Windows 11 is installing on business PCs even when admins block it

The deadline for Windows 10’s end of support is rapidly approaching, but companies and small businesses have good reason not to rush the switch over to Windows 11 just yet. That’s why many use Microsoft Intune, a cloud-based solution that allows administrators to manage multiple devices and define policies for things like updates.

However, a bug in Intune is causing devices to upgrade to Windows 11 despite the update being blocked. Microsoft confirms this in a post in the Microsoft 365 admin center (spotted by BleepingComputer). The problem has apparently existed since April 12, but it only affects organizational devices managed by Intune.

What to do if you’re using Intune

With Microsoft Intune, system administrators who manage dozens or huundreds of computers for companies and organizations can determine which software updates are available for installation. That includes upgrades to new Windows versions.

It isn’t entirely clear why this error is causing Intune settings to be ignored, nor is it known how many systems are affected. However, Microsoft is working on a solution and, for now, the company recommends completely pausing Windows feature updates via Intune.

What to do if you’ve been upgraded

If you’re managing devices with Intune and those devices were upgraded to Windows 11 despite a policy that should’ve blocked the update, you either have to bite the bullet and move forward with Windows 11 or manually roll back each system to Windows 10.

Microsoft doesn’t offer an automated solution to roll back from Windows 11 to Windows 10, and the manual process can be difficult and time-consuming. It mainly involves the creation of Windows 10 bootable device and performing a fresh installation. Learn more in our quick guide to downgrading Windows 11 to Windows 10.