How to keep your Windows computer up to date

This article helps your computer obtain the latest updates to protect the computer and make it run smoothly.

Original product version: В Windows XP
Original KB number: В 311047

Install high priority updates

Microsoft Update is the online extension of Windows that helps you keep your computer up to date. Microsoft Update includes updates from Windows Update and from Office Update, in addition to updates for other Microsoft products and for third-party device drivers. Use Microsoft Update to install updates for your computer’s operating system, software, and hardware.

New content is added to the site regularly so that you can obtain recent updates and fixes to help protect your computer and to keep it running smoothly. To use the Microsoft Update site to install all critical updates for your computer, follow these steps:

Connect to the Internet, and then start Internet Explorer.

On the Tools menu, select Windows Update.

If Microsoft Update is not installed, select Microsoft Update. Otherwise, go to step 7.

On the Try Microsoft Update today Web page, select Start Now, and then select Continue on the Review the license agreement web page.

In the Security Warning dialog box, select Install to install Microsoft Update.

On the Welcome to Microsoft update web page, select Check for Updates

On the Keep your computer up-to-date web page, select Express to install high priority updates.

On the Review and Install Updates web page, select Install Updates, and then follow the instructions on the screen to complete the installation.

After you install the high priority updates, you can repeat these steps to install other updates. To do this, select Custom on the Keep your computer up-to-date web page. Then, you can select updates from the sections that are listed on the navigation pane.

Automatic Updates feature

You can also use the Automatic Updates feature to install updates. By using Automatic Updates, you do not have to visit the Microsoft Update Web site to scan for updates. Instead, Windows automatically delivers them to your computer.

Automatic Updates recognizes when you are online, and searches for updates from the Windows Update Web site. An icon appears in the notification area at the far right of the taskbar every time that new updates are available. You can specify how and when you want Windows to update your computer. For example, you can configure Windows to automatically download and to install updates on a schedule that you specify. Or you can have Windows notify you when it finds updates that are available for your computer, and then download the updates in the background. This enables you to continue to work uninterrupted. After the download is completed, an icon appears in the notification area with a message that the updates are ready to be installed. When you select the icon or the message, you can install the new updates in a few steps. For more information about the Automatic Updates feature, see Description of the Automatic Updates feature in Windows.

Download Windows updates

Administrators can download updates from the Microsoft Download Center or the Windows Update Catalog to deploy to multiple computers. If you want to obtain updates to install later on one or more than one computer, use either the following web sites.

For more information about how to download updates from the Windows Update Catalog, see How to download updates that include drivers and hotfixes from the Windows Update Catalog.

For more information about how to download files from the Microsoft Download Center, see How to obtain Microsoft support files from online services.

Install multiple Windows updates or hotfixes with only one restart

Administrators and IT professionals can install multiple Windows updates or hotfixes with only one restart.

References

For more information about security tools and checklists, see Microsoft Security Response Center.

Troubleshoot problems updating Windows 10

In Windows 10, you decide when and how to get the latest updates to keep your device running smoothly and securely. This article will help you answer questions and troubleshoot common problems with your Windows 10 update.

If you’re looking for info on how to activate Windows 10 or to verify that your installation of Windows 10 is activated, see Activate Windows 10.

Have issues installing Windows updates? Start here.

Your device may not be able to update to the latest version of Windows 10 for a few reasons. The following tips can help you pinpoint the issue affecting your device.

Before you begin, make sure your device is plugged into a power source and connected to the internet. Then, try the steps listed below to get your PC to update.

Some updates require administrator access. If your account doesn’t have administrator access, see Create a local user or administrator account in Windows 10. Or if someone else at home or in your office has an administrator account on your device, try asking them to install the updates.

Before trying any of the solutions below, make sure you back up your personal files. You can use File History to back up your files to another drive, or insert a USB drive and use File Explorer to drag and copy important files to the USB drive. If you’re signing into Windows with a Microsoft account, your system settings will be automatically restored after updating, once you’re connected to the internet.

You can also back up your files with OneDrive. For more info, go to Back up your Documents, Pictures, and Desktop folders with OneDrive.

Make sure that your device has enough space. Your device requires at least 16 GB of free space to upgrade a 32-bit OS, or 20 GB for a 64-bit OS. If your device has a small hard drive, you may need to insert a USB drive to update it.

If your PC is running low on storage, try the techniques at Free up drive space in Windows 10.

Many updates require you to restart your device. Save your work and close all open applications. Then, select Start > Power , and select either Update and restart or Update and shut down.

Even if you have downloaded some updates, there may be more available. After trying the preceding steps, run Windows Update again by selecting Start > Settings > Update & Security > Windows Update > Check for updates. Download and install any new updates.

Remove any external storage devices and drives, docks, and other hardware plugged into your device that aren’t needed for basic functionality. Then try to run updates again and see if this resolved your issue. If it didn’t, continue to the next tip.

If you’ve added hardware to your device, check for third-party driver updates and installation instructions on the hardware manufacturer’s website. Update any drivers, then try to run updates again and see if this resolved your issue. If it didn’t, continue to the next tip.

In the search box on the taskbar, type device manager, then select Device Manager from the list of results.

In the window that appears, look for any device with a yellow exclamation mark next to it. (You may have to select each category to view the list of devices.) Select the device name.

Select Action, and then choose either Update driver or Uninstall to correct the errors.

Common troubleshooting questions

If you are receiving an error message with a specific error code, try running the Windows Update Troubleshooter. If that doesn’t resolve the issue, see Fix Windows Update errors and follow the instructions to help resolve common update issues.

The time required to download and install updates depends on connection speed, network settings, and the size of the update. If the installation remains stuck at the same percentage, try checking for updates again or running the Windows Update Troubleshooter.

To check for updates, select Start > Settings > Update & Security > Windows Update > Check for updates.

To get help, in the search box on the task bar, type get help, then select Get Help from the list of results. To leave feedback if you run into further problems, in the search box on the taskbar, type feedback hub, then select Feedback Hub from the list of results.

Windows 10 is the most secure Windows ever, and we recommend you stay updated to protect your PC from security risks and to keep it running smoothly. However, you can temporarily pause updates as well as schedule a restart to install updates at a time that’s convenient for you.
Learn how to temporarily pause updates
Find out how to schedule a restart to install updates at a convenient time

You will only receive a notification when it’s time to restart your computer to apply the installed updates.

If you need to know where you left off in your work after an update, use Timeline to jump back in.

To get started with Timeline, select Task View on the taskbar, or press the Windows logo key +Tab and select the activity you want to resume.

Monthly quality updates on Windows 10 are quite small and have a minimal impact on data usage. Feature updates typically happen twice per year, and you can control when to install them. They require more data but are less frequent.

If you’re on a metered connection, some updates for Windows won’t be installed automatically. Metered connections in Windows 10

Your computer might be slow for a number of reasons, but updating to the latest version of Windows 10 can improve its performance. For help with a slow computer, see Tips to improve PC performance in Windows 10.

If you’re having trouble finding your files after an upgrade, see Find lost files after the upgrade to Windows 10 for other things to try.

Warning: Microsoft only recommends trying the procedures in this section if you’re comfortable working in the command line. These procedures require administrator permissions on your device.

In the search box on the taskbar, type command prompt, then select Run as administrator from the list of options. Select Yes. Next, in the window that appears, type the following commands one at a time, including the spaces as shown. After you type each command, press Enter. Then let each command complete before you type the next command.

net stop wuauserv

ren %systemroot%\softwaredistribution softwaredistribution.bak

ren %systemroot%\system32\catroot2 catroot2.bak

net start wuauserv

After all these commands are completed, close the Command Prompt window and restart your computer.

In some instances, third-party antivirus or security software can cause errors when you try to update to the latest version of Windows 10. You can temporarily uninstall this software, update your PC, and then reinstall the software after your device is up to date. We recommend using third-party antivirus or security software that’s compatible with the latest version of Windows 10. You can check compatibility by visiting the software manufacturer’s website.

Note: Before uninstalling software, make sure you know how to reinstall your programs and that you have any necessary product keys.

In the search box on the taskbar, type command prompt, and then select Run as administrator from the list of options. Select Yes. In the window that appears, type the following command, including the space as shown:
chkdsk/f C:
and then press Enter. Repairs will automatically start on your hard drive, and you’ll be asked to restart your device.

A clean restart starts Windows with a minimal set of drivers and startup programs. This helps eliminate software conflicts that occur when you install a program or an update that may cause issues updating your PC.
Learn how to do a clean restart

In the search box on the taskbar, type command prompt, then select Run as administrator from the list of options.

In the window that appears, type this command including spaces as shown:
DISM.exe /Online /Cleanup-image /Restorehealth

Press Enter. When the command operation has run successfully, you’ll see a confirmation message from Command Prompt that says, “The restore operation completed successfully” or “The operation completed successfully”.
Note: If you don’t see a confirmation message, retype the command and try again.

Next, type this command, including the space as shown:
sfc /scannow

Press Enter. Wait until the sfc scan verification reaches 100% completion, and then close Command Prompt.

Try running the Windows Update again.

Go to the software download page and select Download tool now to download the clean installation tool. Make sure to carefully read the notes on the software download page before using the tool.

Still stuck?

Contact Microsoft support if you continue to have problems with your Windows updates.

Manage additional Windows Update settings

Applies to

Looking for consumer information? See Windows Update: FAQ

You can use Group Policy settings or mobile device management (MDM) to configure the behavior of Windows Update (WU) on your Windows 10 devices. You can configure the update detection frequency, select when updates are received, specify the update service location and more.

Summary of Windows Update settings

Group Policy setting	MDM setting	Supported from version
Specify Intranet Microsoft update service location	UpdateServiceUrl and UpdateServiceUrlAlternate	All
Automatic Updates Detection Frequency	DetectionFrequency	1703
Remove access to use all Windows Update features	Update/SetDisableUXWUAccess	All
Do not connect to any Windows Update Internet locations	All
Enable client-side targeting	All
Allow signed updates from an intranet Microsoft update service location	AllowNonMicrosoftSignedUpdate	All
Do not include drivers with Windows Updates	ExcludeWUDriversInQualityUpdate	1607
Configure Automatic Updates	AllowAutoUpdate	All

Additional information about settings to manage device restarts and restart notifications for updates is available on Manage device restarts after updates.

Additional settings that configure when Feature and Quality updates are received are detailed on Configure Windows Update for Business.

Scanning for updates

With Windows 10, admins have a lot of flexibility in configuring how their devices scan and receive updates.

Specify Intranet Microsoft update service location allows admins to point devices to an internal Microsoft update service location, while Do not connect to any Windows Update Internet locations gives them to option to restrict devices to just that internal update service. Automatic Updates Detection Frequency controls how frequently devices scan for updates.

You can make custom device groups that’ll work with your internal Microsoft update service by using Enable client-side targeting. You can also make sure your devices receive updates that were not signed by Microsoft from your internal Microsoft update service, through Allow signed updates from an intranet Microsoft update service location.

Finally, to make sure the updating experience is fully controlled by the admins, you can Remove access to use all Windows Update features for users.

For additional settings that configure when Feature and Quality updates are received, see Configure Windows Update for Business.

Specify Intranet Microsoft update service location

Specifies an intranet server to host updates from Microsoft Update. You can then use this update service to automatically update computers on your network. This setting lets you specify a server on your network to function as an internal update service. The Automatic Updates client will search this service for updates that apply to the computers on your network.

To use this setting in Group Policy, go to Computer Configuration\Administrative Templates\Windows Components\Windows Update\Specify Intranet Microsoft update service location. You must set two server name values: the server from which the Automatic Updates client detects and downloads updates, and the server to which updated workstations upload statistics. You can set both values to be the same server. An optional server name value can be specified to configure Windows Update Agent to download updates from an alternate download server instead of the intranet update service.

If the setting is set to Enabled, the Automatic Updates client connects to the specified intranet Microsoft update service (or alternate download server), instead of Windows Update, to search for and download updates. Enabling this setting means that end users in your organization don’t have to go through a firewall to get updates, and it gives you the opportunity to test updates after deploying them. If the setting is set to Disabled or Not Configured, and if Automatic Updates is not disabled by policy or user preference, the Automatic Updates client connects directly to the Windows Update site on the Internet.

The alternate download server configures the Windows Update Agent to download files from an alternative download server instead of the intranet update service. The option to download files with missing Urls allows content to be downloaded from the Alternate Download Server when there are no download Urls for files in the update metadata. This option should only be used when the intranet update service does not provide download Urls in the update metadata for files which are present on the alternate download server.

If the «Configure Automatic Updates» policy is disabled, then this policy has no effect.

If the «Alternate Download Server» is not set, it will use the intranet update service by default to download updates.

The option to «Download files with no Url. » is only used if the «Alternate Download Server» is set.

To configure this policy with MDM, use UpdateServiceUrl and UpdateServiceUrlAlternate.

Automatic Updates detection frequency

Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the hours specified here minus zero to twenty percent of the hours specified. For example, if this policy is used to specify a 20-hour detection frequency, then all clients to which this policy is applied will check for updates anywhere between 16 to 20 hours.

To set this setting with Group Policy, navigate to Computer Configuration\Administrative Templates\Windows Components\Windows Update\Automatic Updates detection frequency.

If the setting is set to Enabled, Windows will check for available updates at the specified interval. If the setting is set to Disabled or Not Configured, Windows will check for available updates at the default interval of 22 hours.

The «Specify intranet Microsoft update service location» setting must be enabled for this policy to have effect.

If the «Configure Automatic Updates» policy is disabled, this policy has no effect.

To configure this policy with MDM, use DetectionFrequency.

Remove access to use all Windows Update features

By enabling the Group Policy setting under Computer Configuration\Administrative Templates\Windows Components\Windows update\Remove access to use all Windows update features, administrators can disable the «Check for updates» option for users. Any background update scans, downloads and installations will continue to work as configured.

Do not connect to any Windows Update Internet locations

Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store.

Use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not connect to any Windows Update Internet locations to enable this policy. When enabled, this policy will disable the functionality described above, and may cause connection to public services such as the Microsoft Store, Windows Update for Business and Delivery Optimization to stop working.

This policy applies only when the device is configured to connect to an intranet update service using the «Specify intranet Microsoft update service location» policy.

Enable client-side targeting

Specifies the target group name or names that should be used to receive updates from an intranet Microsoft update service. This allows admins to configure device groups that will receive different updates from sources like WSUS or Configuration Manager.

This Group Policy setting can be found under Computer Configuration\Administrative Templates\Windows Components\Windows update\Enable client-side targeting. If the setting is set to Enabled, the specified target group information is sent to the intranet Microsoft update service which uses it to determine which updates should be deployed to this computer. If the setting is set to Disabled or Not Configured, no target group information will be sent to the intranet Microsoft update service.

If the intranet Microsoft update service supports multiple target groups, this policy can specify multiple group names separated by semicolons. Otherwise, a single group must be specified.

This policy applies only when the intranet Microsoft update service the device is directed to is configured to support client-side targeting. If the «Specify intranet Microsoft update service location» policy is disabled or not configured, this policy has no effect.

Allow signed updates from an intranet Microsoft update service location

This policy setting allows you to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found on an intranet Microsoft update service location.

To configure this setting in Group Policy, go to Computer Configuration\Administrative Templates\Windows Components\Windows update\Allow signed updates from an intranet Microsoft update service location.

If you enable this policy setting, Automatic Updates accepts updates received through an intranet Microsoft update service location, as specified by Specify Intranet Microsoft update service location, if they are signed by a certificate found in the «Trusted Publishers» certificate store of the local computer. If you disable or do not configure this policy setting, updates from an intranet Microsoft update service location must be signed by Microsoft.

Updates from a service other than an intranet Microsoft update service must always be signed by Microsoft and are not affected by this policy setting.

To configure this policy with MDM, use AllowNonMicrosoftSignedUpdate.

Installing updates

To add more flexibility to the update process, settings are available to control update installation.

Configure Automatic Updates offers 4 different options for automatic update installation, while Do not include drivers with Windows Updates makes sure drivers are not installed with the rest of the received updates.

Do not include drivers with Windows Updates

Allows admins to exclude Windows Update (WU) drivers during updates.

To configure this setting in Group Policy, use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not include drivers with Windows Updates. Enable this policy to not include drivers with Windows quality updates. If you disable or do not configure this policy, Windows Update will include updates that have a Driver classification.

Configure Automatic Updates

Enables the IT admin to manage automatic update behavior to scan, download, and install updates.

Configuring Automatic Updates by using Group Policy

Under Computer Configuration\Administrative Templates\Windows Components\Windows update\Configure Automatic Updates, you must select one of the four options:

2 — Notify for download and auto install — When Windows finds updates that apply to this device, users will be notified that updates are ready to be downloaded. After going to Settings > Update & security > Windows Update, users can download and install any available updates.

3 — Auto download and notify for Install — Windows finds updates that apply to the device and downloads them in the background (the user is not notified or interrupted during this process). When the downloads are complete, users will be notified that they are ready to install. After going to Settings > Update & security > Windows Update, users can install them.

4 — Auto download and schedule the install — Specify the schedule using the options in the Group Policy Setting. For more information about this setting, see Schedule update installation.

5 — Allow local admin to choose setting — With this option, local administrators will be allowed to use the settings app to select a configuration option of their choice. Local administrators will not be allowed to disable the configuration for Automatic Updates.

If this setting is set to Disabled, any updates that are available on Windows Update must be downloaded and installed manually. To do this, users must go to Settings > Update & security > Windows Update.

If this setting is set to Not Configured, an administrator can still configure Automatic Updates through the settings app, under Settings > Update & security > Windows Update > Advanced options.

Configuring Automatic Updates by editing the registry

Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require you to reinstall the operating system. Microsoft cannot guarantee that these problems can be resolved. Modify the registry at your own risk.

In an environment that does not have Active Directory deployed, you can edit registry settings to configure group policies for Automatic Update.

To do this, follow these steps:

Select Start, search for «regedit», and then open Registry Editor.

Open the following registry key:

Add one of the following registry values to configure Automatic Update.

0: Automatic Updates is enabled (default).

1: Automatic Updates is disabled.

1: Keep my computer up to date is disabled in Automatic Updates.

2: Notify of download and installation.

3: Automatically download and notify of installation.

4: Automatically download and scheduled installation.

0: Every day.

1 through 7: The days of the week from Sunday (1) to Saturday (7).

n, where n equals the time of day in a 24-hour format (0-23).

Set this value to 1 to configure Automatic Updates to use a server that is running Software Update Services instead of Windows Update.

m, where m equals the time period to wait between the time Automatic Updates starts and the time that it begins installations where the scheduled times have passed. The time is set in minutes from 1 to 60, representing 1 minute to 60 minutes)

This setting only affects client behavior after the clients have updated to the SUS SP1 client version or later versions.

0 (false) or 1 (true). If set to 1, Automatic Updates does not automatically restart a computer while users are logged on.

This setting affects client behavior after the clients have updated to the SUS SP1 client version or later versions.

To use Automatic Updates with a server that is running Software Update Services, see the Deploying Microsoft Windows Server Update Services 2.0 guidance.

When you configure Automatic Updates directly by using the policy registry keys, the policy overrides the preferences that are set by the local administrative user to configure the client. If an administrator removes the registry keys at a later date, the preferences that were set by the local administrative user are used again.

To determine the WSUS server that the client computers and servers connect to for updates, add the following registry values to the registry: