How To Enable Windows Update | Settings & Registry Fixes

To enable Windows Update, navigate to Start > Settings > Windows Update and select Check for updates to scan for and install available updates.

A PC that never gets updates is a security risk waiting to happen. The fastest route to a working update system involves knowing how to enable Windows Update through the right channel — the Settings app for unmanaged PCs or the registry for policy-blocked machines. If the settings page is grayed out or missing entirely, the cause is usually a single registry value or an enterprise management tool that overrides local control. This article covers both scenarios so you can restore updates no matter why they stopped.

Enabling Windows Update Through Settings: The Standard Route

For most standalone PCs, the Settings app is the only tool you need. Microsoft designed the path to be nearly identical across current consumer versions, with a slight layout difference between Windows 11 and Windows 10.

On Windows 11, open Start > Settings > Windows Update. Select Check for updates and, if any appear, choose Download & install. Restart your PC when prompted.

On Windows 10, go to Start > Settings > Update & Security > Windows Update. Click Check for updates and install anything found. The restart prompt works the same way.

If updates were merely paused rather than fully disabled, the same screen shows a Resume updates button or lets you clear the pause date under Advanced options. Windows 10 allows pausing for up to 35 days, while Windows 11 caps it at 5 weeks — after that limit, you must install the latest updates before you can pause again.

What If The Settings Option Is Grayed Out Or Missing?

A grayed-out Windows Update page means something — either a registry policy or an enterprise management tool — has disabled the feature. The fix depends on whether your PC belongs to an organization or is a personally owned machine.

For an unmanaged PC, the culprit is almost always a registry entry under the Automatic Updates policy key. Microsoft documents these settings at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU. The value to check is NoAutoUpdate:

• NoAutoUpdate = 0: Automatic Updates are enabled (this is the default).
• NoAutoUpdate = 1: Automatic Updates are disabled.

To change it, open Registry Editor (type regedit after pressing Win + R), navigate to the path above, double-click NoAutoUpdate, and set its value to 0. If the key doesn’t exist, right-click the AU folder (or create it under WindowsUpdate), choose New > DWORD (32-bit), name it NoAutoUpdate, and leave the value at 0. After the reboot, open Windows Update again — the page should now be functional and able to check for updates.

Microsoft also defines AUOptions values for finer control of automatic update behavior: 2 notifies before downloading, 3 auto-downloads but notifies before install, 4 auto-downloads and installs on a schedule, and 7 notifies for both install and restart (Windows Server 2016 and later only). AUOptions = 5 allows local admin configuration but is not available on Windows 10 or 11.

Using the wrong registry path or mis-typing a value can prevent updates from working at all, so double-check each entry before closing Registry Editor.

Is Your PC Managed By A Work Or School Account?

If your laptop or desktop was issued by an employer or school, the registry method above may not work. Managed devices typically receive update policies through Group Policy, WSUS, ConfigMgr, or Intune, and those policies override local registry changes.

On a managed device, look for update settings under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate (without the AU subkey) or under HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\Current\Device\Update for Intune-managed machines. Changing these values without matching the enterprise configuration can cause update failures or compliance warnings.

The safest route on a managed PC is to contact your IT department. If you need updates immediately and have local admin rights, the Check for updates button in Settings still performs a manual scan — it just won’t override any policies that block automatic installation.

Choosing The Right Fix For Your Situation

The right approach depends entirely on why Windows Update is disabled. The table below matches each symptom to the correct fix.

Microsoft’s documentation on managing Windows Update registry settings provides the full list of policy keys and acceptable values. Bookmark that page if you work with multiple machines or plan to deploy update policies.

Common Mistakes That Keep Windows Update Disabled

Even when you follow the right steps, a few recurring mistakes can leave updates stuck. Watch for these:

• Editing the wrong registry path. The Automatic Updates values live under ...\WindowsUpdate\AU, not in the generic WindowsUpdate key. Mixing them up means your changes do nothing.
• Confusing manual checking with automatic updating. Clicking Check for updates runs a scan but does not enable automatic installation. To restore auto-updates, set AUOptions to 4 (auto-download and scheduled install).
• Forgetting to restart. Some registry changes and nearly all update installations require a reboot to take effect. Skip it, and nothing changes.
• Applying registry fixes on a managed device. Enterprise policies override local settings. If your PC is domain-joined or enrolled in Intune, the registry change you make may be reverted at the next policy refresh.
• Using outdated AUOptions values. AUOptions = 5 is not supported on Windows 10 or 11. Using it can confuse the update service.

Registry Values Reference For Automatic Updates

If you’re comfortable editing the registry, these values give you precise control over how Windows Update behaves. All values live under HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.

Restore Updates In Under Five Minutes

Start at Settings. If the page is accessible, resume or check for updates there. If it’s grayed out or missing, open Registry Editor and set NoAutoUpdate to 0 under the AU path. Reboot. If the problem persists and your PC is managed by an organization, contact IT — the policy is likely set above your access level. For everyone else, those two steps resolve the vast majority of disabled-update cases.