Windows Update wants to install Win11, even though InControl is set to dis-allow

  • Be sure to checkout “Tips & Tricks”
    Dear Guest Visitor → Once you register and log-in please checkout the “Tips & Tricks” page for some very handy tips!

    /Steve.
  • BootAble – FreeDOS boot testing freeware

    To obtain direct, low-level access to a system's mass storage drives, SpinRite runs under a GRC-customized version of FreeDOS which has been modified to add compatibility with all file systems. In order to run SpinRite it must first be possible to boot FreeDOS.

    GRC's “BootAble” freeware allows anyone to easily create BIOS-bootable media in order to workout and confirm the details of getting a machine to boot FreeDOS through a BIOS. Once the means of doing that has been determined, the media created by SpinRite can be booted and run in the same way.

    The participants here, who have taken the time to share their knowledge and experience, their successes and some frustrations with booting their computers into FreeDOS, have created a valuable knowledgebase which will benefit everyone who follows.

    You may click on the image to the right to obtain your own copy of BootAble. Then use the knowledge and experience documented here to boot your computer(s) into FreeDOS. And please do not hesitate to ask questions – nowhere else can better answers be found.

    (You may permanently close this reminder with the 'X' in the upper right.)

rvail623

New member
Apr 13, 2025
2
0
My Intel 11th gen CPU/motherboard bios setting requires setting "Secure Boot" = "Disabled", otherwise Windows Update will attempt to upgrade from Win10.22H2 to Win11. Even though InControl is set to dis-allow such system upgrades. Current Win10 build number = 19045.5737: Windows Insider - Release Preview. Seems like the "Secure Boot" bios setting shouldn't affect the ability for InControl to block upgrading to Win11, but it's latest build number (1.02) fails to provide that safeguard. Perhaps more product testing would be necessary, to ensure that every (Win10) Windows Insider setting is still able to block upgrades to Win11 ?
 
As an "insider" you get the updates automatically as part of the "agreements" you made with Microsoft. It would seem that the Insider program may ignore the registry settings used to control the versions of the operating system you agreed to test. I would guess that InControl is working for production stable builds just fine.

Technically, you don't have a license for the Windows 10 22H2, Microsoft does. You have the license for the original operating system on that device, or you can purchase another production stable version license. There is a page on how to exit the Insider program: https://support.microsoft.com/en-us...settings-ef20bb3d-40f4-20cc-ba3c-a72c844b563c if you go down to the Stop receiving Insider Builds section it explains this.

If you really want to stop Windows 11 on your system, AND you are NOT using bit locker, then you can disable the TPM in the BIOS. Windows 11 will not install without a TPM (unless you intentionally bypass it).
 
At the least, Steve Gibson should be made aware of this caveat regarding effectiveness of his free InControl piece of software. Simply disabling "Secure Boot" in the bios settings is what works for me, for now. Switching back to a "production stable build" would require a fresh O.S. install/re-install.