Fix Edge Auto-Updates Despite Disable Setting on Windows 11

Quick fix: Edge has multiple update mechanisms. Disabling one (service) doesn’t stop the others. Disable all: Services → stop and disable edgeupdate, edgeupdatem, EdgeElevation. Task Scheduler → disable all MicrosoftEdgeUpdate* tasks. Add Windows Defender Firewall outbound rule blocking MicrosoftEdgeUpdate.exe. After all three layers, updates won’t apply.

You disabled Edge auto-update in Settings or via service, but Edge updates anyway. Cause: Edge has redundant update mechanisms — the disabled-Edge-service is bypassed by scheduled tasks or downloaded-then-applied-on-restart logic. Block at all layers.

What causes this

Microsoft Edge has three update paths:

• Edge Update services: edgeupdate (active), edgeupdatem (medium-priority).
• Scheduled tasks: MicrosoftEdgeUpdateTaskMachine*, MicrosoftEdgeUpdateTaskUser*.
• Edge process itself: when Edge runs, it checks for updates in background.

Disabling one path doesn’t block others. Comprehensive block requires all three.

Method 1: Disable services, tasks, and firewall together

The standard route.

1. Disable services:
   • Open services.msc.
   • Find Microsoft Edge Update Service (edgeupdate). Right-click → Properties → Startup type: Disabled. Stop.
   • Find Microsoft Edge Update Service (edgeupdatem). Same.
   • Find Microsoft Edge Elevation Service. Set to Disabled.
2. Disable scheduled tasks:
   • Open taskschd.msc.
   • Task Scheduler Library → find MicrosoftEdgeUpdateTaskMachineCore, MicrosoftEdgeUpdateTaskMachineUA.
   • Right-click each → Disable.
   • Look for any MicrosoftEdgeUpdateTaskUser* tasks. Disable too.
3. Add firewall block:
   • Open wf.msc (Windows Defender Firewall with Advanced Security).
   • Outbound Rules → New Rule.
   • Pick Program. Path: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe.
   • Action: Block the connection.
   • Profile: all (Domain, Private, Public).
   • Name: Block Edge Update.
4. Reboot. Edge no longer auto-updates.

This is the comprehensive block.

Method 2: Group Policy for Edge specifically

For policy-based approach.

1. Download Edge for Business ADMX templates from microsoft.com/edge/business/download.
2. Copy ADMX to C:\Windows\PolicyDefinitions\ and language files to language subfolder.
3. Open gpedit.msc.
4. Navigate: Computer Configuration → Administrative Templates → Microsoft Edge Update.
5. Find Auto Update → Update policy override default. Set to Disabled (means updates blocked).
6. Or per-channel: Update policy override for Microsoft Edge (Stable). Set to Updates disabled.
7. Apply. gpupdate /force.
8. For corporate environments: deploy via Intune Configuration Profile, group policy templates.
9. For Home edition: registry equivalent:

   HKLM\SOFTWARE\Policies\Microsoft\EdgeUpdate
   DWORD: UpdateDefault = 0  ; 0=disabled

This is the policy route.

Method 3: Permission-based block

For belt-and-suspenders.

1. Even with all the above, Edge could potentially update via fallback. Make sure Edge Update folder can’t be written.
2. Open File Explorer. Navigate to C:\Program Files (x86)\Microsoft\EdgeUpdate.
3. Right-click folder → Properties → Security tab.
4. Click Edit. Pick SYSTEM in users list.
5. Untick Write and Modify permissions for SYSTEM.
6. Apply. Confirm warnings.
7. Edge update can’t write to its own folder, so updates fail.
8. Caveat: this is aggressive. Edge updates that ship via Windows Update may bypass. Test thoroughly.
9. To revert: re-enable permissions or take ownership and grant SYSTEM Full Control.
10. For chronic future-proof block: combine Methods 1, 2, and 3.

This is the deepest block.

How to verify the fix worked

• Open Edge → edge://settings/help. After all blocks: page should show error or stuck checking.
• Services tab: Edge Update services Stopped, Disabled.
• Task Scheduler: Edge Update tasks Disabled.
• Edge version stays at current build over time (test for 1-2 weeks).
• Windows Update doesn’t push Edge updates.

If none of these work

If Edge still updates: Re-enable check: Microsoft pushes update, services re-enabled. Re-disable. For Windows Update bundling Edge: rare; usually separate. Watch Windows Update history for Edge entries. For corporate-managed PCs: WSUS pushes Edge. IT manages. For Edge installed via winget: winget pin add Microsoft.Edge blocks winget from upgrading. For specific build version: install via offline installer from microsoft.com/edge/business/download. For dropping Edge entirely: use Chrome / Firefox / Brave. Set as default. Hide Edge: Get-AppxPackage Microsoft.MicrosoftEdge | Remove-AppxPackage (in 24H2+, may not remove all). For chronic Edge popping back: Microsoft re-installs via Windows Update. Accept reality and update on your schedule.

Bottom line: Disable Edge Update services, scheduled tasks, AND add firewall block. Plus Group Policy / Edge for Business ADMX for managed environments. Layered block prevents all update paths.