Windows Update is important for security — but forced updates at the wrong time can be disruptive. Whether you’re an MSP tech deploying standardized workstations, a gamer who can’t afford a mid-session reboot, or a power user who wants control over when updates install, BaseConf gives you a clean way to manage update behavior.
The problem with Windows auto-updates
By default, Windows 10 and 11 download and install updates automatically. This means:
- Forced reboots during work or gaming sessions
- Driver updates that break hardware compatibility
- Feature updates that change your UI and settings
- No visibility into what’s being changed on your system
Microsoft’s intent is good — keep systems patched — but the execution leaves IT professionals and power users without adequate control.
The registry approach
Windows Update behavior is controlled by registry keys under HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU. The key settings:
- NoAutoUpdate (DWORD) — Set to
1to disable automatic updates entirely - AUOptions (DWORD) — Controls behavior when updates are available (2 = notify, 3 = download only, 4 = auto-install, 5 = local admin chooses)
- NoAutoRebootWithLoggedOnUsers (DWORD) — Set to
1to prevent forced reboots when someone is signed in
Generate your script with BaseConf
Instead of manually editing the registry, use the BaseConf Windows Update Configurator to:
- Toggle the settings you want using a visual interface
- Inspect the generated PowerShell script — see exactly which registry keys will be modified
- Copy or download the script as a
.ps1file - Run it in PowerShell as Administrator
- Revert anytime — every script comes with a matching undo script
Beyond updates
Windows Update is just one category. BaseConf also generates scripts for:
- Power settings — sleep timers, hibernate, lid close action
- Privacy & telemetry — disable telemetry, advertising ID, Copilot, Recall
- Debloat — remove preinstalled apps, disable widgets
- Visuals & UI — dark mode, classic context menu, taskbar layout
Or use the Build Config page to configure everything in one place and generate a single unified script.
For MSP technicians
If you’re deploying the same update policy across multiple client machines, the BaseConf desktop app lets you save your configuration as a reusable .baseconf profile. Deploy it via USB, network share, or RMM tools like Syncro, Datto, and NinjaOne.