Now let’s understand how easy to uninstall or remove Windows 11 Update. I have seen IT Pros want to uninstall Windows patches or the latest cumulative update (LCU). There could be many reasons for the removal of patches, and one of them is because of known issues with patches.
Windows Print Spooler Service Issue is one example of Microsoft releasing several patches versions because of known issues. In this post, we will learn how to remove Windows 11 update or the latest patch. There are different methods to remove the patches from Windows 11 PC.
You can manually remove the Windows 11 update using the control panel application or command-line options. You can also remove it using SCCM or Intune method. You can download Windows 11 ISO and upgrade it using a manual method.
You can also upgrade to Windows 11 using the SCCM Task Sequence method or Intune Windows Update for Business method. The following are the blog posts that will help you to understand the minimum requirements for Windows 11 upgrade and common update troubleshooting tips.
- Windows 11 Minimum System Requirements Updated
- Fix Windows Update Error 0x8007005 Failed to Restart
- Windows 11 Troubleshooting Options Fixes
Why to Uninstall Windows 11 Updates?
There can be several reasons to uninstall Windows 11 updates or patches. The main reasons are mentioned below. The application or hardware driver compatibility issues with the latest update. I have seen excel macro issues or performance issues because of the new update deployment.
All the Windows 11 updates come with fixes for many issues but the new hotfixes or patches can cause other issues. To resolve these issues Microsoft might take some time or eventually release another fix. To reduce the impact until that time, you will have to remove or uninstall the latest Windows 11 updates from the impacted PCs.
It’s not always recommended to remove the Windows 11 updates. I would rather test the uninstall option with a few Windows 11 test PCs before deploying this update to all the other impacted PCs.
Uninstall Updates on Windows 11
You have new uninstall updates on Windows 11 (insider?). Let’s check how this works from the new Settings app menu. You can start searching for Uninstall updates. Follow the steps described below:
- Click on the Start button and start using the search box -> Type in “Uninstall Updates“
- Click on the Open button to open the Uninstall Updates page.
From Uninstall Updates page, you can search for the Windows 11 patch or update you want to uninstall and click on Uninstall link.
A small uninstall or Remove Windows 11 Update/Patch using the Uninstall button as shown in the below picture. This update and its related info will be uninstalled.
The uninstallation progress bar is available on the same Windows 11 settings – Uninstall Updates page. After the uninstallation, the status is also as shown in the below diagram.
- Uninstalled, Restart Required.
Manual Method to Remove Windows 11 Updates
Let’s find out the manual method to remove Windows 11 updates from a PC. You have installed the latest cumulative update (LCU) on Windows 11 PC. However, one of the applications or hardware stopped after the installation of the latest patch.
To remove the Windows 11 update, you will need to log in with a user account with local administrative access. You will need to follow the steps mentioned below to complete the removal process of the Windows 11 patch.
You can launch the Windows Terminal (admin) command-line tool by right-clicking on the Start button, as shown below.
You will need to launch Add Remove Program to uninstall Windows 11 updates from the PC where you have issues after monthly patching. You can use the following command to launch Add Remove program from Windows Terminal.
AppWiz.cpl
Now, you will need to click on the View Installed Updates hyperlink to view the Windows 11 updates installed on that PC. You can check the details of the Windows 11 patch KB number, Installed Date, etc., from the same Window.
You can see that View Installed updates link is changed to Uninstall a program now. You can now right-click on the Windows 11 update that you want to remove from the PC and click on UNINSTALL button.
- Right Click on the Windows 11 Update -> Security Update for Microsoft Windows (KB5006674)
- 2021-10 Cumulative Update for Windows 11 for x64-based Systems (KB5006674)
- Select the Uninstall option to start the removal process.
- Click on YES from the popup Window called Uninstall an update.
You will need to wait while the updates are being uninstalled. This might take several minutes.
You must restart your Windows 11 Computer to apply these changes (uninstall of Windows 11 Update). Before restarting, save any open files and close all programs. You will need to Restart Now button to continue.
Event Logs Uninstall Windows 11 Update or Patch
You can check the event logs to confirm whether the patch or Windows 11 update uninstall was successful or not. I have seen 3 events related to the uninstall process. Hopefully, you can verify these event ID/logs -> Windows Logs -> Setup to confirm the removal process.
Event ID 1 – Initiating changes for package KB5006674. The current state is Installed. The target state is Absent. Client id: Software Explorer.
Event ID 4 – A reboot is necessary before package KB5006674 can be changed to the Absent state.
Event ID 2 – Package KB5006674 was successfully changed to the Absent state.
Event ID 1 – Microsoft Windows Servicing
Event ID 1 Microsoft-Windows-Servicing indicates that the uninstall process of Windows 11 is started. This is the first step or event related to Windows 11 update removal process.
Initiating changes for package KB5006674. The current state is Installed. The target state is Absent. Client id: Software Explorer.
Log Name: Setup
Source: Microsoft-Windows-Servicing
Date: 10/18/2021 2:28:48 PM
Event ID: 1
Task Category: (1)
Level: Information
Keywords:
User: SYSTEM
Computer: Win11-Prod
Description:
Initiating changes for package KB5006674. Current state is Installed. Target state is Absent. Client id: Software Explorer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" />
<EventID>1</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>1</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2021-10-18T13:28:48.0335172Z" />
<EventRecordID>42</EventRecordID>
<Correlation />
<Execution ProcessID="8584" ThreadID="1832" />
<Channel>Setup</Channel>
<Computer>Win11-Prod</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsPackageInitiateChanges xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<PackageIdentifier>KB5006674</PackageIdentifier>
<InitialPackageState>5112</InitialPackageState>
<InitialPackageStateTextized>Installed</InitialPackageStateTextized>
<IntendedPackageState>5000</IntendedPackageState>
<IntendedPackageStateTextized>Absent</IntendedPackageStateTextized>
<Client>Software Explorer</Client>
</CbsPackageInitiateChanges>
</UserData>
</Event>
Event ID 4 – Microsoft Windows Servicing
The event ID 4 Microsoft Windows Servicing indicates that the uninstall process is completed. But the uninstall process will be successful only when you restart the Windows 11 PC.
A reboot is necessary before package KB5006674 can be changed to the Absent state.
Event ID 2 – Microsoft Windows Servicing
Event ID 2 – Microsoft Windows Servicing indicates that Windows 11 PC is restarted after the uninstallation of the patches. The Windows 11 patch uninstallation process is successful.
Event ID 1 – Microsoft Windows Servicing – Package KB5006674 was successfully changed to the Absent state.
MUSA – Microsoft Update Standalone Installer to Uninstall Windows 11 Patch
You can try to use this method for automation of the Windows 11 patch uninstall. I have tried to uninstall the Windows 11 patch using MUSA (Microsoft Update Standalone Installer), and you can see the results below section. Let me know whether it worked for you or not.
I have downloaded Windows 11 MSU package ( windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu ) from the Microsoft update website and tried to uninstall the patch using MUSA.exe.
The MUSA.exe is available on all Windows 11 PCs by default. So, you don’t need to download or install it separately. This is the application that helps install MSU patch files (example – windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.MSU) on Windows 11 PCs.
- Download the KB from Microsoft Update Catalog – https://www.catalog.update.microsoft.com/Search.aspx?q=KB5006674
- Click on the Keep option to download the MSU file for Windows 11 update/patch.
I have tried different command-line options but couldn’t make it work.
- wusa /uninstall “C:\Users\anoop\Downloads\windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu” /quiet /log /norestart
- wusa /uninstall “C:\Users\anoop\Downloads\windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu”
WUSA Event ID 8 – Uninstallation of Windows 11 Updates Failed Catastrophic failure
Event ID 8 – Error – Windows update could not be uninstalled because of error 2147549183 “Catastrophic failure” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu /quiet /log /norestart”)
Uninstall Windows 11 Updates or Patches using Command Line
I successfully uninstalled Windows 11 update or patch using the WUSA.EXE (Windows Update Standalone Installer). The silent parameter is not supported when you use the \KB: kb5006674 parameter. So, the following is the good MUSA.exe command-line to Uninstall Windows 11 Patch (the one in bold).
The following are the list of command-lines that I tried to Remove Windows 11 Update Patch.
Windows update could not be uninstalled because of error 2147944018 “Another installation is already in progress. Complete that installation before proceeding with this install.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674″)
Windows update “Security Update for Microsoft Windows (KB5006674)” could not be uninstalled because of error 2147943623 “The operation was canceled by the user.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674″)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /log /norestart”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /log”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /norestart”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: ““C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet“)
wusa /uninstall /kb:5006674 /log /norestart
You can verify these event ID/logs -> Windows Logs -> Setup to confirm the removal process.
WUSA Event ID 7 – Uninstalled Windows 11 Updates Successfully
Event ID 7 – Windows update “Security Update for Microsoft Windows (KB5006674)” was successfully uninstalled. (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /log /norestart”)
Event ID 9 – Warning – Windows update “Security Update for Microsoft Windows (KB5006674)” requires a computer restart to finish uninstalling. (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /log /norestart”)
PowerShell Command to Uninstall Windows 11 Updates
The same command that I used above can be used to uninstall Windows 11 Updates from any Windows 11 PC. You can deploy this PowerShell command to uninstall Windows 11 patches using SCCM or Intune. I have taken KB5006674 as an example in the below PowerShell command.
You will need to be very careful before you deploy this type of PowerShell command using SCCM and Intune. This could cause a serious impact on all those systems. Force reboot and end-user experience issues etc.
wusa /uninstall /kb:5006674 /log /norestart
You can use the following post as an example for SCCM and Intune PowerShell command deployment:
- Deploy Windows 11 Hardware Readiness PowerShell Script using SCCM
- Best Way to Deploy Powershell Script using Intune
Windows 11 Patches Uninstall String from Registry
Let’s check the Windows 11 patches uninstall string from the registry and use the uninstall string to remove the patch from Windows 11 device. Thanks to Mike Terril for this tip.
Navigate to the following registry path and check for the KB article of productID details if it’s MSI package – Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Check the entry called UninstallString under the product ID or application name to uninstall. I couldn’t find any KB article details under this registry on Windows 11 PC that I was checking.
“C:\WINDOWS\SysWOW64\RunDll32.EXE” “C:\Program Files\NVIDIA Corporation\Installer2\InstallerCore\NVI2.DLL”,UninstallPackage Display.Driver
MsiExec.exe /X{B343AEBD-9A5A-40B7-A032-81163019A913}
MsiExec.exe /X{E41C6EA8-A897-4008-835E-151A92FD6F95}
“C:\Program Files\Wondershare\Wondershare Filmora\unins000.exe” /SILENT
Author
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with over 17 years of experience (calculation done in 2018). He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…..…
Hi,
I’ve tried packaging the command line you mentioned into a BAT file and convert to win32app. However when this tries to run on the device. I see the same error as you was seeing.
Did the same command work well when you try manually?