Stop users from upgrading Windows 11 manually but they should keep on getting Windows updates

Question

Stop users from upgrading Windows 11 manually but they should keep on getting Windows updates

Tathagata Bhattacharya 125

We have some users and field engineers who has admin rights. We have prepared Windows 11 OS update through In place upgrade. We want to make sure no one else should install the Windows 11 manually.

What is the best possible way to do it.

Please help.

1 answer

Your answer

Answer 1

Crystal-MSFT 53,981 Microsoft External Staff

@Tathagata Bhattacharya, Thanks for posting in Q&A. In Intune, we can configure Feature update policy and select a Windows 10 version that you want devices to remain at, Here is a link with more details for your reference:

https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates

The registry key TargetReleaseVersion under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate to block windows 11 updates when user check for updates.

https://allthings.how/how-to-stop-windows-11-update-from-installing-on-your-windows-10-pc/

Note: Non-Microsoft link, just for the reference.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Tathagata Bhattacharya 125 Reputation points

2024-02-13T06:58:25.95+00:00

We want to prevent users from upgrading OS however, we should be able to push the in place upgrade.

If we change this registry will any one who has local admin rights can install the updates again?
Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2024-02-13T07:24:13.6966667+00:00

@Tathagata Bhattacharya, Thanks for the reply. After researching more, I find the registry key is for when users check for updates in the Windows Update settings, Microsoft will not push Windows 11 upgrade to you.

For local admin, it can still upgrade to windows 11 by install the windows setup file. The only method I can think is remove the user admin permission.
Tathagata Bhattacharya 125 Reputation points

2024-02-13T07:28:30.4566667+00:00

@Crystal-MSFT Thank you for your response. It will not be possible to remove the admin permission.

What if we implement the registry, then no one should be able to install the upgrade right?

Also after we implement the registry will In place upgrade work?
Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2024-02-13T07:33:59.44+00:00

@Tathagata Bhattacharya, Thanks for the reply. I am afraid not. For the registry key, based on my understanding, it can't block the user who has Admin permission on the device to install the windows 11 feature update directly. It can only block the update in "check for updates".

Share via

Stop users from upgrading Windows 11 manually but they should keep on getting Windows updates

1 answer

Your answer