How to block the Windows 11 upgrade

Brock Bingham candid headshot
Brock Bingham|Updated September 14, 2023
Illustration of computer desk and monitor with PDQ logo
Illustration of computer desk and monitor with PDQ logo

While Microsoft might be super excited for you to embrace Windows 11, you may not be as enthusiastic about the "upgrade." And that's okay. A wise sysadmin once told me never to adopt a new operating system (OS) until it's had a chance to mature — the exception being Windows 7, where we collectively abandoned Vista as quickly as possible.

While I've had a relatively smooth experience with Windows 11, others haven't been so lucky. Whatever your reasoning, delaying or blocking the Windows 11 update might be the best option for you or your organization. If you've decided to postpone the transitions to Windows 11, we've got you covered. Here are the various ways to block the Windows 11 upgrade.

How to block Windows 11 depending on your Windows version

Blocking the Windows 11 upgrade is easy, right? Right? Well, that depends. While I wouldn't consider it difficult, it probably depends on your level of experience. Thankfully, we'll actually cover a few different methods to block the Windows 11 upgrade, including:

  • Registry Editor

  • Group Policy

  • Windows Server Update Services (WSUS)

The method you should use largely depends on the version of Windows you use. While Pro, Education, and Enterprise users can utilize any of the mentioned methods, Home users can block the Windows 11 upgrade only by modifying the registry.

How to block the Windows 11 upgrade with the Registry Editor

If you're running Windows 10 Home edition (or you simply enjoy editing the registry because you have a wild side), this method is for you. This process helps postpone the Windows 11 upgrade for as long as possible.

Improperly modifying the registry can seriously corrupt your operating system if you're unfamiliar with what you're doing. With that said, if you consider yourself a Windows wizard and are comfortable with the risks, then let’s get to work!

  1. Fire up the Registry Editor by typing regedit in the Windows search field.

  2. Click on Registry Editor.

    block win11 4

  3. If the User Account Control window launches, click Yes.

  4. Navigate to HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows > WindowsUpdate.

  5. Double-click ProductVersion.

    block win11 6
  6. Enter Windows 10, then click OK.

    block win11 7

  7. Double-click on TargetReleaseVersion, then enter the value 1. Click OK.

    block win11 8

  8. Double-click on TargetReleaseVersionInfo and enter 22H2, then click OK.

    block win11 9

  9. Your finished registry edits should resemble this:

    block win11 10

If you don't see the WindowsUpdate registry key or are missing these registry values, you’ll need to create them manually and then set their values.

How to block Windows 11 with Group Policy

Blocking Windows 11 with Group Policy is easy, though there's a catch. This option is only available to Windows 10 Pro, Education, and Enterprise users. Windows 10 Home users need to block Windows 11 using the Registry Editor.

Here’s how to block the Windows 11 upgrade using Group Policy.

  1. In the search field, type gpedit.

  2. Click Edit group policy.

    block win11 1

  3. In the Local Group Policy Editor, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Updates for Business.

  4. Double-click Select the target Feature Update version.

    block win11 2

  5. Select Enabled.

  6. Enter Windows 10 as your product version.

  7. Enter 22H2 as your target version.

    block win11 3

  8. Click Apply, then close the Group Policy editor window.

To configure this setting for a domain, you'll need to utilize the Group Policy Management Console on a Windows server or a device running Remote Server Administration Tools (RSAT).

Configuring WSUS to block Windows 11

If you've already got your network configured to download updates via WSUS, then you most likely don't have to change anything. Unless you've modified the products and classifications in WSUS to include Windows 11, you shouldn't receive the Windows 11 upgrade. If you're unsure whether this change has been made, here's how to find out.

  1. Launch WSUS.

  2. In the navigation tree, expand your server, then click Options.

  3. Click Products and Classifications.

    block win11 11

  4. Scroll down the list and see if Windows 11 is checkmarked.

    block win11 12

  5. If Windows 11 isn't checked, you don't need to worry about accidentally distributing the upgrade to your managed devices. If it is selected, uncheck it and save your changes.

When does Windows 10 support end?

Microsoft announced that Windows 10 22H2 will be the last version of Windows 10, and the end of support date for the aging OS is October 14, 2025. This seems like one of those "get your affairs in order" moments as we near the end of a decade with the (mostly) well-loved operating system. Sure, Windows 10 wasn't perfect, but after the atrocity we call Windows 8, it didn't need to be perfect. It just needed to work.


If you're looking for a device management solution that just works, give PDQ a try. PDQ Deploy & Inventory simplify on-prem computer management, while PDQ Connect utilizes an agent-based approach to manage all your endpoints, including those elusive remote devices.

Brock Bingham candid headshot
Brock Bingham

Born in the '80s and raised by his NES, Brock quickly fell in love with everything tech. With over 15 years of IT experience, Brock now enjoys the life of luxury as a renowned tech blogger and receiver of many Dundie Awards. In his free time, Brock enjoys adventuring with his wife, kids, and dogs, while dreaming of retirement.

Related articles