Disabling Windows Update

On Kiosk Hardened Image, Windows Update is enabled by default to ensure the latest security updates are automatically downloaded and applied. However, if you prefer to disable automatic Windows update on the Kiosk, please follow the instruction below.

It is best practice to keep automatic Windows updates enabled to ensure the latest security updates are applied promptly, keeping the system secure. Disabling automatic updates could lead to the system vulnerable to security risks.

Step 1. Open Microsoft Management Console (MMC)

  • Go to the Start menu, type mmc, and open it with Administrator permissions
_Open Microsoft Management Console (MMC)_

Open Microsoft Management Console (MMC)

Step 2. Add the Services Snap-in

  • In the MMC window, select File, select Add/Remove Snap-in.
  • From the list, select Services and click Add. A popup Window will appear, select Local computer, click Finish. Then, click OK.
_Add Services Snap-in in MMC_

Add Services Snap-in in MMC

_Select Local Computer to add Service Snap-in_

Select Local Computer to add Service Snap-in

Step 3. Disable the Windows Update service

  • In the Services list, find Windows Update service. Right-click on it and select Properties.
_Open Properties of Windows Update service_

Open Properties of Windows Update service

  • Under the General tab, set Startup type to Disabled.
  • Click Stop to halt the service, then click Apply and OK.
_Disable Windows Update service_

Disable Windows Update service

Step 4. Disable Update Orchestrator service

  • Still in Services list, find Update Orchestrator Service. Right-click on it and select Properties.
_Open Properties of Update Orchestrator Service_

Open Properties of Update Orchestrator Service

  • Under the General tab, set Startup type to Disabled.
  • Click Stop to halt the service, then click Apply and OK.
_Disable Update Orchestrator Service_

Disable Update Orchestrator Service

Step 5. Rename Registry Keys

  • Go to Start menu, type regedit, and open it with Administrator permissions
_Open Registry Editor_

Open Registry Editor

  • Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services.

  • Rename the following registry keys:

    • usoSvc to usoSvc-backup
    • wuauserv to wuauserv-backup
_Rename Registry Keys_

Rename Registry Keys

_UsoSvc Registry Key after renamed_

UsoSvc Registry Key after renamed

_wuauserv_ _Registry Key after renamed_

wuauserv Registry Key after renamed

Step 6. Reboot the Kiosk system

  • Restart the system to apply the changes.

Step 7. Verify Windows Update status

  • After reboot, go to Start menu, type Windows Update settings , and open it. Verify to ensure the Windows Update was disabled
_Verify Windows Update status_

Verify Windows Update status

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard