I'm looking to make Windows 11 Pro behave as close to LTSC as possible, while still being technically and legally "Pro". These will be used in a game pub / internet cafe setup, so I can’t just slap LTSC + MAS on them. They need to be legit copies with proper labels and purchase proof, and they have to report as Pro if checked by whatever compliance tools are used in my country. My main goal is to limit updates to security-only, and have them applied manually on my own schedule. Bloat removal and cosmetic stuff is not that important but still welcome. Disabling update entirely is possible — but is there a clean way to keep it on and allow only security updates with a controlled schedule? Any tools that can handle this well? If not, would setting up a custom WSUS server be my best bet? Appreciate any tips from folks who’ve tried to do something similar (if any ).
@Kidades If you really need a scalable solution, opt for a proper Microsoft Intune-based setup. The learning curve is a bit steep, though, so you might need to hire a certified professional.
You can use my script from my signature to have windows 11 lighter ( better keep minimum store apps for compatibility ) And for update use wumgr to control update or sordum windows update blocker to unlock update install yourself
Original Pro support gpedit.msc to set Windows Update to notification mode only. No updates will be done if you close the notification. Fake WSUS LAN server works too then you need download and install .msu update manually.
i use a bat file with the 4 lines below to stop notifications in win 10 and 11. Code: reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MusNotifyIcon.exe" /v "Debugger" /t REG_SZ /d "%windir%\System32\systray.exe" /f reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MusNotification.exe" /v "Debugger" /t REG_SZ /d "%windir%\System32\systray.exe" /f taskkill /IM MusNotifyIcon.exe /t /f taskkill /IM MusNotification.exe /t /f For Windows updates I used Winaero Tweaker as it stopped updates and is easy to reverse, but since changed and use a bat file with the following to pause updates: Code: @echo. Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseFeatureUpdatesStartTime" /t REG_SZ /d "2022-09-27T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseQualityUpdatesStartTime" /t REG_SZ /d "2022-09-27T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseUpdatesExpiryTime" /t REG_SZ /d "2050-11-01T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseFeatureUpdatesEndTime" /t REG_SZ /d "2050-11-01T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseQualityUpdatesEndTime" /t REG_SZ /d "2050-11-01T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "PauseUpdatesStartTime" /t REG_SZ /d "2022-09-27T22:13:15Z" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" /v "PausedQualityStatus" /t REG_DWORD /d "1" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" /v "PausedFeatureStatus" /t REG_DWORD /d "1" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" /v "PausedQualityDate" /t REG_SZ /d "2022-09-27 22:13:15" /f >nul 2>&1 Reg.exe add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" /v "PausedFeatureDate" /t REG_SZ /d "2022-09-27 22:13:15" /f >nul 2>&1 @echo. Updates Paused Until 2050 @echo. By pausing, all you do is click un-pause but remember to re-pause bat file when its done to re-pause. Offers no control, but I set my target in group policy. Update pause is barrowed from Ankh Tech tool.