Policy
Configure Automatic Updates
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsVista
Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service. Note: This policy does not apply to Windows RT. This setting lets you specify whether automatic updates are enabled on this computer. If the service is enabled, you must select one of the four options in the Group Policy Setting: 2 = Notify before downloading and installing any updates. When Windows finds updates that apply to this computer, users will be notified that updates are ready to be downloaded. After going to Windows Update, users can download and install any available updates. 3 = (Default setting) Download the updates automatically and notify when they are ready to be installed Windows finds updates that apply to the computer and downloads them in the background (the user is not notified or interrupted during this process). When the downloads are complete, users will be notified that they are ready to install. After going to Windows Update, users can install them. 4 = Automatically download updates and install them on the schedule specified below. When "Automatic" is selected as the scheduled install time, Windows will automatically check, download, and install updates. The device will reboot as per Windows default settings unless configured by group policy. (Applies to Windows 10, version 1809 and higher) Specify the schedule using the options in the Group Policy Setting. For version 1709 and above, there is an additional choice of limiting updating to a weekly, bi-weekly, or monthly occurrence. If no schedule is specified, the default schedule for all installations will be every day at 3:00 AM. If any updates require a restart to complete the installation, Windows will restart the computer automatically. (If a user is signed in to the computer when Windows is ready to restart, the user will be notified and given the option to delay the restart.) On Windows 8 and later, you can set updates to install during automatic maintenance instead of a specific schedule. Automatic maintenance will install updates when the computer is not in use and avoid doing so when the computer is running on battery power. If automatic maintenance is unable to install updates for 2 days, Windows Update will install updates right away. Users will then be notified about an upcoming restart, and that restart will only take place if there is no potential for accidental data loss. 5 = Allow local administrators to select the configuration mode that Automatic Updates should notify and install updates. (This option has not been carried over to any Win 10 Versions) With this option, local administrators will be allowed to use the Windows Update control panel to select a configuration option of their choice. Local administrators will not be allowed to disable the configuration for Automatic Updates. 7 = Notify for install and notify for restart. (Windows Server only) With this option from Windows Server 2016, applicable only to Server SKU devices, local administrators will be allowed to use Windows Update to proceed with installations or reboots manually. If the status for this policy is set to Disabled, any updates that are available on Windows Update must be downloaded and installed manually. To do this, search for Windows Update using Start. If the status is set to Not Configured, use of Automatic Updates is not specified at the Group Policy level. However, an administrator can still configure Automatic Updates through Control Panel.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate | REG_DWORD | 0 | 1 |
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Configure automatic updating: ID AutoUpdateMode | enum | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions Type REG_DWORD | Options: 2 - Notify for download and auto install (2), 3 - Auto download and notify for install (3), 4 - Auto download and schedule the install (4), 5 - Allow local admin to choose setting (5), 7 - Auto Download, Notify to install, Notify to Restart (7) |
Scheduled install day: ID AutoUpdateSchDay | enum | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallDay Type REG_DWORD | Options: 0 - Every day (0), 1 - Every Sunday (1), 2 - Every Monday (2), 3 - Every Tuesday (3), 4 - Every Wednesday (4), 5 - Every Thursday (5), 6 - Every Friday (6), 7 - Every Saturday (7) |
Scheduled install time: ID AutoUpdateSchTime | enum | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallTime Type REG_DWORD | Options: Automatic (24), 00:00 (0), 01:00 (1), 02:00 (2), 03:00 (3), 04:00 (4), 05:00 (5), 06:00 (6) … +17 more |
Install during automatic maintenance ID AutoUpdateAutomaticMaintenanceEnabled | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AutomaticMaintenanceEnabled Type REG_DWORD | Options: true (), false () True: None · False: None |
Install updates for other Microsoft products ID AllowMUUpdateServiceId | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AllowMUUpdateService Type REG_DWORD | Options: true (), false () True: None · False: None |
Every week ID AutoUpdateSchEveryWeek | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallEveryWeek Type REG_DWORD | Options: true (), false () True: None · False: None |
First week of the month ID AutoUpdateSchFirstWeek | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallFirstWeek Type REG_DWORD | Options: true (), false () True: None · False: None |
Second week of the month ID AutoUpdateSchSecondWeek | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallSecondWeek Type REG_DWORD | Options: true (), false () True: None · False: None |
Third week of the month ID AutoUpdateSchThirdWeek | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallThirdWeek Type REG_DWORD | Options: true (), false () True: None · False: None |
Fourth week of the month ID AutoUpdateSchFourthWeek | boolean | HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallFourthWeek Type REG_DWORD | Options: true (), false () True: None · False: None |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow updates to be downloaded automatically over metered connectionsAt least Windows Server 2016, Windows 10
- ComputerDisplay options for update notificationsAt least Windows Server 2019, or Windows 10 Version 1809
- ComputerEnable features introduced via servicing that are off by defaultAt least Windows 11 Version 22H2
- ComputerRemove access to "Pause updates" featureAt least Windows Server 2016, Windows 10 Version 1809
- ComputerRemove access to use all Windows Update featuresAt least Windows Server 2016 or Windows 10
- ComputerSpecify active hours range for auto-restartsAt least Windows Server 2016 or Windows 10
- ComputerSpecify deadline for automatic updates and restarts for feature updateAt least Windows Server 2016, Windows 10 Version 1709
- ComputerSpecify deadline for automatic updates and restarts for quality updateAt least Windows Server 2016, Windows 10 Version 1709
- ComputerTurn off auto-restart for updates during active hoursAt least Windows Server 2016 or Windows 10
- ComputerUpdate Power Policy for Cart RestartsAt least Windows Server 2016, Windows 10