How to Block Windows 11 from Installing (2026 Guide)

Windows 11 brought a redesigned interface, better security, and improved performance, but not every user is ready—or able—to make the switch. Hardware incompatibility, software dependencies, or simply a preference for the familiar Windows 10 workflow are all valid reasons to stay put. However, as of early 2026, Windows 10 has reached its official end-of-support date (October 14, 2025), which changes the stakes. Blocking Windows 11 now means accepting that your current OS will no longer receive free security patches. This guide covers every reliable method to prevent Windows 11 from installing—along with the practical trade-offs you need to know.

Why You Might Want to Block Windows 11

Before diving into the steps, it helps to understand the common motivations. This background also ensures you pick the right method for your situation.

• Hardware limitations – Many older PCs lack TPM 2.0 or a compatible CPU, making a seamless upgrade impossible without workarounds.
• Mission-critical software – Proprietary business apps, legacy medical or industrial tools, or specific drivers may not yet support Windows 11.
• Stability concerns – Early adopters sometimes encountered driver or gaming performance issues; even now, some users prefer to wait for a fully mature ecosystem.
• User interface preference – The centered Start menu and changed taskbar remain polarising among power users.
• Update fatigue – Large feature updates can disrupt workflows; a known, stable environment can be more productive.

Whichever your reason, the methods below give you control—but weigh the security cost carefully.

Method 1: Registry Editor (Target a Specific Windows Version)

The most direct way to prevent Windows 11 from appearing as an upgrade is to tell Windows Update to stay on Windows 10 via a registry value.

1. Press Windows + R, type regedit, then click OK. Always back up the registry first (File > Export) before making changes.
2. Navigate to:
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
   • If the WindowsUpdate key doesn’t exist, right‑click the Windows folder and create it (New > Key).
3. Under WindowsUpdate, create a new key named AU (if it isn’t already there).
4. Inside AU, right‑click in the right pane, select New > DWORD (32‑bit) Value, and name it UseWUServer.
5. Set its value to 0 (the default). This step ensures local policies aren’t overridden by a WSUS server.
6. Still inside WindowsUpdate, create a DWORD named TargetReleaseVersion. Set its value to 1.
7. Create a String Value named TargetReleaseVersionInfo and set its data to 22H2 (or whichever Windows 10 build you are on—check with winver).
8. Create another DWORD named AllowOSUpgrade and set it to 0.

Restart your PC. Windows Update will no longer offer Windows 11 and will continue to serve only cumulative security updates for the specified Windows 10 build.

Caveat: Future Windows 10 cumulative updates may bump the build number. If your specified build becomes unsupported, you may need to update the TargetReleaseVersionInfo string manually.

Method 2: Group Policy (Pro, Enterprise, Education Only)

For users on Windows 10 Pro or higher, Local Group Policy offers a more centralised approach that doesn’t require registry gymnastics.

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to:
   Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from Windows Update
3. Double‑click the policy Select the target Feature Update version.
4. Select Enabled.
5. Under Options, set Which Windows product version would you like to receive feature updates for? to Windows 10.
6. Set Which target version would you like to keep? to your current build (e.g., 22H2).
7. Click Apply and OK.

This policy overrides the automatic feature‑update offer. Unlike the registry method, Group Policy settings are often more resilient to manual overrides, but they are still not foolproof. Microsoft has occasionally pushed feature updates through other channels (e.g., the “Get Windows 11” app) even when the policy is active.

Method 3: Disable TPM and Secure Boot in BIOS / UEFI

If you want a hardware‑level block—especially useful for systems that meet the minimum requirements but you still want to avoid accidental upgrades—you can disable the two components Windows 11 checks during the upgrade readiness scan.

• TPM (Trusted Platform Module) – Enter your BIOS/UEFI during boot (commonly F2, Del, or Esc). Look for Security or Advanced menus. Find TPM (sometimes called PTT on Intel, fTPM on AMD) and set it to Disabled.
• Secure Boot – In the same BIOS area, set Secure Boot to Disabled.

Save and exit. Windows 11’s upgrade wizard will then report that your PC doesn’t meet the system requirements, and Windows Update will not show the upgrade as available.

Important: Disabling TPM can affect BitLocker, Windows Hello, and some enterprise security features. If you use any of these, this method is not recommended.

Method 4: Use the “Show or Hide Updates” Troubleshooter (Temporary)

Microsoft provides an official tool to hide unwanted updates. While it’s not a permanent block (the same update may reappear after a major CU), it’s useful for a quick, no‑risk solution.

1. Download the Show or Hide Updates troubleshooter (direct Microsoft support page).
2. Run wushowhide.diagcab.
3. Click Next, then select Hide updates.
4. Check Windows 11 Feature Update to version 22H2 (or whatever the current offer is).
5. Click Next and follow the prompts.

The update will be hidden from Windows Update. To reverse it later, run the tool again and choose Show hidden updates.

Method 5: Metered Connection (Wi‑Fi Only)

If your Windows 10 device connects via Wi‑Fi, setting the connection as metered will prevent automatic downloads of large feature updates. This is not a complete block—you can still manually trigger the upgrade—but it stops the background download.

1. Go to Settings > Network & Internet > Wi‑Fi.
2. Click the network you are connected to.
3. Toggle Set as metered connection to On.

Windows Update will still show the upgrade as available, but it won’t start downloading until you explicitly connect to an unmetered network or choose “Download now.”

Method 6: Third‑Party Tools (Use with Caution)

Tools like Windows Update Blocker or Wub (written by the developer of O&O ShutUp10) can disable the entire Windows Update service. While effective, this approach is a sledgehammer: you will also stop receiving critical security patches for Windows 10. Given that Windows 10 is no longer supported, this leaves your PC dangerously exposed. If you choose this path, you must have a separate security plan (firewall, third‑party antivirus, strict browsing habits). For most users, the registry or Group Policy methods are safer and still allow security updates.

What If Your PC Doesn’t Meet Windows 11 Requirements?

If your hardware lacks TPM 2.0 or a compatible CPU (e.g., Intel 7th‑gen or older, AMD Ryzen 1st‑gen), Windows 11 simply won’t install through normal means. Blocking isn’t required—it won’t even appear as an upgrade. However, you should still be aware that these unsupported PCs will eventually stop receiving Windows 10 security updates (unless you purchase Extended Security Updates from Microsoft). In that case, your options are:

• Continue using Windows 10 with paid ESU (available through late 2026, then again until 2028 for volume‑licence customers).
• Switch to a Linux distribution (like Ubuntu or Linux Mint) that runs well on older hardware.
• Upgrade the hardware (add a TPM 2.0 module if your motherboard supports it, or buy a used/refurbished Windows 11‑ready PC).

Frequently Asked Questions

Q1: Can I block Windows 11 temporarily and upgrade later?

Yes. Every method except disabling TPM/Secure Boot can be reversed. For registry or Group Policy, simply delete the custom values or set them back to “Not Configured.” The hidden update tool also allows you to unhide the upgrade when you’re ready.

Q2: Will blocking Windows 11 prevent me from getting security updates for Windows 10?

Not with the registry or Group Policy methods—they only target feature updates. We strongly recommend that you keep cumulative monthly security patches enabled. Disabling the entire Windows Update service (third‑party tools) will stop security updates, which is dangerous especially now that Windows 10 mainstream support has ended.

Q3: Is it still safe to run Windows 10 in 2026?

It depends. Microsoft offers paid Extended Security Updates (ESU) for Windows 10 until 2028 for enterprise customers, but consumer users generally do not get free security patches after October 2025. Any PC still on Windows 10 without ESU is at risk. Blocking Windows 11 while staying on Windows 10 means you should either pay for ESU or move to a supported operating system soon.

Q4: I already see the “Get Windows 11” icon in the taskbar. How do I remove it?

The icon is part of a separate app (GetWindows11). You can uninstall it via Settings > Apps > Apps & features, look for Windows 11 Installation Assistant or PC Health Check, and uninstall them. Then use one of the blocking methods above to prevent the full upgrade from appearing in Windows Update.

Q5: Which method is most permanent?

The Group Policy method (on Pro/Enterprise) is the most resilient to manual user changes, but Microsoft can still override it through a future cumulative update. Disabling TPM in BIOS provides a hardware‑level barrier that cannot be bypassed by software alone.

Conclusion

Blocking Windows 11 in 2026 is a double‑edged sword. While you can absolutely prevent the upgrade using registry edits, Group Policy, BIOS settings, or third‑party tools, you must acknowledge that Windows 10 is no longer a supported platform without paid extensions. For most users, the smartest move is to evaluate your hardware compatibility, test Windows 11 in a virtual machine, or make the jump now while the OS is mature—rather than stay on an unsupported OS. If you still decide to block, the registry method (Method 1) offers the best balance of control and ongoing security updates. Whichever method you choose, always back up your data first and revisit the decision at least once every few months.