Windows Update Says Some Settings Are Managed by Organization
Seen after a forced update or domain join? We'll show you how to fix it without reinstalling Windows.
You open Windows Update settings and see a message that says "Some settings are managed by your organization." Maybe some update options are grayed out. Or you see a notification you can't click away.
This usually happens right after you install a big update like Windows 10 22H2 or Windows 11 23H2. Or after you used a third-party tool like O&O ShutUp10 or WPD to stop updates. Sometimes it's because your computer was once joined to a company domain or a school network. That leaves behind group policies that Windows still follows even though you don't need them anymore.
What Causes This?
The short answer: leftover registry entries or group policies that tell Windows Update to obey rules from an organization. Even if you're on a home PC now, Windows remembers those rules.
The real fix is to remove those leftover rules. Here's how to do it step by step.
Fix It – Step by Step
-
Open the Group Policy Editor
Press Windows+R, typegpedit.msc, and hit Enter. If you see an error saying Windows can't find gpedit.msc, skip to Step 2 – you're on Windows Home edition. -
Check Computer Configuration
In the left pane, go to:
Computer Configuration > Administrative Templates > Windows Components > Windows Update
Look for any setting that's set to "Enabled" or "Disabled" in the right pane. Stuff like "Configure Automatic Updates" or "Specify intranet Microsoft update service location." If you see anything, double-click it, select "Not Configured," and click OK. Do that for every setting you find. After you change them all, close the Group Policy Editor. -
Open the Registry Editor
Press Windows+R, typeregedit, and hit Enter. Click Yes if UAC asks. -
Delete the offending registry keys
Go to this path in the left pane:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Right-click the WindowsUpdate folder (it's the key, not the whole thing) and select Delete. Click Yes to confirm.
Then go to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
If you see that folder, delete it too. It's usually empty but sometimes holds old settings.
Expected outcome: After you delete them, you'll see the change immediately. But don't close regedit yet. -
Clear the group policy cache
Open a Command Prompt as Administrator. Press Windows+X and choose "Terminal (Admin)" or "Command Prompt (Admin)." Then type:
Press Enter. It won't show any confirmation – that's fine. Then type:RD /S /Q "%WinDir%\System32\GroupPolicyUsers" && RD /S /Q "%WinDir%\System32\GroupPolicy"
Wait until it says "Computer Policy update has completed successfully." Might take a minute.gpupdate /force -
Restart your computer
Don't skip this. A reboot makes sure Windows reloads everything fresh. -
Check Windows Update again
After restart, open Settings > Windows Update. The "Managed by your organization" message should be gone. If it's still there, move to the next section.
What If It Still Shows Up?
Sometimes a third-party program re-adds those policies every time you start Windows. Check these:
- Third-party update blockers: Programs like WPD, O&O ShutUp10, or StopUpdates10. Open that program and disable all "block updates" options. Or uninstall it completely.
- Windows Update Troubleshooter: Go to Settings > System > Troubleshoot > Other troubleshooters > Windows Update and run it. It's not a magic fix, but it clears some stale cache files.
- Check for leftover registry keys again: Open regedit and look at both paths from Step 4. If they came back, something is recreating them. Find that something.
- Reset Windows Update components manually: In Command Prompt as Admin, type the following commands one at a time, pressing Enter after each:
Then reboot.net stop wuauserv net stop cryptSvc net stop bits net stop msiserver ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 catroot2.old net start wuauserv net start cryptSvc net start bits net start msiserver
If none of that works, and you're not on a domain, you might have a hidden Windows Update policy that's stuck in the registry somewhere deeper. In that rare case, a system restore to a point before the error started can save you. Or do a repair install using the Windows Media Creation Tool – that keeps your files but resets system policies.
One last thing: if you're actually on a company or school network, this message is normal. Your IT admin controls updates. Don't delete those policies – you'll break your computer's connection to the update server. Only follow the steps above if you own the PC and it's not managed by anyone else.
Was this solution helpful?