Seeing the message “Windows Update service is disabled” can be frustrating, especially when Windows refuses to download or install available updates. In some cases, the Windows Update page may also show an error, updates may remain stuck, or Windows may tell you that your device is missing important security updates.
The Windows Update service manages the update process in Windows 11 and Windows 10. If the service is stopped, disabled, misconfigured, or prevented from starting, Windows cannot properly check for and install updates.
This guide explains the most common causes of the Windows Update service being disabled and walks you through several fixes.
Windows Update Service Disabled [Causes]
Before changing anything, it helps to understand why the Windows Update service might be disabled in the first place. Knowing the cause can help you choose the right fix instead of randomly changing Windows settings.
One common cause is that the Windows Update service has been manually disabled. This can happen if you previously changed services to reduce background activity, followed an optimization guide, or used a system-tweaking utility.
Another possibility is a Windows Update configuration problem. Windows relies on several services and background components to handle updates. If one of these components is stopped or incorrectly configured, the main Windows Update service may fail to work correctly.
A corrupted Windows Update cache can also cause trouble. Windows temporarily stores downloaded update files in specific system folders. If those files become damaged, the update process can stop working properly.
Third-party system optimization, privacy, or security software can sometimes interfere with Windows Update. Certain programs modify Windows services, block background processes, or change system policies.
A damaged Windows system component is another potential cause. If important system files associated with Windows Update are corrupted, the service may fail to start or Windows may incorrectly report that the service is disabled.
Finally, Group Policy or Registry settings can prevent Windows Update from operating normally. This is particularly common on managed computers, but it can also happen on personal PCs after configuration changes.
Windows Update Service Is Disabled [Fixes]
To fix the Windows Update service is disabled, open the Services app and set Windows Update to start automatically, then start the service. If that does not work, restart related update services, reset the Windows Update cache, run Windows Update Troubleshooter, repair system files with DISM and SFC, and check Windows Update policies.
The easiest approach is to start with the least invasive solution and move toward more advanced fixes only if necessary.
You do not need to perform every method if an earlier solution fixes the problem.
Step 1: Check and Start the Windows Update Service
The first thing to check is whether the Windows Update service is actually disabled or simply stopped.
Press Windows + R to open the Run dialog. Type services.msc and press Enter. The Services window will open with a long list of Windows services.
Scroll through the list and find Windows Update. You can also click inside the service list and press the W key to move closer to services beginning with W.
Double-click Windows Update to open its properties. Look for Startup type. If it is set to Disabled, open the drop-down menu and change it to Automatic. If you prefer Windows to start the service when it is needed, Manual can also be appropriate, but Automatic is a straightforward setting for troubleshooting.
Now look at Service status. If the service is stopped, click Start. Select Apply and then OK.
Restart your computer and go to Settings > Windows Update > Check for updates. If Windows begins checking for updates normally, the problem was likely caused by the service being stopped or disabled.
Step 2: Restart Related Windows Update Services
Sometimes the main Windows Update service is fine, but another service it depends on is not running correctly.
Press Windows + R, type services.msc, and press Enter. Now locate Background Intelligent Transfer Service, commonly called BITS. Double-click it and check whether it is running. If it is stopped, select Start.
Next, locate Cryptographic Services. Open its properties and make sure the service is running. These services help Windows download, verify, and process updates correctly.
Also check Windows Update again. After confirming these services are running, restart your PC.
Go to Settings > Windows Update > Check for updates and try the update again. If Windows Update was waiting for one of these supporting services, this can resolve the problem without requiring more advanced changes.
Step 3: Run the Windows Update Troubleshooter
Windows includes a built-in troubleshooter that can automatically detect some common update problems.
On Windows 11, go to Settings > System > Troubleshoot > Other troubleshooters. Find Windows Update and select Run.
On Windows 10, go to Settings > Update & Security > Troubleshoot > Additional troubleshooters. Select Windows Update and choose Run the troubleshooter.
Allow Windows to complete the scan. The troubleshooter may detect problems involving update services, configuration, or related components.
When the process finishes, follow any recommended repair. Restart your computer afterward and go to Settings > Windows Update to check for updates again.
Step 4: Reset the Windows Update Cache
If the Windows Update service is running but updates still refuse to work, the Windows Update cache may be corrupted.
For this method, open Command Prompt as administrator. Press the Windows key, type Command Prompt, right-click it, and select Run as administrator.
Enter the following commands one at a time, pressing Enter after each command:
net stop wuauserv
net stop bits
net stop cryptsvc
net stop msiserver
These commands temporarily stop services involved in the Windows Update process.
Next, open File Explorer and go to:
C:\Windows\SoftwareDistribution
You can rename the SoftwareDistribution folder to something such as SoftwareDistribution.old. Windows will create a new folder automatically when the update service starts again.
You can also reset the update components by returning to the elevated Command Prompt and starting the services again:
net start wuauserv
net start bits
net start cryptsvc
net start msiserver
Restart Windows and go to Settings > Windows Update > Check for updates. Windows will rebuild the required update cache.
Step 5: Repair Windows System Files
If the service keeps becoming disabled or refuses to start, corrupted Windows system files could be responsible.
Open Command Prompt as administrator by going to Start > type Command Prompt > Run as administrator.
First, run the Deployment Image Servicing and Management tool:
DISM /Online /Cleanup-Image /RestoreHealth
Press Enter and wait for the process to finish. Depending on your system, this may take several minutes.
After DISM finishes, run:
sfc /scannow
The System File Checker scans protected Windows files and attempts to replace corrupted versions with working copies.
Do not close Command Prompt while either scan is running. Once both commands finish, restart your computer.
Then go to Settings > Windows Update and select Check for updates.
Step 6: Check Windows Update Policies
If Windows Update keeps showing that the service is disabled, a Group Policy setting could be preventing updates from working.
Press Windows + R, type gpedit.msc, and press Enter. This option is available on editions such as Windows Pro, Enterprise, and Education and may not be available in Windows Home.
Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
Look for policies that explicitly disable Windows Update or prevent automatic updating. If you find a policy that you previously configured, open it and review its setting. A policy set to Disabled can sometimes have a different meaning depending on the specific policy, so read the policy description before changing it.
If you are unsure about a particular policy, do not randomly modify it. On a work or school computer, these settings may be controlled by an administrator.
After making an appropriate change, restart Windows and check Settings > Windows Update again.
Step 7: Check the Windows Update Service From Command Prompt
If the Services interface does not allow you to start Windows Update, you can check the service configuration from an elevated Command Prompt.
Go to Start > type Command Prompt > Run as administrator.
Enter:
sc query wuauserv
This command displays the current status of the Windows Update service.
If necessary, you can configure the service startup behavior with:
sc config wuauserv start= auto
Notice the space after start=. Command Prompt syntax matters here.
Afterward, try:
net start wuauserv
If Windows successfully starts the service, restart the computer and test Windows Update again.
Step 8: Restart the Computer and Check for Updates
After completing the repairs, give Windows a clean restart. This is important because some changes to services, system files, and update components do not fully take effect until Windows restarts.
Go to Start > Power > Restart. Once Windows loads again, go to Settings > Windows Update.
Select Check for updates and allow Windows several minutes to communicate with Microsoft’s update servers.
If updates appear, let Windows download and install them completely. Avoid shutting down the computer while an update is actively installing.
FAQs
Why does Windows say the Windows Update service is disabled?
Windows can display this message when the Windows Update service is stopped or disabled, when related services are not working, or when update components and system policies are preventing the service from operating correctly.
Should Windows Update Startup Type be Automatic?
For troubleshooting, setting Windows Update to Automatic is a reasonable choice. However, Windows may manage some services differently depending on the Windows version and configuration. The important point is that the service should not be unnecessarily set to Disabled.
Can antivirus software disable Windows Update?
Some third-party security or optimization programs can interfere with Windows services. If the problem started immediately after installing or configuring such software, review its settings before making major Windows changes.
Will resetting the Windows Update cache delete my personal files?
No. Resetting the SoftwareDistribution cache does not normally delete your personal documents, photos, applications, or other personal data. It removes or rebuilds temporary update-related files.
What if Windows Update keeps disabling itself?
If the service repeatedly becomes disabled, investigate Group Policy settings, Registry modifications, third-party optimization tools, malware, corrupted system files, and Windows Update component problems. Repeated service changes are usually a sign that something else is modifying or interfering with Windows.
Can I fix this without reinstalling Windows?
Yes. In most cases, you can troubleshoot a disabled Windows Update service without reinstalling Windows. Starting the service, resetting update components, running DISM and SFC, and correcting update policies can resolve many cases.
Summary
The Windows Update service disabled problem can look serious, but you can usually troubleshoot it without reinstalling Windows. Start by checking Windows Update in the Services app and make sure it is not set to Disabled. Then check related services such as BITS and Cryptographic Services.
If the basic service repair does not work, run the Windows Update Troubleshooter, reset the Windows Update cache, and repair corrupted system components with DISM and SFC. If the service continues to stop or disable itself, investigate Group Policy and third-party system utilities that may be changing Windows configuration.
For most users, working through these fixes in order provides a safe and practical way to restore Windows Update and get regular system updates working again.