To troubleshoot unexpected restarts after a Windows update, view the update history via Settings > Windows Update > Update history or by running wmic qfe list brief /format:table in Command Prompt. Identifying recent feature updates or driver installations allows you to uninstall problematic patches, check for known conflicts, and verify system stability before applying future cumulative updates.
Navigating the Modern Update History Interface
Windows 11 has streamlined how users access update logs, moving away from the classic Control Panel applet that many legacy guides still reference. The most accessible method for general users is through the modern Settings application. Open the Start menu and select Settings, then navigate to Windows Update on the left-hand pane. Click on Update history to reveal two distinct sections: Uninstall updates and Update history. The Uninstall updates section provides a quick way to remove the most recently installed feature updates or quality updates if they are causing immediate instability. However, this list is limited and does not show every single patch applied over time. For a comprehensive view of all installed updates, including cumulative updates, driver updates, and optional features, you must look at the full log within the same panel. Scroll down past the uninstall options to see the chronological list of updates. Each entry displays the date installed, the description of the update (such as "Security Update" or "Feature Update"), and its status. This interface helps you correlate the timing of an unexpected restart with specific installation events. If your PC restarted unexpectedly after a specific date, locate that entry to identify the culprit.Using Command Line Tools for Detailed Diagnostics
For advanced troubleshooting or when the Settings app fails to load due to system instability, the command line offers a more robust and detailed view of installed updates. You can use Windows Management Instrumentation Command-line (wmic) to query the operating system for a clean table of all hotfixes and updates. Open Command Prompt as an administrator by searching for it in the Start menu and selecting Run as administrator. Enter the following command to generate a brief list of all installed updates:
wmic qfe list brief /format:tableHotFixID (the KB number), the InstalledOn date, and the Description of each update. This method is particularly useful for scripting or exporting data to a CSV file for analysis using Excel. If you need to filter results for a specific date range, you can pipe the output into further filtering commands, though basic inspection often suffices. Note that wmic is being deprecated in newer builds of Windows 11 in favor of PowerShell, but it remains fully functional and widely supported for this specific diagnostic task. Another alternative is using PowerShell with the Get-Hotfix cmdlet, which provides similar information but in a different object format.
Interpreting the Output for Restart Issues
When analyzing the output, focus on updates installed immediately prior to the onset of restart issues. Look for entries labeled as Feature Update or Service Pack, as these are more likely to cause deep system changes leading to reboots than minor security patches. Driver updates, particularly for graphics cards or storage controllers, are also common suspects. If you identify a specific update causing problems, note itsHotFixID for removal. Be cautious when interpreting dates, as some updates may install silently in the background without user interaction. Cross-referencing the installation date with the first occurrence of the unexpected restart is crucial for accurate diagnosis.
Uninstalling Problematic Updates Safely
Once you have identified the update responsible for the unexpected restarts, the next step is to remove it. You can do this directly from the Settings interface or via the command line. In Settings > Windows Update > Update history, click Uninstall updates at the top of the list. Select the problematic update and confirm the action. The system will guide you through the uninstallation process and typically require a manual restart to complete the removal. Alternatively, you can use thewusa.exe utility from the command line. Run the following command, replacing KBxxxxxx with the actual HotFix ID you identified earlier:
wusa.exe /uninstall /kb:KBxxxxxxPreventing Future Unexpected Restarts
To avoid recurring issues, consider pausing updates temporarily if the problem persists across multiple versions. In Settings > Windows Update, you can choose to pause updates for up to five weeks. This gives you time to investigate deeper issues or wait for Microsoft to release a fix. Additionally, ensure that your device drivers are up to date, as outdated drivers can conflict with new Windows updates. Check your hardware manufacturer's website for certified drivers rather than relying solely on Windows Update for driver installations. Regularly backing up your system creates a restore point, allowing you to revert to a stable state if future updates cause severe instability.Frequently Asked Questions
How do I find out which update caused my PC to restart?
Check the Update history in Settings or usewmic qfe to see installation dates. Correlate the timestamp of the last installed update with the time of the unexpected restart to identify the likely cause.
Can I disable Windows Update completely to stop restarts?
Disabling updates entirely is not recommended as it leaves your system vulnerable to security threats. Instead, use the Pause updates feature in Settings or configure Group Policy to delay updates for a set period while maintaining security monitoring.What should I do if the Update History page is blank or errors?
If the UI fails, use thewmic qfe list brief /format:table command in Command Prompt as an administrator. This bypasses the graphical interface and queries the registry directly for installed hotfixes.