The last twelve months of Windows patches have shipped a printer regression, an audio driver bug, a Blue Screen loop tied to a Recall preview, and a January cumulative that broke Copilot for anyone who had disabled it. The pattern is clear enough that pausing updates until other people find the bugs first is a defensible strategy. Microsoft’s own settings only let you pause for 7 days at a time on Home and 35 days on Pro.
The tools below extend that window, gate specific updates, block driver replacements, or let you install only after a community patch review clears them. We tested seven of them against a fresh Windows 11 install to find which combinations actually stop unwanted patches without breaking security updates you do want.
What to look for in a Windows update control tool
The right pick depends on how aggressive you want to be.
- Pause vs disable vs block-specific. Pause is Windows-native and temporary. Disable stops the service entirely. Block-specific hides an update by ID.
- Driver update blocking separately. Windows Update installs drivers too, and these break things more often than OS patches. Some tools separate the two.
- Rollback support. If a patch already installed and broke something, some tools automate the uninstall. Windows Settings does not always.
- Notifies you when to update. The point is not to never patch, only to patch on your timeline. Tools that show pending updates without installing help you stay current.
- Compatibility with Home edition. Group Policy tricks fail on Home. The tools below all work on Home.
Quick comparison
| App | Best for | Platforms | Free plan | Starting price/mo | Rating |
|---|---|---|---|---|---|
| WuMgr | Full-featured GUI update manager | Windows 10/11 | Full free | Free | 4.6 |
| Windows Update Blocker | Simple one-click disable | Windows 10/11 | Full free | Free | 4.5 |
| InControl | Version-lock and feature-update block | Windows 10/11 | Full free | Free | 4.7 |
| WSUS Offline Update | Curated offline patch bundles | Windows 7-11 | Full free | Free | 4.4 |
| O&O ShutUp10++ | Broad Windows privacy + update controls | Windows 10/11 | Full free | Free | 4.6 |
| AskWoody Master Patch List | Community-verified update advisories | Web + email | Free | About $5/mo Plus | 4.7 |
| AveYo Windows-Update-Toggler | Toggle in seconds via context menu | Windows 10/11 | Full free | Free | 4.3 |
The apps
1. WuMgr — Best full-featured update manager
WuMgr (Windows Update Manager) replaces the Windows Settings update UI with something that shows every pending update, hides individual updates you don’t want, blocks drivers separately from OS updates, and downloads updates without installing so you can pick your moment.
Filter by category (security, driver, feature update), by KB number, or by severity. Hidden updates stay hidden until you unhide them, which fixes Windows’ habit of re-offering the same broken KB every month.
Where it falls short: No installer, portable ZIP only. Interface is dense, closer to a tool for admins than a consumer app.
Pricing:
- Free: Open source
- Paid: None
Platforms: Windows 10 and 11
Download: WuMgr
Bottom line: The default pick for anyone who wants control per-update rather than all-or-nothing. Install once, run when you want to review pending patches.
2. Windows Update Blocker — Best one-click on/off toggle
Windows Update Blocker from Sordum is a portable exe with three buttons: Enable Service, Disable Service, Protect Service Settings. Click Disable and the update service and background maintenance tasks stop. Click Protect to keep them stopped through Microsoft’s periodic re-enable attempts.
There is no fluff. It disables the Windows Update service correctly (including Update Orchestrator and dependent tasks) rather than the surface-level tricks other tools try.
Where it falls short: All-or-nothing. Cannot hide individual updates or pass through security patches while blocking feature updates.
Pricing:
- Free: Portable, no license
- Paid: None
Platforms: Windows 7 through 11
Download: Windows Update Blocker
Bottom line: Best pick if you want to shut updates off entirely and re-enable manually every few weeks. Cleanest disable of the seven.
3. InControl — Best for locking Windows to a specific version
InControl from Steve Gibson (GRC) locks Windows to a specific version and build for as long as that version receives security updates. When Microsoft tries to push a feature update, Windows sees the lock and delivers only the monthly security patches.
Set it to Windows 11 24H2 and stay there until 24H2 goes end-of-life. No forced 25H2, no forced 26H1, on your timeline.
Where it falls short: Does not block individual monthly cumulative updates. Just prevents feature/version upgrades.
Pricing:
- Free: Full features, no tiers
- Paid: None
Platforms: Windows 10 and 11
Download: InControl
Bottom line: Pair with WuMgr or Update Blocker. InControl handles version lock; the other handles monthly patches.
4. WSUS Offline Update — Best for curated offline patch bundles
WSUS Offline Update (now maintained under the ReVo fork) downloads Microsoft patches directly from Microsoft, bundles them into an offline installer, and lets you install exactly the set you want. The tool ships with signed patch bundles that skip the known-broken KBs.
Air-gapped machines, media-lab computers, or anyone who wants a fully offline install path use this.
Where it falls short: No live GUI; you run a batch file and read the log. Bundles need periodic refresh downloads.
Pricing:
- Free: Open source
- Paid: None
Platforms: Windows 7 through 11
Download: WSUS Offline Update
Bottom line: Best pick for offline or air-gapped setups. Overkill for a single home laptop that stays online.
5. O&O ShutUp10++ — Best broad privacy and update controls
O&O ShutUp10++ covers hundreds of Windows settings from telemetry to Cortana to Windows Update. The update section blocks driver updates via Windows Update, defers feature updates, controls upload/download bandwidth, and disables Windows Update Delivery Optimization peer sharing.
Each setting has a recommended, limited, or unrecommended tag with an inline explanation.
Where it falls short: Broad scope means it changes more than just updates. Read each toggle before applying; the “recommended” defaults suit privacy over convenience.
Pricing:
- Free: Personal use, full features
- Paid: None for individuals
Platforms: Windows 10 and 11
Download: O&O ShutUp10++
Bottom line: Use this to shut off the specific update behaviors that annoy you (drivers, feature upgrades, background bandwidth), then keep the rest of Windows Update running.
6. AskWoody Master Patch List — Best community advisory service
AskWoody Master Patch List is not an app; it is a curated advisory that says which monthly patches are safe and which are not. Susan Bradley maintains it, and the community reports back within days of each Patch Tuesday.
The MS-DEFCON scoring (from 1 = don’t install to 5 = install now) tells you whether to run Windows Update this week or wait for the next round. Subscribing to email alerts costs about $5/mo Plus; the weekly public post is free.
Where it falls short: Not a tool, just information. You still need something else to actually defer the patch.
Pricing:
- Free: Weekly public post, MS-DEFCON status
- Paid: About $5/mo Plus for early alerts
Platforms: Web
Download: AskWoody
Bottom line: Read the MS-DEFCON status before letting Windows Update run. Skip the paid tier unless you need immediate alerts.
7. AveYo Windows-Update-Toggler — Best for right-click convenience
AveYo’s toggler installs a right-click menu entry that flips Windows Update on or off in one click. No app to open, no service manager, just Right-Click > Toggle Windows Update.
Underneath it uses the same service-disable approach as Windows Update Blocker, wrapped in a Registry-level integration.
Where it falls short: No hide-specific-update functionality. Just on/off.
Pricing:
- Free: Open source
- Paid: None
Platforms: Windows 10 and 11
Download: Windows-Update-Toggler
Bottom line: Best for someone who already knows what they want and just needs a faster toggle.
How to pick the right one
If you want minimum effort: AveYo’s toggler for the right-click switch, plus subscribing to AskWoody’s weekly MS-DEFCON email. Toggle on when Woody says safe, off otherwise.
If you want fine-grained control: WuMgr. Review pending updates every couple of weeks, hide the ones with known issues, install the rest.
If you want to skip feature upgrades entirely: InControl to lock the version, then any monthly-patch tool of your choice on top.
If you support other people’s Windows machines: WSUS Offline Update bundles for a reproducible install path.
If Windows keeps re-enabling your changes: Windows Update Blocker with Protect enabled, then check monthly.
FAQ
Is disabling Windows Update safe? Not for months at a time. Missing security patches accumulates real risk. The goal of these tools is to pick your patch timing, not to never patch. Check monthly and install the safe ones.
Which Windows updates should I block first? Driver updates delivered via Windows Update break things more often than OS patches. Block those in O&O ShutUp10++ or WuMgr, and manage drivers manually from the hardware vendor.
Can I stop Microsoft from forcing Windows 11 25H2? InControl locks the current version. Windows Update stops offering 25H2 as long as the current version receives updates. Once your version approaches end-of-life, InControl needs a new lock target.
How do I uninstall a bad Windows update?
Settings > Windows Update > Update history > Uninstall updates. For updates that don’t uninstall cleanly, use DISM from an elevated command prompt: dism /Online /Remove-Package /PackageName:<name>.
What is the best free Windows update blocker? Windows Update Blocker for a full disable, WuMgr for per-update control. Both are free and no-ads.
Do these tools work on Windows Home? Yes for all seven. None of them require Group Policy or Pro features.
