How to Block Edge Automatic Updates Without Group Policy on Windows 11
🔍 WiseChecker

How to Block Edge Automatic Updates Without Group Policy on Windows 11

Quick fix: Open Services (services.msc). Find Microsoft Edge Update Service (edgeupdate) and Microsoft Edge Update Service (edgeupdatem). Right-click each → Properties → Startup type: Disabled. Stop the services. Edge will no longer auto-update. To update manually: open Edge → edge://settings/help → manually trigger update by visiting the page (still works without service if you do it manually).

Microsoft Edge auto-updates via two services: edgeupdate (main) and edgeupdatem (medium-priority). Disabling these stops automatic updates without needing Group Policy. Useful for: keeping a specific Edge version for compatibility testing, controlled corporate environments without GP, or freezing Edge to debug an issue.

Symptom: Want to block Microsoft Edge automatic updates without Group Policy on Windows 11.
Affects: Microsoft Edge on Windows 11.
Fix time: ~5 minutes.

ADVERTISEMENT

What causes this need

Edge auto-updates ensure security patches but can break:

  • Web app compatibility (older sites that worked break).
  • Extensions removed without warning.
  • Bandwidth on metered connections.
  • Specific UI features changing unexpectedly.

Disabling auto-update means you control when updates apply. Manual updates still possible.

Method 1: Disable Edge Update services

The standard route.

  1. Open Services: Win+R → services.msc.
  2. Scroll to find:
    • Microsoft Edge Update Service (edgeupdate) — runs constantly.
    • Microsoft Edge Update Service (edgeupdatem) — runs less often.
    • Microsoft Edge Elevation Service — helper.
  3. Right-click first service → Properties → Startup type: Disabled. Click Stop.
  4. Apply → OK.
  5. Repeat for the second service.
  6. For the Elevation Service: leave as is or set to Manual (used only when updating, won’t run on its own).
  7. Edge update is now disabled.
  8. To verify: open Edge → edge://settings/help. Wait. If services are disabled, page shows error or doesn’t check.

This is the standard route.

ADVERTISEMENT

Method 2: Block update via firewall

For extra-firm block.

  1. Open Windows Defender Firewall with Advanced Security (Win+R → wf.msc).
  2. Click Outbound Rules → New Rule.
  3. Pick Program.
  4. Program path: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe.
  5. Action: Block the connection.
  6. Profile: Domain + Private + Public (all).
  7. Name: Block Edge Update.
  8. Create. Edge can’t reach Microsoft’s update servers.
  9. For full block: also create rule for MicrosoftEdgeUpdateOnDemand.exe and MicrosoftEdgeUpdateOnDemandm.exe.
  10. For checking: in Edge, edge://settings/help — checking for updates will fail.

This is the firewall route.

Method 3: Disable via task scheduler

For comprehensive disable.

  1. Open Task Scheduler (Win+R → taskschd.msc).
  2. Navigate to Task Scheduler Library → expand folders.
  3. Find Edge-related tasks (usually in Microsoft Edge folder or root):
    • MicrosoftEdgeUpdateTaskMachineCore
    • MicrosoftEdgeUpdateTaskMachineUA
    • MicrosoftEdgeUpdateTaskUserS-… (per-user tasks)
  4. Right-click each → Disable.
  5. Combined with disabled services from Method 1, this is comprehensive.
  6. Edge won’t check for updates via any automatic mechanism.
  7. To re-enable later: right-click → Enable. Then start services again.
  8. For per-user tasks: appear once user logs in. Disable for each user separately, or run a script that disables for all users.

This is the comprehensive disable.

How to verify the fix worked

  • Services tab: edgeupdate / edgeupdatem show Status = Stopped, Startup type = Disabled.
  • Task Scheduler: MicrosoftEdgeUpdate* tasks show Status = Disabled.
  • Edge: edge://settings/help — doesn’t auto-check (or shows error if services disabled).
  • Edge version stays at current version across days.

If none of these work

If updates persist: Microsoft pushed update via different channel: rare. Check Task Scheduler for new Edge tasks. Disable. For corporate-managed Edge: Intune / WSUS may push updates. IT must change policy. For Edge re-enabling services on update: post-update, services may re-enable. Re-disable manually each update cycle. For Windows Update bundling Edge: rare; Edge is separate. Block at firewall level (Method 2). For getting security patches manually: at microsoft.com/en-us/edge → download installer → install. Force update on your schedule. For switching browsers entirely: install Chrome / Firefox / Brave. Disable Edge as default browser. For preserving an old Edge version: copy C:\Program Files (x86)\Microsoft\Edge\Application\[version] folder. Restore if updates somehow apply.

Bottom line: Services.msc → disable edgeupdate and edgeupdatem services. Task Scheduler → disable Edge update tasks. Firewall outbound block on MicrosoftEdgeUpdate.exe for extra firmness.

ADVERTISEMENT