How to Disable Windows Updates on Windows Server

This article outlines how to disable or manually control Windows Updates on Windows Server using both the sconfig tool and PowerShell. It also covers how to prevent automatic restarts and maintain system stability.

Option 1: Use sconfig to Set Windows Updates to Manual

1. Open Command Prompt or PowerShell as Administrator.

2. Type the following command and press Enter:

   sconfig

3. From the Server Configuration menu, type 5 to select Windows Update Settings.

4. When prompted, type M to set the updates to Manual.

This will stop the server from automatically downloading and installing updates.

Option 2: Disable Windows Update Services via PowerShell

To completely disable Windows Update, run the following PowerShell commands:

Disable the Windows Update service (wuauserv):

Stop-Service wuauserv
Set-Service wuauserv -StartupType Disabled

Disable the Update Orchestrator service (UsoSvc):

Stop-Service UsoSvc
Set-Service UsoSvc -StartupType Disabled

Disable the Windows Update Medic Service (WaaSMedicSvc)

This service can automatically re-enable update services. To disable it:

1. Open Registry Editor:

   regedit

2. Navigate to:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc

3. Modify the Start DWORD value to 4 (Disabled).

Note: You may need to take ownership and grant permissions on the registry key before modifying it.

Option 3: Prevent Automatic Reboots

To stop the server from rebooting after updates:

Disable Auto Reboot Task:

1. Open Task Scheduler (taskschd.msc).

2. Navigate to:

   Task Scheduler Library > Microsoft > Windows > UpdateOrchestrator

3. Disable the task named Reboot.

Group Policy (optional):

Use the Group Policy Editor to prevent automatic restarts:

1. Open gpedit.msc.

2. Navigate to:

   Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business

3. Enable the policy: No auto-restart with logged on users for scheduled automatic updates installations.

Notes for Stability

• Disabling updates is not recommended long-term without a patching strategy.

• For production systems, consider using WSUS or a controlled update window.

• Regularly check for critical updates and apply them manually if required.