How do I enable automatic windows updates?


Recommended Posts

I have googled this phrase and tried the options it outlines, but the setting I need is simply not there. It does seem to indicate that a policy may be enabled that disables it, but I have looked briefly through the group policy editor and since I am not 100% certain what I am looking for, nothing stands out as being the specific policy. Most specifically I wish to automate the Windows Security updates, which seem to happen around twice a day or so.

On 04/12/2022 at 18:10, Dick Montage said:

A bit more info would help.  Like, who is applying a policy?  Is it a work laptop that is centrally managed?

Not a work laptop, it is a clean install of the OS. I did use O&O Shut up to change a few things, but I've not done anything involving group policies.

On 04/12/2022 at 21:26, jnelsoninjax said:

Not a work laptop, it is a clean install of the OS. I did use O&O Shut up to change a few things, but I've not done anything involving group policies.

A lot of those applications that do things like that use group policy and registry edits to accomplish the task.

  • Like 2
On 06/12/2022 at 20:54, binaryzero said:

Defender will install the definitions automatically, you don't need to keep checking Windows update multiple times a day...

Otherwise you can do it via script (PowerShell), and a scheduled task.

The problem is that it doesn't update on its on, it pops up telling me there are updates, but doesn't install automatically.

1. Open PowerShell (Admin).

2. Run - "Install-Module PSWindowsUpdate". Accept untrusted repos, if you want to add the repo to the trusted list, go for it. Once installed, close PowerShell Window.

3. Open new PowerShell (Admin) window, run "Get-WindowsUpdate -Install -IgnoreReboot -Confirm:$false -Verbose".

4. Optional: Open PowerShell ISE, paste "Get-WindowsUpdate -Install -IgnoreReboot -Confirm:$false -Verbose", save as .ps1. Add to scheduled task.

 

On 07/12/2022 at 19:45, binaryzero said:

1. Open PowerShell (Admin).

2. Run - "Install-Module PSWindowsUpdate". Accept untrusted repos, if you want to add the repo to the trusted list, go for it. Once installed, close PowerShell Window.

3. Open new PowerShell (Admin) window, run "Get-WindowsUpdate -Install -IgnoreReboot -Confirm:$false -Verbose".

4. Optional: Open PowerShell ISE, paste "Get-WindowsUpdate -Install -IgnoreReboot -Confirm:$false -Verbose", save as .ps1. Add to scheduled task.

 

That did not do anything, no error messages, just as soon as I pasted the command and hit enter it simply displayed the command again

Capture.PNG.72afa76c82a58d9db945f678e1f15b1f.PNG

On 07/12/2022 at 20:12, binaryzero said:

Errr remove the " "

Oops! I tried to copy the script without the " " but I wasn't looking that closely!

OK, I got to the second script Get-WindowsUpdate -Install -IgnoreReboot -Confirm:$false -Verbose and I get an error saying that scripts can not run on this system.

Edited by jnelsoninjax

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates by Sayan Sen Recently, Microsoft delivered its latest Defender patches for Windows 11 ISOs. These definitions are released from time to time alongside the general security updates available during Patch Tuesday. Speaking of Defender, the company has now announced another important change that affects how security updates are delivered to enterprise devices running Windows. According to a recent announcement, Microsoft Defender for Endpoint's endpoint detection and response (EDR) updates will no longer be bundled with the monthly Windows security updates or Patch Tuesdays. Instead the company is shifting delivery of these updates to Microsoft Update, bringing EDR servicing in line with several other Microsoft Defender components. If you recall, Microsoft last year moved PowerShell updates to Microsoft Update (MU) as well since it provides automatic updates for Microsoft products and services. Thus the move is intended to allow Microsoft to deliver EDR improvements and security enhancements independently of the OS's regular monthly update cycle; this should enable faster deployment of protection updates without requiring organizations to wait for the next Patch release. For those unfamiliar, Microsoft Defender for Endpoint's EDR capabilities are designed to help organizations detect, investigate, and respond to advanced threats across managed devices. Keeping these components updated is critical for maintaining protection against evolving attack techniques. The rollout has already began for Windows 10 devices in late May 2026 (last month) and Microsoft says it will gradually expand support to Windows 11 and the remaining supported Windows versions over the coming months. The company expects deployment across Windows 10 and Windows 11 to be completed by fall 2026 or around Q3 of this year. Once the transition is complete, EDR updates will be delivered through Microsoft Update using KB5005292, provided the required prerequisite updates have already been installed. Microsoft is also introducing a new Defender Update Service as part of the change. Following installation of the first update, devices will automatically create a new directory located at %ProgramData%\Microsoft\Microsoft Defender\Defender Update. Microsoft notes that restarts may occasionally be necessary in case of "rare" failure scenarios. For most organizations, the tech giant says no action will be required as long as Microsoft Update is already permitted within their update management strategy. Admins who rely on manually deployed update packages, however, will need to adjust their processes to ensure the new Defender update package is included. Microsoft also recommends reviewing internal documentation and notifying helpdesk and security operations teams about the updated delivery mechanism to avoid confusion during the transition. As a prerequisite, the tech giant notes that systems must be running Sense version 10.8798.25857.1000 or later and have one of the following Windows updates (or later) installed: Win11 24H2 KB5062660 (2025-07 Cumulative Update Preview) Win11 23H2 KB5062663 (2025-07 Cumulative Update Preview) Win11 22H2 KB5062663 (2025-07 Cumulative Update Preview) Win10 22H2 KB5062649 (2025-07 Cumulative Update Preview) Win10 1809 KB5063877 (2025-08 Cumulative Update) Server 2019 KB5063877 (2025-08 Cumulative Update) Server 2022 KB5063880 (2025-08 Cumulative Update) Server 2025 KB5063878 (2025-08 Cumulative Update) As always, organizations should verify that their update policies align with the new servicing approach before the broader rollout reaches all supported Windows platforms later this year. In case of major problems, the EDR update can be rolled back to the inbox version stored in %ProgramFiles%\\Windows Defender Advanced Threat Protection (ATP) using: MpCmdRun.exe -RevertMde -Product Edr -ToVersion Inbox For those who have access to the Microsoft 365 Admin Center portal, you can view the message here under ID MC1381119.
    • My problem with these smart scopes is that IMO they're not really an entrance into astronomy, they're an entrance to looking at pretty(ish) pictures that you take by essentially pressing a button and letting the scope do the work. I still maintain that getting some binoculars or a solid dedicated telescope (which doesn't have to mean expensive) and actually spending time learning the night sky and using a telescope is a much better way to actually learn. But, granted, the learning curve is a bit steeper (as it tends to be).
    • I never played Crazy Taxi before, but this looks like a fun game!
    • The perception of Microsoft Edge is unfortunate as it's a world class browser. I'm not exaggerating when I say it's the best browser I've ever used with its feature set, speed, reliability and advanced security. Running the extension Ublock Origin is a must though to deal with advertising and trackers.
    • You can check out our latest 9070 GRE review with scores for the XT too, but these are on Windows: Gaming performance Productivity performance
  • Recent Achievements

    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
    • Dedicated
      Conjor earned a badge
      Dedicated
    • Week One Done
      Windows Guy earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      493
    2. 2
      PsYcHoKiLLa
      248
    3. 3
      Steven P.
      73
    4. 4
      +Edouard
      69
    5. 5
      neufuse
      68
  • Tell a friend

    Love Neowin? Tell a friend!