Intune: How to prevent Windows 11 upgrade

Question

Hi All,

What is the best way to prevent endpoints from upgrading to Windows 11? We now use the following settings:

Update rings for Windows 10 and later:

• SAC
• Feature deferral: 3 days
• Quality deferral: 0 days

Feature updates for Windows 10 and later (Preview):

• Feature update version: 21H1
• Assigned to: All W10 Devices (dynamic group)

Will this prevent systems from upgrading to Windows 11?

Answer 1

@Joey Vldn , Agree with the above answers, it will not automatically upgrade to Windows 11 unless an administrator explicitly configures a Target Version using the TargetReleaseVersion setting using a Windows CSP, a feature update profile in Intune, or the Select target Feature Update version setting in a group policy.

https://learn.microsoft.com/en-us/windows/whats-new/windows-11-prepare#cloud-based-solutions

From your configuration, the windows will stays at version 21H1

Hope it can help.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

We just had a user get prompted to update to Windows 11 even through his device is enrolled in Intune and i have a Feature Update set to 21H2. Any ideas why this would be happening?

Thank you in advance.!

-Mike