Windows Update Service Registry Key Location

This guide identifies the primary registry keys in the Windows Registry Editor (Regedit) responsible for configuring Windows Update service behavior and automated update policies. By modifying these registry values, system administrators can control automatic update schedules, disable or enable updates, and configure the underlying wuauserv Windows service directly.

1. Automatic Update Behavior Policy Key

The primary registry key used to control Windows Update behavior, schedules, and notifications is located in the Group Policy registry hive:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

(Note: If the WindowsUpdate or AU keys do not exist, they can be created manually under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows.)

Key Values in the AU Key:

• AUOptions (DWORD): Defines the core update behavior:
  • 2 – Notify before download and notify before installation.
  • 3 – Automatically download and notify for installation.
  • 4 – Automatically download and schedule the installation.
  • 5 – Allow local administrators to select the configuration mode.
  • 7 – Notify for download, notify for install, and notify for restart (Windows Server).
• NoAutoUpdate (DWORD):
  • 0 – Automatic Updates are enabled (default).
  • 1 – Automatic Updates are disabled.
• ScheduledInstallDay (DWORD): Specifies the day of the week for installation (0 = Every day, 1 to 7 = Sunday to Saturday).
• ScheduledInstallTime (DWORD): Specifies the hour of the day for installation using a 24-hour format (0–23).
• UseWUServer (DWORD): Set to 1 to configure the client to use a local Windows Server Update Services (WSUS) server specified in the parent WindowsUpdate key.

2. Windows Update System Service Key

To manage the execution, startup type, and permissions of the core Windows Update background service (wuauserv), the registry path is:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv

Key Values in the wuauserv Key:

• Start (DWORD): Controls the startup type of the Windows Update service:
  • 2 – Automatic
  • 3 – Manual (Default)
  • 4 – Disabled
• ImagePath (Expandable String): Defines the binary path for the service (default is %systemroot%\system32\svchost.exe -k netsvcs -p).

How to Access and Modify These Keys

1. Press Win + R, type regedit, and press Enter.
2. Navigate to the desired path listed above using the left-hand navigation tree or by pasting the path into the address bar.
3. Double-click the target DWORD value to change its numerical data, or right-click within the right pane to create a New > DWORD (32-bit) Value if it does not already exist.
4. Restart the computer or restart the Windows Update service via PowerShell (Restart-Service wuauserv) for policy changes to take effect.