We are an MSP and support many client computers, most of which are Azure AD based (not local server domain joined). We want to block Win11 but keep getting Win10 updates. We may want to upgrade some of them to Win11 later, after the dust settles. I read about the registry setting that can be added, but I want to make sure that setting it does not block future Win10 updates. Does anyone have further information about the reg setting, or another suggestion?
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
How do I block Win 11 from installing on client computers
Home » Forums » AskWoody support » Windows » Windows 11 » Questions about Windows 11 » How do I block Win 11 from installing on client computers
- This topic has 8 replies, 4 voices, and was last updated 3 years, 6 months ago.
Tags: Windows11 BlockWindows11
Viewing 2 reply threadsAuthorReplies-
Susan Bradley
Manager -
DavisF
AskWoody PlusSeptember 28, 2021 at 12:07 pm #2392339Thank you Susan. Do you know how Microsoft will handle the Win11 upgrade? Will it push it out to users who have an acceptable computer, or will it just give them an obvious option to upgrade? If users just reboot regularly to install the automatically set Win10 updates, are they at risk of getting inadvertently updated to Win11?
-
Susan Bradley
ManagerSeptember 28, 2021 at 12:44 pm #2392346It will be an obvious offering. Obvious to you and I, but you know how some end uses swear they didn’t click on anything.
From everything I’ve seen it shouldn’t be pushed/shoved, merely offered. That said I’m putting the block in place here just in case.
Susan Bradley Patch Lady/Prudent patcher
-
-
Susan Bradley
ManagerSeptember 28, 2021 at 11:14 pm #2392430Cloud-based solutions
- If you use Windows Update for Business policies, you will need to use the Target Version capability rather than feature update deferrals to upgrade from Windows 10 to Windows 11. Feature update deferrals are great to move to newer versions of your current product (for example, Windows 10, version 20H2 to 21H1, but do not enable you to move between products (Windows 10 to Windows 11).
- In Group Policy, Select target Feature Update version has two entry fields after taking the 9/1/2021 optional update (KB5005101) or a later update: Product Version and Target Version.
- The product field must specify Windows 11 in order for devices to upgrade to Windows 11. If only the target version field is configured, the device will be offered matching versions of the same product.
- For example, if a device is running Windows 10, version 2004 and only the target version is configured to 21H1, this device will be offered version Windows 10, version 21H1, even if multiple products have a 21H1 version.
Susan Bradley Patch Lady/Prudent patcher
- If you use Windows Update for Business policies, you will need to use the Target Version capability rather than feature update deferrals to upgrade from Windows 10 to Windows 11. Feature update deferrals are great to move to newer versions of your current product (for example, Windows 10, version 20H2 to 21H1, but do not enable you to move between products (Windows 10 to Windows 11).
-
stormbirdd
AskWoody PlusOctober 21, 2021 at 1:35 pm #2397126Along these lines: we definitely do not want anyone in the company (beyond testers) having any ability to install Windows 11. We use a 3rd-party product for patch management, and it utilizes Windows Update. What this means is that users do not see offers for Windows Update. Additionally, we have pushed the registry change that limits Windows 10 to upgrading past 20H2.
What we have found, however, is that Windows 11 is being offered anyway to people AND if the users go to the site offered, Windows 11 downloads and installs even with the registry block in place.
Have you seen this behavior? Is there anything we can do to prevent it?
-
Susan Bradley
ManagerOctober 21, 2021 at 1:37 pm #2397128You can use the WU group policy setting to remove the Windows update GUI/UI interface on the workstations.
Group Policy User setting: Administrative Templates / Windows Components / Windows Update / Remove access to use all Windows Update features = Enabled.
Susan Bradley Patch Lady/Prudent patcher
-
anonymous
GuestOctober 21, 2021 at 3:11 pm #2397151Thank you. We do not use GPOs here because 50% of our 5500 employees are 100% virtual and everyone is “connected” via Google Business Services rather than machines physically plugged into an intranet (we are all on a Windows domain to be sure, but hundreds of our folks only connect to the domain via cable or VPN a few times a year, so pushing GPOs is… unrewarding).
Is there a registry push instead that would achieve the same thing?
-
Susan Bradley
ManagerOctober 21, 2021 at 3:12 pm #2397153https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsUpdate::RemoveWindowsUpdate
Registry Hive HKEY_CURRENT_USER Registry Path Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate Value Name DisableWindowsUpdateAccess Value Type REG_DWORD Enabled Value 1 Disabled Value 0 Susan Bradley Patch Lady/Prudent patcher
-
-
-
-
Viewing 2 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
A CVE-MITRE-CISA-CNA Extravaganza
by
Nibbled To Death By Ducks
4 hours, 38 minutes ago -
Sometimes I wonder about these bots
by
Susan Bradley
56 minutes ago -
Does windows update component store “self heal”?
by
Mike Cross
17 hours, 36 minutes ago -
Windows 11 Insider Preview build 27858 released to Canary
by
joep517
18 hours, 36 minutes ago -
Pwn2Own Berlin 2025: Day One Results
by
Alex5723
18 hours, 1 minute ago -
Windows 10 might repeatedly display the BitLocker recovery screen at startup
by
Susan Bradley
14 hours, 31 minutes ago -
Windows 11 Insider Preview Build 22631.5409 (23H2) released to Release Preview
by
joep517
21 hours, 18 minutes ago -
Windows 10 Build 19045.5912 (22H2) to Release Preview Channel
by
joep517
21 hours, 19 minutes ago -
Kevin Beaumont on Microsoft Recall
by
Susan Bradley
9 hours, 53 minutes ago -
The Surface Laptop Studio 2 is no longer being manufactured
by
Alex5723
1 day, 5 hours ago -
0Patch, where to begin
by
cassel23
23 hours, 28 minutes ago -
CFPB Quietly Kills Rule to Shield Americans From Data Brokers
by
Alex5723
1 day, 19 hours ago -
89 million Steam account details just got leaked,
by
Alex5723
1 day, 6 hours ago -
KB5058405: Linux – Windows dual boot SBAT bug, resolved with May 2025 update
by
Alex5723
2 days, 3 hours ago -
A Validation (were one needed) of Prudent Patching
by
Nibbled To Death By Ducks
1 day, 18 hours ago -
Master Patch Listing for May 13, 2025
by
Susan Bradley
1 day, 5 hours ago -
Installer program can’t read my registry
by
Peobody
2 hours, 41 minutes ago -
How to keep Outlook (new) in off position for Windows 11
by
EspressoWillie
1 day, 16 hours ago -
Intel : CVE-2024-45332, CVE-2024-43420, CVE-2025-20623
by
Alex5723
1 day, 23 hours ago -
False error message from eMClient
by
WSSebastian42
2 days, 14 hours ago -
Awoke to a rebooted Mac (crashed?)
by
rebop2020
2 days, 23 hours ago -
Office 2021 Perpetual for Mac
by
rebop2020
3 days, 1 hour ago -
AutoSave is for Microsoft, not for you
by
Will Fastie
3 hours, 37 minutes ago -
Difface : Reconstruction of 3D Human Facial Images from DNA Sequence
by
Alex5723
3 days, 4 hours ago -
Seven things we learned from WhatsApp vs. NSO Group spyware lawsuit
by
Alex5723
11 hours, 59 minutes ago -
Outdated Laptop
by
jdamkeene
3 days, 10 hours ago -
Updating Keepass2Android
by
CBFPD-Chief115
3 days, 15 hours ago -
Another big Microsoft layoff
by
Charlie
3 days, 15 hours ago -
PowerShell to detect NPU – Testers Needed
by
RetiredGeek
17 hours, 12 minutes ago -
May 2025 updates are out
by
Susan Bradley
27 minutes ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.