Enable upgrade to Windows 11 with GPO

Question

Hi,

In our organization we require users to update to the latest Windows update via group policies.

Here's a picture of the set policies for reference.

We do not want to force our users to upgrade to Windows 11 if they don't want to - as of yet - but because of these policies they cannot upgrade to it at their leisure. I only found questions and threads regarding on how to BLOCK but nothing on how to enable it.

Also we don't use WSUS.

In PC health check this is what the users see:

Am I missing something? Do I need to turn off some policies, or do I need to turn on some policies?

Thanks in advance I hope I was clear with my question.

Answer 1

There is workaround, but you will need coding and scripting. You need to create a portal where user register and request for Windows 11 by their username and you have to write a PowerShell script to collect these names and use Approve-WsusUpdate command in PowerShell to automatically deploy update, take a look at:
https://learn.microsoft.com/en-us/powershell/module/updateservices/approve-wsusupdate
Then you may create schedule task to run every day and deploy Windows 11 upgrade automatically with the script.

Answer 2

When devices are domain-joined, then upgrading to the Windows 11 is being managed by the organization, you may create a basic form and those who are interested to upgrade to the Windows 11 register and then you create a Windows 11 Upgrade group and deploy all devices in the group. In case you are not using WSUS, then it is good idea to consider using it and it is free.
To learn more about upgrading to Windows 11, have a look at:
https://learn.microsoft.com/en-us/windows/whats-new/windows-11-plan
https://learn.microsoft.com/en-us/windows/whats-new/windows-11-prepare

Answer 3

Just reporting that I have the same issue, GPO to manage windows updates are working fine. But it suppresses the Ready Check as depicted above.

I understand the proposed answers, but they do not match the use case or environment of myself or the OP. We have windows 10 running fine, but for some reason we don't understand, it PREVENTS the windows 11 check entirely. This condition is not understood at all.

Without a GPO, windows update will indicate windows 11 eligibility. No one knows why GPOs to do windows update automatically suppresses this, without administrators selecting to disable/deny windows 11 - it's quite the opposite.

We need users to have it communicated to the desktop they CAN upgrade to 11.