Windows 11 will not let you shut down without an update in queue, the “Pause updates” option no longer exists on Home, and the 25H2 servicing model keeps pushing feature updates on machines that never asked. If you have been closing a laptop lid and finding it awake and installing 40 minutes later, you are the audience for these best apps for Windows 11 update control on desktop.
We looked at seven tools that either pause servicing on demand (Windows Update Blocker, StopUpdates24), disable it granularly (Wu10Man, ShutUp10++), or download and stage updates on your schedule (Windows Update MiniTool). Every recommendation runs on Windows 10 and 11, works without breaking the certificate root store, and does not require paid activation.
What to look for in a Windows update control app
Six criteria that separate the useful tools from the ones that leave your machine unpatched forever.
- Reversible. Any tool that permanently disables the update client without a one-click restore path is a bad tool. You want to defer updates, not orphan the machine.
- Granular. The right tool lets you block driver updates or telemetry without blocking security patches, if that is what you want.
- No admin rights bypass tricks. Tools that flip a Group Policy via Registry are fine; tools that patch svchost.exe are not.
- Portable, not installed. A portable EXE runs from a USB stick, leaves no installer footprint, and can be deleted cleanly.
- Actively maintained. Windows servicing changes every feature update. A tool that has not shipped a release in two years is a liability.
- Open source when possible. Update-blocking sits close to the OS. Auditable code is preferable.
Quick comparison
| App | Best for | Platforms | Free plan | Standout feature |
|---|---|---|---|---|
| Windows Update Blocker | One-click toggle | Windows 10/11 | Free | Portable EXE, no install |
| ShutUp10++ | Granular privacy + updates | Windows 10/11 | Free | 100+ policy toggles |
| StopUpdates24 | Persistent block | Windows 10/11 | Free | Rechecks and re-blocks |
| Wu10Man | Per-service control | Windows 10/11 | Free | Kill svchost update host directly |
| Windows Update MiniTool | Manual update picker | Windows 10/11 | Free | Choose which KBs to install |
| WPD | Privacy + servicing | Windows 10/11 | Free | Bundles telemetry blocker |
| ChrisTitusTech WinUtil | Debloat + update policy | Windows 10/11 | Free | PowerShell one-liner install |
1. Windows Update Blocker, best for a one-click toggle
Windows Update Blocker from Sordum is the tool most cord-cutter tech guides recommend, and for good reason. It is a portable EXE that flips the Windows Update service between Enabled, Manual, and Disabled with a single button, and it re-applies the setting on reboot so the OS cannot silently undo it.
Where it falls short: it blocks updates system-wide, not selectively. If you want to keep security patches but skip drivers, this tool cannot express that.
Pricing:
- Free: entire tool, no upsell.
Platforms: Windows 10, Windows 11 (all editions including Home).
Download: sordum.org.
Bottom line: best pick for anyone who wants a big red switch and nothing else.
2. ShutUp10++, best for granular privacy plus updates
O&O ShutUp10++ exposes over 100 privacy and servicing toggles in a categorised list, each with a recommendation flag (green, yellow, red). The update section lets you disable automatic downloads, delay feature updates, or block driver updates independently.
Where it falls short: the interface is dense. Fresh users can turn on 40 toggles at once and forget which one broke a specific feature.
Pricing:
- Free: full tool.
Platforms: Windows 10, Windows 11.
Download: oo-software.com.
Bottom line: pick this if you want a scalpel, not a switch.
3. StopUpdates24, best for persistent block
StopUpdates24 disables Windows Update and then monitors the OS for attempts to re-enable it, re-blocking each time. This is the tool for machines that Microsoft keeps flipping back on after feature updates.
Where it falls short: monitoring runs as a service and adds a small resident footprint. Restoring updates requires launching the app and clicking Restore, not just uninstalling.
Pricing:
- Free version with core blocking.
- StopUpdates24 Pro: one-time payment for extra scheduling.
Platforms: Windows 10, Windows 11.
Download: greatis.com.
Bottom line: pick this if you have already tried a simpler tool and Microsoft keeps overriding it.
4. Wu10Man, best for per-service control
Wu10Man is open source and lets you disable Windows Update at the service, scheduled-task, and hosts-file layer independently. You can permit metadata downloads while blocking actual patch installs, or lock only the driver-update path.
Where it falls short: the categories overlap and the interface has never had a UX pass. It is a technical tool for technical users.
Pricing:
- Free, open source (Apache 2.0).
Platforms: Windows 10, Windows 11.
Download: github.com/WereDev/Wu10Man.
Bottom line: pick this if you know what a wushowhide UUID looks like and want that level of control.
5. Windows Update MiniTool, best for manually picking KBs
Windows Update MiniTool replaces the Windows Update UI with a browsable list of pending KBs and lets you install, defer, or hide each one individually. If your problem is not “updates” as a category but a specific driver update that always breaks a webcam, this is the fix.
Where it falls short: it is portable and unsigned, so SmartScreen and some antivirus tools flag it on first run. Updates depend on WSUS Offline metadata, so occasional lag between Patch Tuesday and the tool seeing new KBs.
Pricing: free, open source.
Platforms: Windows 10, Windows 11.
Download: wumt.info or github.com/wumt-fork.
Bottom line: pick this if you want to see exactly what Windows plans to install and cherry-pick.
6. WPD, best for privacy plus servicing in one app
WPD (Privacy Dashboard for Windows) combines a telemetry blocker, an app-permissions toggle, and an update-disable pane in one portable EXE. It reads Group Policy for you and writes changes without touching the registry directly.
Where it falls short: development slowed for a while and the current active fork (Wpd-lite / Wpd-mod) is community-maintained. Verify you have the latest signed build.
Pricing: free.
Platforms: Windows 10, Windows 11.
Download: wpd.app or the community fork on GitHub.
Bottom line: pick this if you want update control and privacy hardening in the same session.
7. ChrisTitusTech WinUtil, best for debloat plus update policy
WinUtil from Chris Titus Tech runs from a single PowerShell command (irm christitus.com/win | iex) and opens a tabbed installer that combines application installs, tweaks, and an updates pane where you can set “Security only”, “Default”, or “Disable all”.
Where it falls short: it is a PowerShell tool, not an EXE. Some corporate environments block that install pattern.
Pricing: free, open source.
Platforms: Windows 10, Windows 11 (Home, Pro, Enterprise).
Download: christitus.com/win or github.com/ChrisTitusTech/winutil.
Bottom line: pick this if you set up a new Windows machine every few months and want debloat and update policy in one workflow.
How to pick the right one
- If you want the simplest option: Windows Update Blocker. Portable EXE, one button.
- If you need granular servicing control: ShutUp10++ or Wu10Man.
- If Microsoft keeps re-enabling updates: StopUpdates24.
- If you want to hand-pick which KBs install: Windows Update MiniTool.
- If you want privacy hardening in the same session: WPD.
- If you set up new machines often: WinUtil.
- If you tried blocking and now hate it: revert with the Reset Windows Update Agent tool from Microsoft’s TechNet Gallery.
FAQ
Is it safe to block Windows 11 updates? It is safe for a few weeks. It is not safe long-term. Security patches are the reason to keep updates on. Use these tools to defer feature updates and driver updates specifically, not to freeze the machine forever.
Why did Microsoft remove the pause option on Windows 11 Home? Microsoft has consolidated the pause option to the 22H2 and later servicing UI, but Home now caps pauses at seven days. The Group Policy that Pro uses is not exposed in Home, which is why these tools exist.
Does blocking updates stop Windows Defender from getting new signatures? Yes, if you block the Windows Update service entirely. To avoid that, block only the wuauserv “install” path (Wu10Man does this granularly) and leave Windows Defender’s separate update client running.
Which update-control app is best for gaming rigs? StopUpdates24 or WinUtil. Both let you keep security patches on while pausing feature updates that tend to reset overlay settings and driver profiles.
Can I still install updates manually after using these tools? Yes. Every tool in this list is reversible. Toggle updates back to Enabled, run Windows Update, install pending patches, then re-block if you want.
