Windows Update Blocker

Windows Update Blocker stops the operating system from updating itself, and starts it again, with one button. It disables the update service and the handful of services and scheduled tasks that would otherwise wake it back up.

Then it watches those settings so that nothing, including the system’s own repair routine, can quietly switch them on again. Choose Disable Updates, tick Protect Services Settings, press Apply Now, and the icon turns red. Choose Enable Updates and press again, and the machine is back to normal.

That is more than it sounds, because the system is built to resist exactly this. Stopping the update service by hand lasts until a background medic service notices and restarts it, usually within the day. Windows Update Blocker knows about the medic, the orchestrator, the delivery service and the scheduled tasks that feed them, and it handles all of them at once.

Where WuMgr lets you pick which updates to install, this tool answers a blunter question. Updates now, or not now.

One click, several services

The main window has two radio buttons, a checkbox and a status line. Disable Updates sets the update service to disabled and stops it, and does the same to the other services in its list. Enable Updates reverses both. The status line reports whether the service is running, stopped, disabled or disabled and protected, so the effect of each press is visible without opening the services console.

Protect Services Settings is the part that makes the block hold. With it ticked, the program keeps a watch on the services it changed. If anything sets them back, a repair routine, an update to another product or a tidy-minded technician, they are returned to disabled. Without it, the block is a suggestion that lasts until the next maintenance window.

Tick it, and remember that you did, because a machine that will not update for months is usually one where somebody forgot.

The service list and the ini file

Beside the Windows Update Blocker executable sits a plain text file listing the services the program manages, each with a default start type and a disabled start type. The update service and the medic service are there, along with the orchestrator, the delivery service and the transfer service. A section below lists the scheduled tasks that are disabled alongside them.

A Service List Options window under the Menu button edits the same list without a text editor, and up to twenty-five services can be included.

That editability is how people fix the one side effect that catches everyone. The delivery service is what the built-in application marketplace uses to download and update. With it disabled, those applications stop updating too. Set that service to stay automatic in the list, apply again, and the marketplace works while the operating system updates remain blocked.

The same trick keeps voice typing and other components that lean on the update service alive.

Scripting it

Windows Update Blocker accepts command-line switches to disable, enable and protect, so a batch file or a startup script can set a fleet of lab machines to a known state. Technicians who image machines and need the patch level frozen during a demonstration or a test run use it that way.

The Menu also opens the update settings page, the services console, the task scheduler and the system’s own update troubleshooter. That troubleshooter is the recommended repair if a service ends up in a state the program cannot read.

The reason not to

Blocking updates blocks security fixes. Every month the system ships patches for holes that are being used, and a machine with this tool set to red is not receiving them. That is fine for a week while a bad update is worked around, or for a machine that never touches the internet.

It is not fine as a permanent state on a laptop that browses the web. The program does not nag about this, which is a virtue of its design and a responsibility handed to you. Set a reminder to press the other button.

Conclusion

Windows Update Blocker is for the person whose machine restarted during a presentation and the technician who needs a patch level frozen for a week of testing. It also suits anyone waiting out a broken update that keeps reinstalling. It does the job the built-in pause option half does, and it does it in a way the system cannot undo behind your back.

It is not a permanent setting for a connected machine, and the program leaves that judgement to you. Use the red state deliberately, note the date, and give the green button its turn.