Why change it
Windows Update brings security fixes and new features. But it can also restart a server in the middle of your work. A server should restart when you decide. On Windows Server 2016 you can set updates to download only, or to be fully manual.
Steps
- Open Command Prompt or PowerShell as administrator. Search for
cmdorpowershellin the Start menu, right-click it and choose Run as administrator. - Run the server configuration tool:
sconfig
- Type
5and pressEnterto open Windows Update Settings. - Choose a mode:
-Dfor Download Only. Windows downloads updates, but does not install them until you start the install.
-Mfor Manual. Windows does not check, download or install anything. You do it yourself.
- (Ais Automatic and installs updates by itself.) - Click OK in the dialog box that appears.
Install updates by hand
When you are ready, run sconfig again. Choose 6 (Download and Install Updates), pick All updates, and restart when you can.
Other ways
- Group Policy. Open
gpedit.msc, then go to Computer Configuration, Administrative Templates, Windows Components, Windows Update. Open Configure Automatic Updates. Choose "2 - Notify for download and auto install" or "Disabled". Also enable No auto-restart with logged on users for scheduled automatic updates installations. - Active hours. Set the hours when Windows must not restart.
Warning: Do not turn updates off forever. An unpatched server is easy to attack. Install updates on a schedule that you control.
Quick recap
sconfig, option5, thenDorM.- Install updates yourself at a quiet time.
- Never leave a server without updates for long.