New policy available for IT pros in Windows 10

Oct 22, 2020 22:10 GMT  ·  By

Every time Microsoft releases a new Windows 10 feature update, the company uses a gradual rollout to make sure that any major bugs that are discovered don’t impact a significant number of devices.

When this happens, Microsoft puts an upgrade block in place, technically preventing the systems that could be affected by the found issue from getting the new feature update on Windows Update.

While there are ways to bypass this block and install Windows 10 feature updates anyway, Microsoft has reportedly released a new group policy that allows IT pros to make the whole process a bit more straightforward.

In other words, IT pros will be allowed to bypass safeguard holds on their devices by simply enabling this group policy, which is avaialble today on Windows 10 version 1809 and newer. The only requirement is for these systems to run the October 2020 security update.

New policy available today

“IT admins can, if necessary, opt devices out of safeguard protections by using the disable safeguards policy. In a Mobile Device Management (MDM) tool, use the Update/DisableWUfBSafeguards CSP. In Group Policy, use the Disable safeguards for Feature Updates Group Policy. This policy is available to Windows Update for Business devices running Windows 10, version 1809 or later that have installed the October 2020 security update,” Microsoft explains.

“We recommend opting out only in an IT environment and for validation purposes. You can also validate an upcoming Windows 10 feature update version without the safeguards being applied by using the Release Preview channel of the Windows Insider Program for Business.”

Needless to say, IT admins doing this should keep in mind that bypassing an upgrade block could lead to other issues on their devices, and this is the reason Microsoft blocks them from getting the update in the first place.