How to block or hide a single Windows update

You uninstalled a broken update or driver, and the next time Windows checks for updates it installs the same thing again. Pausing updates only delays the problem for a few weeks and also holds back everything else. Windows has no button for "never install this one", but there are three practical ways to get the same result, depending on what you want to stop: one update, all drivers, or a whole new Windows version.

First check the update's page on this site: the Known issues section may already name a fix, and the next update often solves the problem on its own.

Hide one update or driver with "Show or hide updates"

Microsoft published a small troubleshooter called Show or hide updates (wushowhide.diagcab). It lists what Windows Update is about to install and lets you hide a specific update or driver so it is skipped.

1. Download wushowhide.diagcab from Microsoft's own download page (search for "Show or hide updates" on Microsoft Support) and open it.
2. Select Next, then Hide updates.
3. Tick the update or driver you want to skip and select Next.
4. To undo it later, run the tool again, choose Show hidden updates and tick the item.

Things to know:

• The tool is a legacy download. It is not part of Windows, Microsoft no longer promotes it prominently, and it may stop working in a future version. It is still widely used on Windows 10 and Windows 11.
• It hides only the item you picked. A hidden driver update stays hidden, which is exactly what you want after a bad graphics or network driver.
• It does not help with monthly cumulative updates for long. The cumulative update of the next month has a new KB number, so it is a new, unhidden item. Hiding a cumulative update also leaves you without that month's security fixes. Use it for drivers and for a short wait, not as a way to stay unpatched.

Third-party tools that offer the same thing exist, but you do not need them: the PowerShell route in How to check, install and hide Windows updates from PowerShell does the same job from the terminal.

Stop Windows Update from installing drivers

If drivers are the recurring problem, tell Windows Update to leave them alone. You then install drivers from your PC maker or the hardware vendor instead. The setting applies to quality updates; it does not affect the cumulative updates themselves.

Group Policy (Windows Pro, Enterprise and Education)

1. Press Win + R, type gpedit.msc and press Enter.
2. Go to Computer Configuration › Administrative Templates › Windows Components › Windows Update › Manage updates offered from Windows Update.
3. Open Do not include drivers with Windows Updates, select Enabled and select OK.

Registry or PowerShell

The same policy is stored in the registry. Run PowerShell as administrator:

> $key = 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate'> if (-not (Test-Path $key)) { New-Item -Path $key | Out-Null }> New-ItemProperty $key -Name ExcludeWUDriversInQualityUpdate -Value 1 -PropertyType DWord -Force

To go back, delete the value or set it to 0:

> Remove-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' -Name ExcludeWUDriversInQualityUpdate

Restart the Windows Update service or the PC for the change to apply. If the key already exists, Windows keeps your other values in it.

Stay on your current Windows version

Each year Windows 11 gets a new version (for example 24H2 or 25H2). If you want to keep receiving the monthly updates for the version you run, but not move to the next one yet, pin the target version. The monthly security updates for the pinned version keep coming.

First note your version with winver (see How to check your Windows version).

Group Policy

1. Open gpedit.msc and go to Computer Configuration › Administrative Templates › Windows Components › Windows Update › Manage updates offered from Windows Update.
2. Open Select the target Feature Update version and select Enabled.
3. Enter the product, for example Windows 11, and the version, for example 25H2.
4. Select OK.

Registry or PowerShell

> $key = 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate'> if (-not (Test-Path $key)) { New-Item -Path $key | Out-Null }> New-ItemProperty $key -Name ProductVersion -Value 'Windows 11' -PropertyType String -Force> New-ItemProperty $key -Name TargetReleaseVersion -Value 1 -PropertyType DWord -Force> New-ItemProperty $key -Name TargetReleaseVersionInfo -Value '25H2' -PropertyType String -Force

Use the version you are running, written exactly as winver shows it, and Windows 10 as the product on Windows 10. To release the pin, delete the three values (or set TargetReleaseVersion to 0).

Limits of pinning a version:

• It is a delay, not an exemption. Every Windows version has an end of servicing date, and after it the PC stops receiving security updates. Check the date for your edition and version on the Windows release health pages before you pin, and plan the move to a supported version. For example, Home and Pro editions of Windows 11 24H2 left support in October 2026.
• A version that does not exist, or a typo in the string, means Windows Update will not offer a feature update at all until you correct it.
• These policies are meant for Pro, Enterprise and Education. On Home edition there is no Group Policy editor and Windows may ignore the registry values, so pause updates instead.

On a work PC

If the PC is managed by your organization, these settings are probably already controlled by IT and your changes can be overwritten at the next policy refresh. Ask your administrator rather than working around the policy.