How to permanently disable updates on a laptop: 7 proven methods

Why do users want to disable updates and when is it justified?

Automatic updates to the operating system, drivers, and programs often become a source of irritation. They can interrupt work at the most inopportune moment, take up traffic, slow down the laptop, or even lead to critical failures after installation. The problem is especially pressing for owners of older models - for example, Lenovo ThinkPad T430 or Dell Latitude E6420, where new versions of Windows 11 require resources that simply aren't available.

But there are also objective reasons for disabling updates: 1) Corporate laptops with a tightly configured environment where any change can disrupt the operation of specialized software. 2) Devices with limited internet (for example, via a mobile 4G modem), where every gigabyte counts. 3) Laptops with modified drivers (for example, for working with outdated equipment in studio recording or industrial automation), where standard updates break functionality.

In this article - 7 ways to disable updates at the system, service and registry level, including methods for Windows 10/11, macOS And Linux. And also - what to do if after disconnecting the laptop stops booting (spoiler: this can be fixed).

Method 1: Disable Windows Updates through Settings (Easiest Method)

If you need to temporarily pause updates without making deep changes to the system, this method is best suited. He works for Windows 10 (versions 1903 and later) and Windows 11, but has a limitation: after 35 days the system will still force you to update.

Instructions:

1. Open Start → Settings → Windows Update.
2. In the section "Advanced options" click Pause updates.
3. Select the maximum period - 5 weeks (in Windows 11 the option is called Pause for 1 week, but it can be pressed up to 5 times in a row).

⚠️ Attention: After the pause period has expired, the system will automatically download and install all missed updates, if you do not repeat the procedure. To avoid this, combine this method with disabling the service wuauserv (see Method 3).

Method 2: Using the Local Group Policy Editor (for Pro/Enterprise)

This method is suitable for Windows 10/11 Pro, Enterprise or Education. In home editions (Home) there is no group policy editor, but you can install it manually (instructions in the spoiler below).

Step by step instructions:

1. Click Win + R, enter gpedit.msc and press Enter.
2. Follow the path: Computer Configuration → Administrative Templates → Windows Components → Windows Update.
3. Double click on the parameter "Setting up automatic updates".
4. Select Disabled and apply the changes.

1. Download an archive with group policy files for your version of Windows (for example, from itechtics.com).

2. Unpack the files into C:\Windows\Temp\gpedit.

3. Run a command prompt as an administrator and run:

@echo off
pushd "%~dp0"
dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~3*.mum >List.txt
dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~3*.mum >>List.txt
for /f %%i in ('findstr /i . List.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i"
pause

4. Reboot your laptop.

-->

⚠️ Attention: After applying this setting some security features (for example, virus protection Windows Defender) may stop updating. If it is critical for you to obtain virus signatures, use an alternative antivirus (for example, Kaspersky or ESET).

Method 3: Disabling the update service through Services

The most radical way is completely stop the update service (wuauserv). This works on all versions of Windows, but requires administrator rights. Cons: Some system components (eg. Microsoft Store) may not work correctly.

How to disable:

1. Click Win + R, enter services.msc and press Enter.
2. Find a service "Windows Update" (Windows Update).
3. Double click on it in the field "Startup type" select Disabled.
4. Click Stop, then Apply.

To be on the safe side, also disable related services:

• 🔄 Portable Device Listing Service (WPDBusEnum) - sometimes interferes with disabling updates.
• 🔄 Software Licensing Service (sppsvc) - is responsible for activating Windows.

Method 4: Editing the Registry (Advanced Users)

If the previous methods did not work, you can manually block updates through the registry. This is the most reliable way, but wrong changes can make the system inoperable. Before you start be sure to create a restore point!

Instructions:

1. Click Win + R, enter regedit and press Enter.
2. Follow the path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

   (if folders WindowsUpdate no - create it via right click → Create → Section).

3. Create a new parameter DWORD (32 bits) with name DoNotConnectToWindowsUpdateInternetLocations and meaning 1.
4. Create another parameter DisableOSUpgrade (disables updating to a new version of Windows) with the value 1.

To turn off automatic reboot after updates add the parameter: NoAutoRebootWithLoggedOnUsers = 1 (in the same registry section).

⚠️ Attention: After editing the registry some system applications (For example, Microsoft Edge or Xbox Game Bar) may stop updating. If they are critical for operation, use alternative browsers (for example, Firefox or Chrome).

Method 5: Disable driver updates

Even if you have disabled Windows updates, the system may automatically install drivers for video cards, network adapters or printers. This often breaks the operation of specialized software (for example, Adobe Premiere with custom drivers for NVIDIA Quadro).

How to disable:

• 🖥️ Via "Options":
  1. Go to Start → Settings → System → Notifications and actions.
  2. Uncheck "Get tips, tricks and tricks when using Windows".
• 🔧 Through "Device Manager":
  1. Open Device Manager (Win + X → Device Manager).
  2. Right-click on the device (for example, NVIDIA GeForce GTX 1050) → Properties → Driver → Roll Back (if available).
  3. Go to the tab "Information", select Equipment ID and copy the first line.
  4. Open Local Group Policy Editor (gpedit.msc) and go to: Computer Configuration → Administrative Templates → System → Device Installation → Device Installation Restrictions.
  5. Enable the option “Prohibit the installation of devices with the specified codes” and add the copied Equipment ID.

Method 6: Block updates through a firewall (advanced)

If all the previous methods did not work, you can block access to Microsoft servers at the firewall level. This is a radical method, but it is guaranteed to stop downloading updates.

Instructions for Windows Defender Firewall:

1. Open Control Panel → Windows Defender Firewall → Advanced Settings.
2. From the left menu select Rules for outgoing connection → Create rule.
3. Select Customizable → All programs.
4. In the field "Remote ports" please indicate 80, 443 (HTTP/HTTPS).
5. In the field "Remote IP addresses" add:

   13.107.4.50, 13.107.4.51, 13.107.4.52  # Серверы обновлений Windows
   20.190.128.0/18                     # Диапазон Microsoft
   23.2.40.0/22                        # CDN обновлений

6. Select Block connection and apply the rule to all profiles.

For macOS (if you use Little Snitch or Lulu):

• 🍎 Add domains to the blacklist: update.microsoft.com, download.microsoft.com, fe2.update.microsoft.com.
• 🍎 Disable the service softwareupdated through Terminal:

  sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.softwareupdated.plist

Method 7: Disable updates on Linux (Ubuntu/Debian/Fedora)

In distributions based on Linux updates are managed via package manager (apt, dnf, pacman). To disable them, you need to edit the configuration files.

For Ubuntu/Debian:

1. Open a terminal (Ctrl + Alt + T).
2. Edit the file /etc/apt/apt.conf.d/20auto-upgrades:

   sudo nano /etc/apt/apt.conf.d/20auto-upgrades

3. Replace the content with:

   APT::Periodic::Update-Package-Lists "0";
   APT::Periodic::Download-Upgradeable-Packages "0";
   APT::Periodic::AutocleanInterval "0";
   APT::Periodic::Unattended-Upgrade "0";

4. Disable the service unattended-upgrades:

   sudo systemctl stop unattended-upgrades
   sudo systemctl disable unattended-upgrades

For Fedora/RHEL:

1. Disable automatic updates via dnf-automatic:

   sudo systemctl stop dnf-automatic
   sudo systemctl disable dnf-automatic

2. Remove the automatic update timer:

   sudo rm /etc/systemd/system/timers.target.wants/dnf-automatic.timer

⚠️ Attention: B Linux disabling updates fraught with security vulnerabilities, especially if you use a laptop to work with sensitive data. An alternative is to configure updates only for critical packages (such as kernel and security) via:

sudo apt-mark hold [имя_пакета]

What to do if the laptop does not turn on after disabling updates

If you have disabled updates through the registry or services, and your laptop stopped loading (for example, goes into a reboot loop or shows CRITICAL_PROCESS_DIED), don't panic. In 90% of cases this is fixable.

Recovery methods:

• 🔄 Boot in Safe Mode:
  1. When turning on the laptop, hold Shift + F8 (for Windows 10/11) or F8 (for Windows 7).
  2. Select Safe Mode with Command Line Support.
  3. Enter the command to reset the update services:

     net stop wuauserv
     net stop bits
     del "%windir%\SoftwareDistribution\*" /q /s
     net start wuauserv
     net start bits

• 💿 Recovery via flash drive:
  1. Create a bootable USB flash drive with Windows on another PC (use Media Creation Tool or Rufus).
  2. Boot from it, select System Restore → Command Prompt.
  3. Restore the registry from a backup:

     copy C:\Windows\System32\config\RegBack\* C:\Windows\System32\config\

FAQ: Frequently asked questions about disabling updates

sudo softwareupdate --reset-ignored