How to control or stop Windows 11 assignments in Intune

With the general availability of Windows 11 organizations might be looking at ways to ensure devices are NOT automatically upgrading to Windows 11 or looking to upgrade only selected devices.

This blog will look at how to achieve this by utilizing Intune.

Note.

This blog assumes that you are managing Updates via Intune and does not cover the implementation of device management.

Update Ring

Ensure that you have an Update Ring configured with your desired configurations and deployed to your Windows 10 devices.

The Setting Feature update deferral period (days) SHOULD be set to 0

Configure feature updates policy for Windows 10 Windows 11 devices in Intune | Microsoft Docs

Feature updates

With Feature updates for Windows 10 and later in Intune, you can select the Windows feature update version that you want devices to remain at.

Option 1 – Stopping Windows 11 Update

Ensure that your policy is set to the version of Windows 10 you want to keep devices on.

Assign the policy to the relevant group.

Endpoint Experience

The targeted endpoints will update to the version specified and will stay there until you configure a later version.

Once updated you will notice that no further updates are applied regarding Feature Updates

Option 2 – Assign Windows 11 Update

Ensure that your policy is set to Windows 11.

Assign the policy to the group that will get the Windows 11 update.

Endpoint Experience

The targeted endpoints will get the Windows 11 update.

Windows 11 Specs and System Requirements | Microsoft

The device will upgrade to Windows 11

Special thanks to Warren Stevens for his contribution.