One policy decides how your whole PC - or your whole office - receives updates. Its options are just numbers, 2, 3 and 4. Here is what each number actually does.
Ask ten tutorials about Configure Automatic Updates and you will get the numbers with ten slightly different explanations, some of them a decade old. This page follows Microsoft's own documentation: where the policy lives on Windows 11, what options 2, 3 and 4 each do, who each one suits, and the truthful note about options 5 and 7 that outdated guides still repeat.
The policy path and the three options that matter on Windows 10 and 11, exactly as Microsoft documents them.
Group Policy is available on Pro, Enterprise and Education editions. Windows Home does not include gpedit.msc, and no honest guide should pretend a registry hack is the same thing as supported policy - on Home, the Settings page is your control panel. Second boundary: on a company PC, these policies belong to your IT department. If the policy editor shows settings as managed, changing local copies will lose to the domain policy at the next refresh, as it should.
gpedit.msc and press EnterRun gpupdate /force from an admin terminal if you want the policy to apply immediately instead of at the next background refresh.
With option 2, Windows tells you updates exist and waits. Nothing downloads until you go to the Windows Update page and start it; after download, installation proceeds and you are notified. This is the maximum-control setting, suited to a machine where bandwidth or timing is precious - a site office, a metered connection, a PC that runs long jobs. Its weakness is human: a notification that is easy to ignore becomes an update that is easy to forget, so this option belongs to people who genuinely act on notifications.
Option 3 is the default behaviour and the balanced one. Updates download themselves in the background whenever they are available; you are then notified that they are ready, and installation waits for you. The download cost is paid silently, the install decision stays human. For most Pro-edition users who want policy-level control without policy-level fuss, option 3 plus well-set active hours is the sweet spot.
Option 4 is the office setting. Updates download automatically and install on the schedule you specify in the policy - a day and a time, for example every Sunday at 3 AM. Pair it with active hours and the no-auto-restart-with-logged-on-users policy, and a fleet updates itself in a fixed maintenance window while nobody's work is touched. Its honesty note: a scheduled install on a machine that is asleep or powered off simply happens at the next opportunity, so the schedule is a target, not a guarantee, for laptops that travel.
Older guides list option 5, "allow local admin to choose setting". Microsoft's current documentation states this option is not available in Windows 10 or later - if a tutorial tells you to pick it on Windows 11, the tutorial is out of date. Option 7, "notify for install and notify for restart", exists for Windows Server 2016 and later, not for the desktop editions this guide is about. Knowing what the numbers really are stops you chasing settings your Windows does not have.
Watch each policy option being set and explained in the full video guide.
Watch Full VideoCheck two things. First, whether a domain policy from your organisation overrides the local one - domain policy wins. Second, whether the policy actually applied: run gpupdate /force, then check the Windows Update page for the note that some settings are managed by your organisation, which confirms a policy is in force.
Option 3 for most people - downloads happen automatically, installs wait for your word. Pick option 2 only if your connection or schedule genuinely cannot absorb background downloads, and option 4 if the PC has a predictable quiet window, like a home server that is free every night.
Scripts that bolt the editor onto Home exist, but the result is unsupported and several Windows Update policies are simply not honoured the same way on Home. The honest answer: on Home, use the Settings controls - active hours, restart notifications, pause and metered connections give you most of the practical control anyway.