How to Enable or Disable Safeguard Holds in Windows 11

References:

KB5006965: How to check information about safeguard holds affecting your device – Microsoft Support

Windows Update 🔃 for Business reports overview – Windows Update for Business reports

Safeguard holds for Windows

Opt out of safeguard holds

Option One

Enable or Disable Safeguards for Feature Updates in Local Group Policy Editor

Local Group Policy Editor lets you control safeguard holds by turning off automatic blocking for feature updates. You open it with the run command gpedit.msc, then go to the Windows Update settings that control how your PC receives major operating system upgrades.

The Local Group Policy Editor is only included in Windows 11 Pro, Enterprise, and Education. If gpedit.msc says it cannot be found, you are most likely on Windows 11 Home, and you will need the Windows Terminal method further down instead. You also need to be signed in as an administrator.

1. Press Win + R, type gpedit.msc, and press Enter. The Local Group Policy Editor window opens.
2. In the left pane, expand the folders until you reach the location below. You should see a list of Windows Update policies in the right pane.
   

   Computer Configuration › Administrative Templates › Windows Components › Windows Update › Manage updates offered from Windows Updates

3. In the right pane of Manage updates offered from Windows Updates, double-click the Disable safeguards for Feature Updates policy. Its settings window opens.

To Enable Safeguards for Feature Updates

This setting remains active by default. That means safeguard holds are on, and Microsoft can block a feature update on your PC if it finds a problem. Use the steps below to return to this default if you changed the policy earlier.

1. Select the Not Configured option.
2. Click OK. The window closes and the policy shows as Not configured in the list.

To Disable Safeguards for Feature Updates

Do this only on a test machine or when you have a clear reason. Microsoft put the hold there because that device is likely to hit a real problem with the update.

1. Select the Enabled option.
2. Click OK. The policy now shows as Enabled in the list.
3. Close the Local Group Policy Editor if you like. Then open Settings and go to Windows Update to check for updates. If the policy doesn't seem to apply, restart the PC and check again.

To undo the change at any time, set the policy back to Not Configured as shown above.

Option Two

Enable or Disable Safeguards for Feature Updates using Registry

⚠️ Admin Required: Open Windows Terminal with administrator privileges and run the commands below. This method works on Windows 11 Home as well as Pro, since it does not need the Group Policy Editor.

1. Right-click the Start button and choose Terminal (Admin).
2. Click Yes if User Account Control asks for permission. A terminal window opens with administrator rights.
3. Copy and paste the command you need from the box below into the terminal, then press Enter. The terminal should report that the operation completed successfully.

To Enable Safeguards for Feature Updates

This setting remains active by default, so a PC you have never changed needs nothing here. Run the matching command only if you want to switch the behavior, or to go back to the default later.

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v DisableWUfBSafeguards /t REG_DWORD /d 0 /f

To Disable Safeguards for Feature Updates

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v DisableWUfBSafeguards /t REG_DWORD /d 1 /f

Summary

You can turn them off in Windows Pro and Enterprise editions, but Microsoft warns that bypassing these holds may cause system instability.

You can disable safeguard holds with either the Local Group Policy Editor (in Windows Pro, Enterprise, and Education editions) or Windows Terminal with registry commands. Microsoft warns that disabling holds carries risks and can cause update failures and performance problems. Testing environments are the only proper place for this configuration. Each time a new Windows version installs, the safeguards turn back on automatically to keep the device protected.

Before you override a hold, make a backup or restore point, and check whether the update is worth the risk. In most cases, waiting for Microsoft to lift the hold is the safer choice.