Skip to content

How to roll back Windows updates

Brock Bingham candid headshot
Brock Bingham|Updated February 17, 2026
how to roll back windows updates
how to roll back windows updates

TL;DR: If a Windows update breaks something, you can usually uninstall it through Settings > Windows Update > Update history > Uninstall updates (Windows 11) or via the Control Panel. For bulk removals, use PowerShell or deploy a script with PDQ. Just remember: Not all updates can be removed, and if you don’t pause or block the patch, Windows may reinstall it automatically.

If a Windows update breaks printing, networking, or application compatibility, you may need to roll back the update quickly. While Microsoft updates improve security, problematic patches (looking at you, KB5000808 and KB5000802) can disrupt production environments and require immediate removal.

Before you start: A quick Windows 11 reality check

If you're running Windows 11 (and let's be honest, you probably are by now), Microsoft prefers that you remove updates through the Settings app, not the Control Panel. The Control Panel method still works in many cases, but it’s slowly becoming the “legacy” route.

Also worth noting: Not every update can be removed. Some servicing stack updates and superseded cumulative updates are permanent. If Windows won’t let you uninstall something, it’s not you — it’s Microsoft.

How to uninstall Windows updates using the Settings app

For most Windows 11 devices, this is the fastest way to roll back an update.

  1. Click Start > Settings.

  2. Go to Windows Update.

  3. Click Update history.

  4. Scroll down and select Uninstall updates.

  5. Find the update you want to remove and click Uninstall.

  6. Restart your device if prompted.

If the update isn’t listed here, it may not be removable ... or it may have already been replaced by a newer cumulative update.

How to uninstall Windows updates using the Control Panel

Uninstalling or rolling back updates using the Control Panel is pretty straightforward. The process hasn’t changed much over the years. This method works for both Windows 10 and Windows 11.

1. Click the search button and enter Control Panel into the search field.

2. Click on the Control Panel application.

Windows Start menu search showing Control Panel selected from results.

3. In the Control Panel, click Uninstall a program.

Control Panel home screen with Programs option highlighted in Category view.

4. Click View installed updates.

Programs and Features window with View installed updates selected in Control Panel.

5. Select the update you need to remove and click Uninstall.

Installed Updates window showing Security Update for Microsoft Windows KB5014697 selected for uninstall.

6. If you receive a prompt asking if you are sure you want to uninstall the update, click Yes. You may need to restart your computer after removing an update.

Why won’t Windows let me uninstall this update?

Good question.

Some updates can’t be removed, including:

  • Servicing Stack Updates (SSUs)

  • Updates that have been superseded by a newer cumulative update

  • Feature updates outside the rollback window (typically 10 days by default)

If you're trying to roll back a major feature update (for example, Windows 11 24H2 back to 23H2), you’ll need to try:

Settings > System > Recovery > Go back

And yes, that option disappears after the rollback window expires unless you’ve extended it via policy.

How to uninstall Windows updates using PowerShell

PowerShell is the tool of choice for system administrators, and for a good reason. There’s not much that PowerShell can’t do these days. It’s particularly good at simplifying repetitive tasks. In this example, we’ll use PowerShell to remove multiple updates simultaneously.

Here’s that PowerShell script:

#Return all packages with the ReleaseType "Update" $TotalUpdates = Get-WindowsPackage -Online | Where-Object{$_.ReleaseType -like "*Update*"} #Set the KB number you wish to uninstall here. More KBs can be added by appending "|.*KB#######.*" (no spaces around the pipe and not including quotes) before the closing quotes $Updates = ".*KB#######.*|.*KB#######.*|.*KB#######.*" #Iterates through the returned updates foreach ($Update in $TotalUpdates) { #Gets the PackageName to expand package information, then matches the KB number from the update description, then removes the update. Get-WindowsPackage -Online -PackageName $Update.PackageName | Where-Object {$_.Description -Match $Updates} | Remove-WindowsPackage -Online -NoRestart }

This PowerShell script allows you to enter the KB numbers of the updates you want to remove, and then it silently removes them. You can add as many or as few KB numbers as needed. Keep in mind that while this script runs silently, the updates may not be entirely removed until you restart the computer.

How to deploy the PowerShell script using PDQ Connect

To remove a Windows update across multiple devices, deploy the PowerShell script with PDQ Connect.

ConnectIcon CTA

Easily run PowerShell scripts on remote devices

Need to run your awesome PowerShell scripts on remote devices? PDQ Connect can easily execute PowerShell scripts on any managed device with an active internet connection. 

1. Open PDQ Connect, go to Packages, then click Create Package.

PDQ Connect Packages view with Create package button highlighted.

2. Enter a package name in the Name field.

3. Click Add install step > Add script step.

PDQ Connect package editor with Add script step menu expanded under Windows tab.

4. Enter the script into the PowerShell window. Make sure to add the KB numbers for the updates you want to remove to the script.

PDQ Connect PowerShell script step showing KB update numbers entered for uninstall.

5. Click Save when you are finished.

6. Check the newly created package, click Deploy.

PDQ Connect Packages list showing Rolllll it back package selected for deployment

7. Select your targets, and click Deploy again.

PDQ Connect Create deployment window with search devices field and Deploy button highlighted.

Whenever you need to remove a different update, simply update the package with the appropriate KB number and redeploy it. This makes it easy to respond quickly if a problematic patch slips past testing and reaches production.

How to deploy the PowerShell script using PDQ Deploy

Now, here’s how to deploy our PowerShell script across your network using PDQ Deploy.

DI WhiteBG

Love PowerShell? Then you'll love PDQ Deploy & Inventory.

Deploy custom scripts in minutes. Try it for yourself for 14 days.

1. With PDQ Deploy open, click New Package.

PDQ Deploy console home screen with New Package button highlighted.

2. Enter a package name in the Name field.

3. Click New Step > PowerShell.

PDQ Deploy package editor with New Step menu open and PowerShell step selected.

4. Enter the script into the PowerShell window. Make sure to add the KB numbers for the updates you want to remove to the script.

PDQ Deploy PowerShell step showing KB numbers configured for Windows update removal.

5. Click Save when you are finished and close the package creation window.

6. Right-click on the newly created package and click Deploy Once.

PDQ Deploy Deploy Once window showing target computers selected and Deploy Now button highlighted.

Anytime you need to roll back an update, you can modify this package with the KB number you need to remove and redeploy it. Perfect for the next time your test environment doesn’t catch a buggy update before it makes it out to your production environment!

Important: Windows may reinstall the update

Uninstalling an update doesn’t always mean you’re done.

If you don’t pause or block the update, Windows Update may simply reinstall it during the next scan cycle.

To prevent that, you may need to:

  • Pause updates temporarily

  • Decline the update in WSUS

  • Adjust your Intune or Windows Update for Business policies

  • Use update rings strategically

Otherwise, you might find yourself in a very frustrating uninstall → reinstall loop.

PDQ and PowerShell have you covered

Don’t let a faulty patch ruin your day. PDQ and PowerShell can get your environment back in shape in no time. PDQ can also help you roll back third-party applications, like Chrome, Java, Firefox, and many more.

If you’re not already using PDQ, start free trial today and take it for a spin. You’ll be deploying packages and managing your devices in no time.

Brock Bingham candid headshot
Brock Bingham

Brock Bingham is a systems administrator with 15 years of experience managing endpoints and servers, with a strong focus on automation, patching, security, and maintaining stable environments at scale. After years of hands-on IT work, he now creates content and teaches, helping other admins learn through practical, real-world guidance.

Related articles