Score:1

Block Windows 11 via GPO without specifying sub-version

de flag
My1

as shown in here

Group Policy for Blocking Windows 11 Upgrade Prompts

Microsoft allows blocking the Windows 11 Update via a GPO, howver as far as it seems you have to specify both the main (e.g. Windows 10) and sub-version (e.g. 21H2) of windows, can the field for the subversion be left empty or anything else be done so it properly keeps updating the sub version but stays on Windows 10.

After all you kinda have to have this policy as microsoft thought it's a great idea that non-Admins can be allowed running a Windows Upgrade to a whole new OS (which it isn't), so you have to have that setting in order to prevent users from just accidentially installing windows 11.

cn flag
You could not deploy Windows 11.
de flag
My1
@GregAskew We dont actively deploy Windows 11 in the first place, but Windows Update just says it's available and lets users install it without needing admin rights
cn flag
I know you don't. But if you did control what is deployed to your endpoints, you could prevent it, instead of hoping for a setting that does not exist.
de flag
My1
isnt that the point of the policy to control what the windows is getting? or what do you mean control what I deploy as MS is clearly taking the control away considering we have deployed windows 10 and the users can just go to win11 without permission
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.