Disable Automatic Updates on Windows Servers

Introduction

Patch Management is important and with tools like Azure Update Management or other third party tools you can make your life a lot easier. No more weekends patching server and more quality time with your friends and family! Just don’t forget to turn off Automatic Updates and avoid random reboots that aren’t part of your preferred schedules!

Using PowerShell

If you manually want to disable automatic updates for a server you can use ‘sconfig’

1. Open PowerShell as Administrator.
2. Type “sconfig” and press Enter.
3. Press 5 to access the Windows Update Settings.
4. Press ‘2’ for Manual or ‘3’ for Download Only if you prefer to download updates but not install them automatically.
5. Press Enter to apply the changes.

Using Group Policy

1. Open the Group Policy Management Console on a Domain Controller.
2. Create a new Group Policy Object (GPO) or edit an existing one that is linked to the desired servers.
3. In the settings navigate to “Computer Configuration” -> “Policies” -> “Administrative Templates” -> “Windows Components” -> “Windows Update”
4. Find and select “Configure Automatic Updates” and set the policy to “Disabled”
5. Apply the changes to the GPO. They will take effect on the targeted servers during the next Group Policy refresh cycle.