How to: Block Windows 10 upgrade

This will get much more intense through the remainder of the year as Microsoft ramps up the upgrades of Windows 7/8 computers joined to Active Directory domains. This post is all about what you need to know to block this upgrade from happening without having to manage Windows Update Services.

There are two main methods to block this upgrade. One involves a regedit which can be an easy deployment using scripts. It can also be a bit old school and cumbersome. The other way is to use group policy or local group policy for PCs not joined to a domain.

For the registry edit, simply create a reg file and import it with these entries:

Subkey: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
DWORD value: DisableOSUpgrade = 1

Subkey: HKLM\SOFTWARE\Policies\Microsoft\Windows\Gwx
DWORD value: DisableGwx = 1

These entries will block the notification and the upgrade itself. If you like to script instead of using group policy this might be all you need.

For the Group Policy side, you can only block the upgrade. The notification will still happen but the computer will not be able to run the Windows 10 upgrade. To disable the upgrade, follow these steps on your GPO management or the Local Group Policy editor:

  1. Click Computer Configuration.
  2. Click Policies.
  3. Click Administrative Templates.
  4. Click Windows Components.
  5. Click Windows Update.
  6. Double-click Turn off the upgrade to the latest version of Windows through Windows Update.
  7. Click Enable.

You might have to copy in the new admx for the Windows update group policy template which has this setting. If you don’t see this setting, you will need to update the template. See this post for accomplishing that.



Leave a Reply

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s