to install everything pending at a time that suits you.
That gives you full control over the timing without leaving known holes open for months.
Technician's advice: if you use Option 5, put a recurring reminder in your calendar to re-enable the service and patch manually. A disabled Windows Update service that everyone forgot about is the single most common thing found on badly compromised home PCs.
Updates frozen at 0% or rolling back? That needs repair steps, not a permanent pause—see fix Windows update stuck and fix common Windows 11 update errors.
Related guides
Remove Malware Startup Entries and Scheduled Tasks
Malware you deleted keeps coming back? It left a scheduled task, service, or Run key behind. Here is how to find and clear every persistence point in Windows 11.
How to Fix a Missing Dual-Boot Menu in Windows 11
PC boots straight into Windows with no choice of operating system? Restore the boot menu with firmware settings, bcdedit, and a GRUB repair if needed.
Fix "Signed In with a Temporary Profile" in Windows 11
Blank desktop and a warning that you're using a temporary profile? Your files are safe. Here is how to restore the real profile before anything is lost.
Fix "User Profile Service Failed the Sign-In" in Windows 11
Locked out with "The User Profile Service service failed the sign-in"? Repair the profile entry in the registry and get your account and files back.
How to Fix DISM Error 0x800f081f in Windows 11
0x800f081f means DISM could not find the replacement files it needs. Point it at a Windows 11 ISO with the /Source switch and the repair completes.