How To Block Windows 11 Update Permanently | Stay Put

What “Permanent” Windows 11 Update Blocking Means

Windows 11 is built to fetch fixes and drivers in the background. Even when you switch off a setting in one place, another part of the system may try to turn it back on later. That is why blocking Windows 11 updates permanently should mean you choose when updates install, not that updates never arrive again.

For most home users, the safest approach is to stop automatic downloads, pin your device to a stable release, and then install new patches on your own schedule after you see that they behave well on other machines. That balance keeps control in your hands while still giving you a way to patch security holes.

Blocking Windows 11 Update Permanently: Main Methods

There is no single switch that keeps Windows 11 frozen forever. Instead, you combine a few methods so the system stops pushing updates in the background. The right mix depends on your edition of Windows and how confident you are with advanced tools.

Method	Edition	Best Use
Disable Windows Update service	Home, Pro	Stop most background downloads quickly
Group Policy settings	Pro and above	Control how and when updates install
Target feature version lock	Pro and above	Stay on one Windows 11 release
Metered connection	Home, Pro	Limit automatic downloads on a network
Manual patch routine	All editions	Apply selected updates on your schedule

Before you change deep settings, it is wise to set a restore point or take a full image backup. If something goes wrong, you can roll back to a working state without reinstalling apps and drivers.

Prepare Your System Before You Turn Off Updates

Turning off updates without any safety net can leave you stuck if a later driver or app misbehaves. A few simple steps cut that risk down and give you a way out if a tweak causes trouble.

Create A System Restore Point

System Restore lets you revert system files and settings while leaving your personal files alone. Turning it on and creating a restore point takes just a few clicks.

1. Open System Properties — Press Windows + R, type SystemPropertiesProtection.exe, then press Enter.
2. Turn on protection — Select your system drive, choose Configure, pick Turn on system protection, and set a small disk space limit.
3. Create a point — Select Create, give the restore point a short name, and confirm.

Create A Full Backup

A full image backup of your drive protects you against rare cases where a registry edit or script leaves Windows unable to start. You can use third party tools or the built in Backup and Restore feature in Control Panel to keep an image on an external drive.

Stop Automatic Updates Through The Windows Update Service

Windows Update runs as a background service. When that service is set to Disabled, the operating system can no longer reach the update servers on its own. This is one of the strongest ways to block Windows 11 updates, though later feature releases may try to flip it back on, so it is worth checking it from time to time.

Disable The Windows Update Service

1. Open Services — Press Windows + R, type services.msc, and press Enter.
2. Find Windows Update — Scroll down to Windows Update in the list and double click it.
3. Stop the service — In the dialog, select Stop to halt any running update tasks.
4. Set Startup type — Change Startup type to Disabled and confirm with Apply and OK.

This change tells Windows not to start the update service when the system boots. Some users also disable the related Update Orchestrator Service, though that component sometimes resets itself during major upgrades.

Block The Service With A Firewall Rule (Optional)

If you want an extra layer of protection, you can add outbound firewall rules that block the update service from reaching the internet. This method takes more effort and can interfere with other Microsoft services, so many home users skip it.

• Open Windows Security — Search for Windows Security, open it, and head to Firewall & network protection.
• Create new outbound rule — Select Advanced settings, then Outbound Rules, and add a new rule that blocks svchost.exe when it talks to update servers.
• Test updates — Open Settings > Windows Update and run Check for updates to confirm nothing can download.

Control Windows 11 Updates With Group Policy (Pro Editions)

Windows 11 Pro and higher include the Local Group Policy Editor, which exposes detailed Windows Update client policies. These settings give you fine control over automatic downloads and restarts without third party tools.

Set Configure Automatic Updates To Disabled Or Notify

Microsoft describes Windows Update client policies in its official documentation for Windows Update client policies, and those same rules apply on Windows 11.

1. Open Group Policy — Press Windows + R, type gpedit.msc, and press Enter.
2. Browse to Windows Update — Under Computer Configuration, go to Administrative Templates > Windows Components > Windows Update.
3. Edit Configure Automatic Updates — Double click Configure Automatic Updates.
4. Pick your mode — Set the policy to Enabled, then select option 2 – Notify for download and auto install to stop background downloads, or set the policy to Disabled if you want Windows to ignore automatic update schedules entirely.
5. Apply and refresh — Select Apply, then run gpupdate /force in a Command Prompt run as administrator so the setting takes effect right away.

When the policy is set to notify, Windows 11 shows a prompt when updates are available but does not grab them until you approve. When it is set to disabled, Windows Update no longer runs on its own schedule.

Lock Your Feature Version With Windows Update For Business

You can also tell Windows to stay on a chosen feature release. That way, you keep installing monthly security fixes while avoiding a new main build that might break drivers or apps.

1. Open the same Windows Update node — In Group Policy, browse again to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business.
2. Edit Select the target Feature Update version — Open the policy named Select the target Feature Update version.
3. Enable and enter details — Set the policy to Enabled. For product version, type Windows 11. For the target version, enter the exact release tag such as 23H2.
4. Apply the policy — Confirm with OK, then run gpupdate /force again.

With this feature version lock in place, Windows Update continues to deliver monthly cumulative updates for that release but ignores newer releases until you change the policy. This is often the most practical way to block Windows 11 upgrades on workstations while still staying patched.

Use Registry Tweaks On Windows 11 Home

Windows 11 Home does not ship with the Local Group Policy Editor, though the same client policies still exist under the hood. You can reach them through the registry, but you should only do so if you are comfortable editing keys and values.

Create A Backup Of The Registry

1. Open Registry Editor — Press Windows + R, type regedit, and press Enter.
2. Export the whole hive — In the left pane, select Computer, then open File > Export and save a .reg backup to an external drive.

Add Keys To Control Automatic Updates

The same policy options that Group Policy writes can be set by hand. If you are not comfortable with this level of change, you can stop at the earlier service method instead.

1. Browse to the policy path — In Registry Editor, go to HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU. Create the missing keys if they do not exist.
2. Add AUOptions — Create a new DWORD (32 bit) Value named AUOptions, then set its value to 2 to match the Notify mode from Group Policy, or to 1 to disable automatic updates entirely.
3. Restart Windows — Reboot so the client reads the new settings.

Target A Specific Feature Version Through The Registry

You can also mirror the feature version lock. Microsoft and many device management guides describe this setting under the Windows Update for Business keys.

1. Open the WindowsUpdate key — Go to HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate.
2. Create ProductVersion — Add a new String Value named ProductVersion and set it to Windows 11.
3. Create TargetReleaseVersionInfo — Add another String Value named TargetReleaseVersionInfo and set it to the release you want, such as 23H2.
4. Enable TargetReleaseVersion — Add a DWORD (32 bit) Value named TargetReleaseVersion and set it to 1.

Once these values are in place, Windows 11 Home then stays on the specified release, just like Pro with Windows Update for Business policies applied.

Limit Windows 11 Updates With A Metered Connection

Windows treats metered networks as connections where data should be conserved. When you flag a connection as metered, many system updates no longer download automatically. Microsoft explains this behavior in its article on metered connections in Windows, which also applies to Windows 11.

Set A Wi-Fi Network As Metered

1. Open Settings — Press Windows + I to open Settings.
2. Go to Network & internet — Select Network & internet, then choose Wi-Fi.
3. Open your network — Select your current Wi-Fi network to open its properties.
4. Turn on Metered connection — Scroll to Metered connection and turn on Set as metered connection.

Use A Metered Ethernet Connection

1. Open Ethernet settings — In Settings, open Network & internet, then select Ethernet.
2. Select your adapter — Choose the active wired connection.
3. Enable metered mode — Turn on Metered connection for that adapter.

On a metered network, Windows 11 keeps download sizes lower. Many feature and driver updates no longer arrive automatically, which helps when you want to block Windows 11 updates without diving into policies or the registry.

Build A Safe Routine After You Block Windows 11 Updates

Fully blocking updates forever leaves your device exposed to known flaws. A safer approach is to stop the system from updating on its own, then apply a simple routine so you still install vetted patches.

Check Release Health And Known Issues

Before you install any new build, glance at Microsoft’s release health dashboard for your Windows 11 version. If there are known issues with a patch, you can hold off until Microsoft marks them as resolved.

Install Updates Manually On A Schedule

• Pick a regular day — Choose one day each month to handle updates, such as the weekend after the monthly security release.
• Create a restore point first — Use the same System Restore steps to create a fresh point before patching.
• Install only what you trust — Open Settings > Windows Update, review the list, and install security updates first. Leave optional drivers or preview builds until you are sure they are stable.

Roll Back A Problem Patch

If an update slips through and causes trouble, you can remove it.

1. Open update history — Go to Settings > Windows Update > Update history.
2. Uninstall updates — Select Uninstall updates, choose the recent patch, and remove it.
3. Restore from backup if needed — If removal does not fix the issue, restore your image backup or use System Restore to return to a working state.

Which Windows 11 Update Blocking Method Should You Use?

There is no single best way to block Windows 11 updates permanently on every device. Your choice depends on how much control you want and how comfortable you are with deeper tools. The table at the top of this guide gives a quick comparison, yet the short summary below can help you pick a path.

• Windows 11 Home users — Start with the service method and a metered connection, then add registry tweaks only if you are experienced and have solid backups.
• Windows 11 Pro users — Use Group Policy to set Configure Automatic Updates to notify or disabled, lock your feature version, and add the service method only if you still see unexpected downloads.
• Power users and admins — Combine feature version locks, service tweaks, and outbound firewall rules, backed by full images and a regular manual patch routine.

By stacking these methods, you can block Windows 11 updates from installing on their own and move to a model where updates only arrive when you call them. That way, Windows 11 stays on the release you trust, you avoid surprise restarts, and you still have a clear path to newer builds when you decide the time is right.