IT administrators can impose some restrictions on the computer under their domain. One of these restrictions is stopping Windows from automatically installing the updates on the domain user’s device. So, if you are seeing the “Your organization has turned off automatic updates“, a policy has been applied by your IT administrator, and updates won’t be installed on your system automatically. But you can easily override this policy either by editing the current settings or with a simple registry tweak.
Fix 1 – Check the group policy
Try altering the group policy settings on your system.
1. You have to open the Group Policy Editor. To do that, type “gpedit” in the search box.
2. Then, tap “Edit group policy” to access it.
3. When the Local Group Policy Editor page, go here –
Computer Configuration > Administrative Template > Windows Component > Windows Update > Manage end user experience
4. There will be several policies on the right-hand pane.
5. Just, double-click on the “Configure Automatic Update” policy to access it.
6. Now, you can modify the policy according to your need. Just set the policy to “Enabled“.
7. Next, set the ‘Configure automatic updating:’ settings to “4-Auto download and schedule the install“.
[NOTE – You can also set this policy to the “Not Configured” setting. This will eliminate the possibility of any conflict. ]
8. Once you are done altering the policy, tap “Apply” and “OK” to save the changes.
After saving these changes, close the Local Group Policy Editor page.
Now, you have to force this policy change on your computer.
1. Just start to type “cmd” in the search box and right-tap the “Command Prompt” and click “Run as administrator“.
2. Just type this line and hit Enter to force the policy change on the computer.
Once you notice the “User policy update has been completed successfully.” message appears on your screen, close the Command Prompt.
Now, open the Windows Update page and look if you are still seeing the message or not.
Fix 2 – Use the Registry Trick
Alternatively, if you are using a Windows 10 Home machine or the Group Policy method isn’t working, you can try this registry hack.
1. Press the Win key+S keys together and type “regedit” in the search box.
2. Then, tap “Registry Editor” to access it.
Warning – You are going to tweak your registry. As Registry Editor is a very important part of your system, you should make a registry backup beforehand.
After opening the Registry Editor screen up, tap on “File“. Then tap “Export” to create a new registry backup on your system.
Later, you can use this backup if things go wrong.
3. Now, expand the left-hand side this way ~
4. On the right-hand pane, try to find the “AuOptions” value.
a. If you can’t find the “AuOptions” value, you have to create such a value.
b. Just, right-click on the screen and tap “New>” and tap “DWORD (32-bit) Value“.
c. Then, name the value as “AuOptions“.
5. Double-tap the value to modify it.
6. You have to set this value to “4“.
7. After this, tap “OK” to save the changes.
Then, close the Registry Editor window. Later, restart your system to let this change take effect on your system.
When your system boots up, check if this works out.
Fix 3 – Run a system-wide scan
If either the registry editor or group policy method fails, you should try to look for a virus/malware with a system-wide scan.
1. First of all click on the 🔍 icon beside the Windows icon and type “security“.
2. Then, tap on “Windows Security“.
This will open the Windows Security page.
3. Now, you will notice several icons on the left pane. Tap on the “Home” icon.
4. Then, on the “Virus & threat protection” to open it.
5. Here you will find several details about paste scans. But, tap “Scan options” to explore more scanning options.
6. You are going to run a full system-wide scan. So, choose the “Full scan” option.
7. After that, tap “Scan now” to run the scan on your device.
Windows will now look for potential threats among all your files. This can take a long time depending upon how many files you have onboard.
Wait patiently. Once the scanning process is complete, restart the device once and check the status of the issue.
Fix 4 – Run SFC scan
SFC and DISM scans can really help solve this type of issue.
1. Tap on the 🔍 sign on your taskbar and type “cmd“.
2. You will find the “Command Prompt” in the search results. Just tap “Run as administrator“.
3. Now, you can run the SFC scan in the terminal. Just input this line and hit Enter.
4. Let the scan progression reach 100%. Now, paste this single line into the terminal and press Enter key to execute the code.
DISM /Online /Cleanup-Image /RestoreHealth
After running the DISM command, close the Command Prompt. Restart the system and then check the Windows Update page.
It will start to perform normally and you won’t be seeing the same error message again.