Disable Windows Update in Windows 10 IoT Enterprise

Disabling Windows Update in Windows 10 IoT Enterprise isn’t just about stopping the service—Windows can restart it automatically. You need a combined approach.

What actually works:

Group Policy (recommended)

Disable Configure Automatic Updates → this stops automatic downloads and installs

Disable Windows Update service + scheduled task

Stop wuauserv and disable related scheduled tasks to prevent restart

Registry policies

Set keys like NoAutoUpdate=1 and block update endpoints to enforce the restriction

Important note

Microsoft recommends controlling or disabling automatic updates via policy, not just killing the service, and ensuring you still have a manual update strategy for security

Practically, most setups use Group Policy + service + task disabling together for full control.

1. Disable the Windows Update service.
2. Disable the scheduled task
3. There are a number of registry keys that can be set to disable WU.

schtasks /Change /TN “\Microsoft\Windows\WindowsUpdate\Scheduled Start” /Disable

schtasks /Delete /TN “\Microsoft\Windows\WindowsUpdate\Scheduled Start” /F

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v SetDisableUXWUAccess /t REG_DWORD /d 1 /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 1 /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DoNotConnectToWindowsUpdateInternetLocations /t REG_DWORD /d 1 /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUServer /t REG_SZ /d " " /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUStatusServer /t REG_SZ /d " " /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v UpdateServiceUrlAlternate /t REG_SZ /d " " /f

reg.exe add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v UseWUServer /t REG_DWORD /d 1 /f

Sc.exe stop wuauserv

>Sc.exe config wuauserv start= disabled

press win key + r type services.msc and press enter scroll to windows update, right click, select properties and change startup type to disabled. click stop to end current service then apply changes.🤔

Hi Josh, our IOT distribution partner Elbacom has developed a graphical solution which allows you to customize your IOT image to your specific needs. Embedded Configuration Manager - Elbacom GmbH