My Intel 11th gen CPU/motherboard bios setting requires setting "Secure Boot" = "Disabled", otherwise Windows Update will attempt to upgrade from Win10.22H2 to Win11. Even though InControl is set to dis-allow such system upgrades. Current Win10 build number = 19045.5737: Windows Insider - Release Preview. Seems like the "Secure Boot" bios setting shouldn't affect the ability for InControl to block upgrading to Win11, but it's latest build number (1.02) fails to provide that safeguard. Perhaps more product testing would be necessary, to ensure that every (Win10) Windows Insider setting is still able to block upgrades to Win11 ?
