If your computer running Windows 10 meets the minimum requirements for Windows 11, Microsoft will offer you a free upgrade to the newer OS version. You can upgrade your OS version directly through Windows Update. Make sure that you see the message “Upgrade to Windows 11 is ready — and it’s free
“. You can choose whether you want to “Download and install Windows 11” or “Stay on Windows 10 for now.”
Microsoft is not going to force upgrade all computers running Windows 10 to Windows 11 so far. However, it may change at any time. In this guide, we’ll show how to disable the auto upgrade to Windows 11.
In Windows 10, you can specify a target version (build number) that will be used on your computer and not automatically updated. You will receive all security updates for your target Windows version until the end of support. After that, you will have to set a new target build, otherwise, Windows will be automatically updated to the latest available build within 60 days.
You can configure the target version using GPO or through the registry:
- Open the Local Group Policy Editor (
gpedit.msc
); - Go to Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Windows Update for Business;
- Enable the option Select the target Feature Update version (this GPO option is available in Windows 10 2004 and newer). Specify the target Windows version and the build number you want to use;
- Enter
Windows 10
in Which Windows product version would you like to receive feature updates for; - Set a target Windows 10 build number in Target Version for Feature Updates. For example,
22H2
;If you specify a newer Windows 10 version than you currently have, the system will be automatically updated to the target build. If the target version is no longer supported or is earlier than the current one, the value of this policy will be ignored. - Save the changes and restart your computer to update GPO settings.
You can also disable the upgrade to Windows 11 through the registry (similar to the GPO setting described above). Apply the following REG file on your computer:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "ProductVersion"="Windows 10" "TargetReleaseVersion"=dword:00000001 "TargetReleaseVersionInfo"="22H2"
You can create these registry parameters manually with regedit.exe, deploy registry keys to domain computers using GPO, or create them using PowerShell:
if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate')){New-Item 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate'}
Set-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' -Name TargetReleaseVersion -value '00000001' -Type DWord –Force
Set-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' -Name "ProductVersion" -value 'Windows 10' -Type String -Force
Set-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' -Name TargetReleaseVersionInfo -value '22H2' -Type String -Force
Then your computer will block automatic update to Windows 11. If you decide to upgrade your operating system, specify Windows 11 and the number of the current build you want to make a target. If you completely disable the GPO setting and remove the registry options, your Windows will switch to the normal release update cycle.
If your devices get updates from an internal Windows Server Update Services (WSUS) server, you can simply disable receiving Windows 11 updates in the available product settings (WSUS console -> Options -> Products and Classifications). Make sure that Windows 11 option is not checked.
1 comment
🛑 Buggy Windows Update starts automatically ‘upgrading’ Windows 2022 servers to Windows Server 2025
Some enterprise customers have experienced their Windows Server 2022 servers being automatically upgraded to Windows Server 2025 without the necessary license or approval from system administrators.
☑️ KB5044284, if incorrectly targeted on Windows Server 2019 or 2022 machines, will result in an unwanted OS upgrade to the recently released Windows Server 2025. After upgrading to WS2025, the OS license status changes to “System not activated”. Uninstalling the update will not roll back to a previous version of the operating system. The previous OS version can only be restored from a backup.
☑️ This issue has been experienced by customers who use third-party solutions to automate the process of installing Windows security updates and patches (including when using WSUS).
🎯 To prevent unauthorized upgrades to Windows Server 2025, block the automatic installation of the KB5044284 update on hosts that are running Windows Server. It is also recommended to set the ProductVersion and TargetReleaseVersionInfo registry parameters to prevent further unwanted OS upgrades on server systems.
This method is used to prevent an automatic upgrade from Windows 10 to Windows 11.
✅ For example, to lock the current version on Windows Server 2022 host and prevent it from being upgraded, run the following command:
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v TargetReleaseVersion /t REG_DWORD /d 1
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v ProductVersion /t REG_SZ /d “Windows Server 2022”
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v TargetReleaseVersionInfo /t REG_SZ /d “21H2”
For Windows Server 2019, specify the correct version and build number 1809.
🤦♂️ This issue occurs because the Windows Server 2025 Feature Update (KB5044284) is misclassified by Microsoft as a security update, which causes it to be automatically installed by patch management tools.