Description
Windows Update tends to show up at the wrong moment: a forced reboot in the middle of work, or an update that swaps out a driver that was working fine. The usual ways to turn it off mean editing a pile of registry keys and group policies by hand, or running scripts that call the command line and break on another Windows version. UpdateLock is a single file tool: open it and one click writes the update policy that fits your system version, and one more click restores everything.
It is a native C++ and Win32 program that needs no .NET and never calls PowerShell, CMD or reg.exe. It detects Windows 7, 10, 11 and Server 2016, applies the matching policies, saves the original state first, reads the values back to verify, and rolls back on a mismatch. It needs administrator rights and allows only one running instance. The source is open on GitHub, the current version is 3.3, and it now recognizes Windows 11 24H2, 25H2 and 26H2.
One click off: writes policies that disable automatic updates, update notifications and automatic reboots for your system version, and the status line then reads that Windows Update policy is fully off
One click restore: the original state is saved before any change, with backups under %ProgramData%\UpdateLock, so you can undo at any time
Verify and rollback: values are read back after writing, and a mismatch triggers a rollback instead of leaving half applied settings
Hide manual update entry: on Windows 10 and 11 the check for updates entry can be hidden to avoid accidental clicks
Block the Windows 11 upgrade: on Windows 10 a target release policy pins the current version so it is not offered the upgrade
Windows 7 support: on Windows 7 it stops and disables the Windows Update service
Caveats: with driver updates turned off, newly plugged in USB devices may stop getting drivers automatically, and the program is not Authenticode signed, so SmartScreen may warn
It is a native C++ and Win32 program that needs no .NET and never calls PowerShell, CMD or reg.exe. It detects Windows 7, 10, 11 and Server 2016, applies the matching policies, saves the original state first, reads the values back to verify, and rolls back on a mismatch. It needs administrator rights and allows only one running instance. The source is open on GitHub, the current version is 3.3, and it now recognizes Windows 11 24H2, 25H2 and 26H2.
Features
One click off: writes policies that disable automatic updates, update notifications and automatic reboots for your system version, and the status line then reads that Windows Update policy is fully off
One click restore: the original state is saved before any change, with backups under %ProgramData%\UpdateLock, so you can undo at any time
Verify and rollback: values are read back after writing, and a mismatch triggers a rollback instead of leaving half applied settings
Hide manual update entry: on Windows 10 and 11 the check for updates entry can be hidden to avoid accidental clicks
Block the Windows 11 upgrade: on Windows 10 a target release policy pins the current version so it is not offered the upgrade
Windows 7 support: on Windows 7 it stops and disables the Windows Update service
Caveats: with driver updates turned off, newly plugged in USB devices may stop getting drivers automatically, and the program is not Authenticode signed, so SmartScreen may warn
