Windows 10 Creators Update installs all by itself for some users [FIX]

by Radu Tyrsina
Radu Tyrsina
Radu Tyrsina
CEO & Founder
Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time). For most of the kids of... read more
Affiliate Disclosure
fix wi-fi driver

While others have to manually download and install the Creators Update for Windows 10, some users are taken aback when all at once they found their PCs upgraded to the latest version of Windows. One user took to Reddit to shed light on what really occurred:

“So this morning I get to work and my boss comes talk to me, “Hey we got creators update!” and I got surprised because we have a WSUS and the “Feature Update to Windows 10 <Insert version here>” is in the state of “not approved”.

Maybe I messed up with the Windows Update Policy? [I checked] the policy settings, nothing changed, GP Update and RSOP.MSC says the policy is updated and applied.

Checked the registry to my machine under “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate” and “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU” and everything is alright.

As a bonus, our VPN Client from Check Point is not compatible.”

The further explains that the issue could be due to Dual Scanning which takes place when the Configure Automatic Updates option is enabled and the Defer Upgrades and Updates option is disabled. When the Defer Upgrades and Updates configuration is turned off, Windows tends to skip Windows Server Update Services and scans for updates in Windows Updates sites, in the process bypassing WSUS approvals. That is because using the client side options to schedule upgrades and feature updates switches the client to Windows Update for Business.


To solve the issue, the user offered the following solution (under Computer Configuration > Administrative Templates > Windows Components > Windows Update):

  • Enable “Configure Automatic Updates” option
  • Enable “Do not connect to any Windows Update Internet locations”
  • Leave the “Defer Upgrades and Updates” as “Not Configured”

Note, however, that enabling the “Do not connect to any Windows Update Internet locations” policy affects the Windows Store and other modern apps.

The configuration blocks Windows from contacting the Windows Update public servers and hides the option “Check Microsoft for Updates” from the Windows Update Client in Windows 10. So, keep this in mind while performing the workaround.


This article covers:Topics: