How to Fix 'Windows Update Says Installation is Blocked'

If your Windows Update installation is blocked by policy, it usually indicates that a group policy setting or security software is preventing the updates from being applied. Fortunately, there are several effective steps you can take to resolve this issue. By checking your group policy settings, disabling conflicting software, using the Windows Update Troubleshooter, and restoring default Windows Update settings, you can typically overcome this problem.

What does 'installation is blocked by policy' mean?

The message 'installation is blocked by policy' indicates that your Windows Update process is restricted by group policy settings. These settings can be enforced by system administrators in organizational environments or may be due to security software on personal devices. Such restrictions can prevent critical updates from installing, impacting system security and performance.

How to check group policy settings

To check if group policy settings are affecting your Windows Update, follow these steps:

1. Press Windows + R to open the Run dialog.
2. Type gpedit.msc and hit Enter. This opens the Group Policy Editor.
3. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
4. Look for any policies set to 'Enabled' that might restrict updates. Common policies include 'Configure Automatic Updates' and 'Remove access to use all Windows Update features'.

If you find any restrictive policies, you can set them to 'Not Configured' or 'Disabled'.

Steps to disable conflicting software

Antivirus software or firewalls may interfere with Windows Updates. To temporarily disable these:

1. Open your antivirus software.
2. Navigate to the settings or protection section.
3. Look for an option to disable real-time protection or the entire software temporarily.
4. If you have a firewall, access it from the Control Panel and turn it off or reduce its protection level.

Be sure to re-enable these protections after completing your updates.

Using the Windows Update Troubleshooter

Windows includes a built-in troubleshooter that can help identify and fix update issues. To use it:

1. Open the Settings app by pressing Windows + I.
2. Go to Update & Security.
3. Click on Troubleshoot in the left pane.
4. Select Additional troubleshooters.
5. Click on Windows Update, then click Run the troubleshooter.

Follow the prompts to detect and resolve any issues related to Windows Update.

Restoring default Windows Update settings

If the previous steps didn’t resolve the issue, resetting your Windows Update settings to their defaults may be necessary. Here’s how:

1. Open Command Prompt as Administrator. Search for 'cmd' in the Start menu, right-click it, and select 'Run as administrator'.
2. In the Command Prompt, type the following commands one by one, pressing Enter after each:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

3. After running these commands, close Command Prompt and check for updates again through the Settings app.

This process resets the Windows Update components, which can resolve many underlying issues.

Conclusion

If you've followed these steps and still experience issues, consider checking Microsoft’s official support site for the latest troubleshooting tools and resources tailored to your version of Windows. Keeping your system updated is crucial for security and performance, so addressing these errors promptly is important.