Stop automatic windows update

I want to be able to check for updates. But I don't want them automatically installed, in particular not the drivers. (One Realtek USB driver kept causing BSODs. I was ready to RMA the computer!)
I also don't want to install additional software just for MS to break it.
So here goes, my workaround, guaranteed to work in all editions of Windows 10.

1. In Explorer navigate to Windows > System distribution > Download. Right click and choose properties. Security tab > edit> deny System write access. Ok and agree with the warnings. Leave the properties window open
2. Check for updates. You'll get the list but with a "failed to install"
3. Download the ones you want from the Microsoft update catalog.
4. Pause updates (or the darn thing will start updating as soon as you do the next step)
5. Remove the Write > deny
6. Install updates from wherever you have downloaded them.
7. Reset the write > deny
8. Create a task to remind you to check for updates (for example open a notepad document with these steps) and follow steps 2-7.

Please note: if Checking for updates doesn’t seem to do anything,yYou might need to very briefly remove the deny flag. I keep both windows (Updates and the file properties dialogue) open and as soon a windows updates comes alive reset the deny flag.

The whole procedure takes about 30-60 min (depending on how many updates there are) once every two months (this is how often I check for updates). But no auto-reboots, no delay in starting because "we're updating windows" and no hours spent on debugging whatever Windows Updates broke.

Thank you but
"I also don't want to install additional software just for MS to break it."
Or for the developers to get tired of fixing it after each Windows 10 upgrade.

Cyanna said:

I want to be able to check for updates. But I don't want them automatically installed, in particular not the drivers. (One Realtek USB driver kept causing BSODs. I was ready to RMA the computer!)
I also don't want to install additional software just for MS to break it...

If you are not prepared to install 3rd-party software, then in Home your options are limited.

One thing you could do is use Microsoft's wushowhide.diagcab tool. When you run this troubleshooter the first thing it does is check for and list available updates (but won't trigger a download). It also allows you to hide updates that give trouble, such as your Realtek one.

Hide or Show Windows Updates in Windows 10

Cyanna said:

Thank you but
"I also don't want to install additional software just for MS to break it."
Or for the developers to get tired of fixing it after each Windows 10 upgrade.

I used option 5 successfully for months (set connection to metered), then ms forced an update even while my connection was set to metered. BTW, this is a ms option on Windows 10, no third party software, obviously ms doesn't care about my choice about when to update.

I was reluctant but finally installed WAU as Brink has suggested. It works well and provides an option to exclude driver updates. No more update grief for me. Best of luck finding a non-third party solution and please share it here if you find one. I won't be holding my breath though.

Enable or Disable Windows Update Automatic Updates in Windows 10

W10 Tweaker said:

I was reluctant but finally installed WAU

If I have understood correctly, WAU Manager is portable software, which requires no installation.

W10 Tweaker said:

ms forced an update even while my connection was set to metered.

I use both metered connection and CMD script to disable auto-updates. So far, so good.

@ W10 Tweaker:

1. In Explorer navigate to Windows > System distribution > Download. Right click and choose properties. Security tab > edit> deny System write access. Ok and agree with the warnings. Leave the properties window open
2. Check for updates. You'll get the list but with a "failed to install"
3. Download the ones you want from the Microsoft update catalog.
4. Pause updates (or the darn thing will start updating as soon as you do the next step)
5. Remove the Write > deny
6. Install updates from wherever you have downloaded them.
7. Reset the write > deny
8. Create a task to remind you to check for updates (for example open a notepad document with these steps) and follow steps 2-7.

Currently playing with disabling the network adapter during the manual update. Can't make up my mind if it's easier or not. The point is: if Windows Update can't write to the Software Distribution > Downloads folder, all updates will fail. But you still get the list and can choose what to install and what to skip. No third party software but a bit of extra time.