Quick fix: Open gpedit.msc (Pro/Enterprise). Navigate to Computer Configuration → Administrative Templates → Windows Components → Windows Update → Manage updates offered from Windows Update. Find Do not include drivers with Windows Updates. Set to Enabled. Apply → gpupdate /force. Driver updates are blocked from Windows Update channel.

Windows Update pushes driver updates by default. For PCs where you want full manual driver control (CAD workstations, audio production, gaming PCs with specific GPU drivers), enable this policy to block WU-delivered drivers.

Symptom: Want to block driver updates from Windows Update on Windows 11 Pro/Enterprise.
Affects: Windows 11 Pro/Enterprise/Education.
Fix time: ~5 minutes.

What causes this need

Windows Update offers drivers via the standard update channel. Sometimes:

WU pushes a buggy driver that replaces a working one.
You need a specific certified driver version (audio interface, scientific instrument).
You manage drivers via vendor utility (Intel DSA, AMD Adrenaline).
Corporate compliance requires fixed driver versions.

Group Policy disables WU’s driver delivery without disabling Windows Update entirely.

Method 1: Enable Group Policy for driver block

The standard route.

Open Group Policy Editor: Win+R → gpedit.msc.
Navigate: Computer Configuration → Administrative Templates → Windows Components → Windows Update → Manage updates offered from Windows Update.
Find Do not include drivers with Windows Updates. Double-click to edit.
Set to Enabled. Click Apply → OK.
Open Command Prompt (Admin). Run:
```
gpupdate /force
```
Verify policy applied: gpresult /h C:\report.html. Open the report → search for the policy name. Status should be applied.
Next Windows Update sync: driver updates no longer offered or downloaded.
Security and feature updates still install.

This is the standard fix.

Method 2: Equivalent registry tweak for Home edition

For Windows 11 Home (no gpedit).

Open Registry Editor as Admin.
Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate. (Create the WindowsUpdate key if missing.)
Right-click in right pane → New → DWORD (32-bit) Value.
Name: ExcludeWUDriversInQualityUpdate. Value: 1.
Close Registry Editor.
Reboot or run gpupdate /force (works on Home too, applies registry-based policies).
Windows Update no longer offers drivers.
To re-enable: set value to 0 or delete the value.

This is for Home edition users.

Method 3: Block specific device updates via Hardware ID

For per-device control.

Open Device Manager.
Right-click the device you want to lock (e.g., your GPU) → Properties.
Switch to Details tab. From the Property dropdown: pick Hardware Ids.
Note the top ID (long string with PCI / USB IDs).
Open Group Policy: Computer Configuration → Administrative Templates → System → Device Installation → Device Installation Restrictions.
Open Prevent installation of devices that match any of these device IDs. Enable. Click Show. Add the Hardware ID.
Tick Also apply to matching devices that are already installed.
Apply. Run gpupdate /force. Reboot if needed.
WU no longer installs drivers for this specific device. Other devices’ drivers still update.

This is for device-specific control.

How to verify the fix worked

Settings → Windows Update → Advanced options → Optional updates → Driver updates section: empty or shows no available drivers.
Check policy applied: gpresult /h C:\report.html. The policy shows as Enabled.
Manually update a driver via Device Manager: works. Manual update isn’t blocked, only WU is.
Vendor utility (Nvidia GeForce Experience, etc.) can still install drivers.

If none of these work

If drivers still install: Multiple Group Policies conflicting: corporate WSUS / Intune policies may override. Check via gpresult /h. For Optional updates: drivers may be in Optional category. Block separately. For Windows 10 vs 11: policy name slightly different but path same. For Microsoft Update Catalog manual install: not blocked by this policy. Users can still manually install. For specific drivers in cumulative updates: rarely, drivers bundled with quality updates. Policy doesn’t block those. For corporate WSUS: configure WSUS to not approve driver updates instead. For Intune-managed: use Windows Update for Business policy via Intune.

Bottom line: gpedit.msc → Do not include drivers with Windows Updates → Enabled. Or registry ExcludeWUDriversInQualityUpdate = 1 for Home. Manual driver updates via vendor / Device Manager still work.