Share via

How to set the Group Policy on DC Stop the Clients upgrade to 24H2，But need update monthly Security patches.

Anonymous
2024-12-12T02:38:51+00:00

Big man：

 As the title.

  I need your help。
Windows for business | Windows Server | Devices and deployment | Set up, install, or upgrade

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-12-12T07:18:29+00:00

    Hello Handsome Zhou,

    thank you for posting on the Microsoft Community Forums.

    To set the Group Policy on DC to stop clients from upgrading to 24H2 but still allow monthly security patches, you can follow these steps:

    1. Open the Group Policy Management Console on your DC.
    2. Create a new Group Policy Object (GPO) or edit an existing one that applies to the clients you want to target.
    3. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
    4. Locate the policy "Configure Automatic Updates" and enable it.
    5. Set the "Configure automatic updating" option to "3 - Auto download and notify for install".
    6. Set the "Allow automatic updates immediate installation" option to "Disabled".
    7. Set the "Specify deadline before auto-restart for update installation" option to "Enabled" and set the deadline to a time that is convenient for your clients.
    8. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business.
    9. Locate the policy "Select the target Feature Update version" and enable it.
    10. Set the "Target Feature Update version" option to "20H2".
    11. Click "OK" to save the changes.

    These settings will prevent clients from upgrading to 24H2 automatically but still allow monthly security patches to be installed. Clients will be notified when updates are available, but they will not be automatically installed until the user initiates the installation.

    Hope it helps.

    Best regards,

    Lei

    1 person found this answer helpful.
    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Anonymous
    2024-12-17T00:51:01+00:00

    Thanks for your reply.

    I can’t find the policy："Select the target Feature Update version" On DC Server

    But my clients could find this policy.

    What could I do next.

    Thanks.

    0 comments