Policy
Remove access to use all Windows Update features
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsVista, WindowsXP
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking access to the Windows Update Web site at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This setting also prevents Device Manager from automatically installing driver updates from the Windows Update Web site. If enabled you can configure one of the following notification options: 0 = Do not show any notifications This setting will remove all access to Windows Update features and no notifications will be shown. 1 = Show restart required notifications This setting will show notifications about restarts that are required to complete an installation. On Windows 8 and Windows RT, if this policy is Enabled, then only notifications related to restarts and the inability to detect updates will be shown. The notification options are not supported. Notifications on the login screen will always show up.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Configure notifications: ID RemoveWindowsUpdateMode | enum | HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccessMode Type REG_DWORD | Options: 0 - Do not show any notifications (0), 1 - Show restart required notifications (1) |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow signed updates from an intranet Microsoft update service locationAt least Windows Server 2003 operating systems or Windows XP Professional with SP1, excluding Windows RT
- ComputerAutomatic Updates detection frequencyAt least Windows XP Professional Service Pack 1 or Windows 2000 Service Pack 3, excluding Windows RT
- ComputerDo not connect to any Windows Update Internet locationsAt least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
- ComputerEnable client-side targetingAt least Windows XP Professional Service Pack 1 or Windows 2000 Service Pack 3, excluding Windows RT
- ComputerSpecify intranet Microsoft update service locationAt least Windows XP Professional Service Pack 1 or Windows 2000 Service Pack 3, excluding Windows RT
- ComputerSpecify source service for specific classes of Windows UpdatesAt least Windows Server 2022, or Windows 10 Version 2004