WU help needed with “Some settings are managed by your organization”

Topic

New Reply

Greetings All. I need some help with a Win10 PC that is blocked from updating to Win11.

History: Some folks think I am a computer geek but on a scale of 1 to 10, I am at a 2 whereas my brother was at an 8. He passed away last year so I have become computer support for my sister-in-law. She recently asked me about upgrading to Windows 11 so I took a look at her PC (an HP EliteBook) during a visit this morning. I first confirmed that it had a TPM then I looked at the windows update settings. I was not surprised to see the notice “Some settings are managed by your organization”. Blocking Windows 11 is something my brother would have done.

I know enough to know that this could be done using a third party utility like GRC’s InControl or by Group Policy. I could not find such a utility so I started looking into Group Policy (know that my knowledge of Group Policy is rudimentary at best). The policies Windows Updates lists as being set on the device are:

Disable automatic updates
Source: Administrator
Type: Group Policy

Get updates for other Microsoft products
Source: Administrator
Type: Group Policy

Set Automatic Update options
Source: Administrator
Type: Group Policy

Target release version for feature updates
Source: Administrator
Type: Group Policy

I found the Group Policy named “Target release version for feature updates” but it had a “Not configured” state. I then did a sort of all settings by State, they were all listed as “Not configured”. I’m at a loss. I will be grateful for all suggestions on how to figure this out. I do not have access to the PC so will have to accumulate suggestions and then have another go at it on my next visit.

The PC is running Windows 10 Pro 22H2.  It is a home PC, not part of a domain. It has two configured users, my sister-in-law as a standard user, and my brother as an administrator.  My attempts to figure it out were made while logged in as my brother.

 

Reply | Quote

Replies

Peobody wrote:

I found the Group Policy named “Target release version for feature updates” but it had a “Not configured” state.

Installing Windows 11 will install 24H2 which is for now not recommended.

You have 2 options :

Use InControl set to Windows 11 24H2

Use to install from Microsoft (will override GPEdit settings) either online or downloading ISO using creating Installation Media

* Why would she want Windows 11 ? Windows 10 will continue to run even after EOL and there are solutions for security support.

Reply | Quote

Log in as your brother (Administrator). Susan is not recommending 24H2 yet. The instructions below are for Win11 23H2.

InControl does not “install,” it works wherever the icon in placed. So it will not be listed in the “Installed Updates.” Look on the desktop and see if you find it there. You can also search for InControl in File Explorer. If you find it, Choose “Release Control,” change the version to 11 and the Release to 23H2. Then “Take Control”
If you cannot find it, Download it from Gibson Research , place it on the desktop and follow the instructions.
Restart the computer and give the computer time run Windows Update and see if you are offered Win11 23H2.

Reply | Quote

I did search for InControl in File Explorer and did not find it.  If I install it and set it to version 11 release 23H2 that it will undo whatever policies are set that are causing the block?

I’m wouldn’t go so far as to say that she “wants” Windows 11.  She’s just seeing and hearing about Win10 EOL, specifically the end of updates.  By brother was a security fanatic which rubbed off on her.

Reply | Quote

There’s no problem staying on Win10 for a while longer. Easier for both of you – no changes.

 

Reply | Quote

PKCano wrote:

There’s no problem staying on Win10 for a while longer. Easier for both of you – no changes.

 

It will need to be done eventually so I might as well figure out what needs to be done now since she’s asking about it.

Reply | Quote

Peobody wrote:

will undo whatever policies are set that are causing the block?

Definitely maybe!

It doesn’t sound like you have any group policies, but the changes may be done via registry settings, which GP doesn’t see.
Run InControl and see what it says, then make a backup, set InControl to W11 23H2, reboot and see what you get. You could use WUMgr to check for the updates instead of waiting for Windows to do it.

cheers, Paul

Reply | Quote