Remove Windows 11 Update Patch Latest Cumulative Update

Now let’s understand how easy to uninstall or remove Windows 11 Update. I have seen IT Pros want to uninstall Windows patches or the latest cumulative update (LCU). There could be many reasons for the removal of patches, and one of them is because of known issues with patches.

Windows Print Spooler Service Issue is one example of Microsoft releasing several patches versions because of known issues. In this post, we will learn how to remove Windows 11 update or the latest patch. There are different methods to remove the patches from Windows 11 PC.

You can manually remove the Windows 11 update using the control panel application or command-line options. You can also remove it using SCCM or Intune method. You can download Windows 11 ISO and upgrade it using a manual method.

Patch My PC

You can also upgrade to Windows 11 using the SCCM Task Sequence method or Intune Windows Update for Business method. The following are the blog posts that will help you to understand the minimum requirements for Windows 11 upgrade and common update troubleshooting tips.

Why to Uninstall Windows 11 Updates?

There can be several reasons to uninstall Windows 11 updates or patches. The main reasons are mentioned below. The application or hardware driver compatibility issues with the latest update. I have seen excel macro issues or performance issues because of the new update deployment.

All the Windows 11 updates come with fixes for many issues but the new hotfixes or patches can cause other issues. To resolve these issues Microsoft might take some time or eventually release another fix. To reduce the impact until that time, you will have to remove or uninstall the latest Windows 11 updates from the impacted PCs.

1E Nomad

It’s not always recommended to remove the Windows 11 updates. I would rather test the uninstall option with a few Windows 11 test PCs before deploying this update to all the other impacted PCs.

Manual Method to Remove Windows 11 Updates

Let’s find out the manual method to remove Windows 11 updates from a PC. You have installed the latest cumulative update (LCU) on Windows 11 PC. However, one of the applications or hardware stopped after the installation of the latest patch.

To remove the Windows 11 update, you will need to log in with a user account with local administrative access. You will need to follow the steps mentioned below to complete the removal process of the Windows 11 patch.

You can launch the Windows Terminal (admin) command-line tool by right-clicking on the Start button, as shown below.

Remove Windows 11 Update Patch Latest Cumulative  Update
Manual Method – Remove Windows 11 Update Patch Latest Cumulative Update

You will need to launch Add Remove Program to uninstall Windows 11 updates from the PC where you have issues after monthly patching. You can use the following command to launch Add Remove program from Windows Terminal.

AppWiz.cpl

Remove Windows 11 Update Patch Latest Cumulative  Update
Remove Windows 11 Update Patch Latest Cumulative Update

Now, you will need to click on the View Installed Updates hyperlink to view the Windows 11 updates installed on that PC. You can check the details of the Windows 11 patch KB number, Installed Date, etc., from the same Window.

You can see that View Installed updates link is changed to Uninstall a program now. You can now right-click on the Windows 11 update that you want to remove from the PC and click on UNINSTALL button.

  • Right Click on the Windows 11 Update -> Security Update for Microsoft Windows (KB5006674)
    • 2021-10 Cumulative Update for Windows 11 for x64-based Systems (KB5006674)
  • Select the Uninstall option to start the removal process.
  • Click on YES from the popup Window called Uninstall an update.
Remove Windows 11 Update Patch Latest Cumulative  Update
Remove Windows 11 Update Patch Latest Cumulative Update

You will need to wait while the updates are being uninstalled. This might take several minutes.

Remove Windows 11 Update Patch Latest Cumulative Update 1
Manual method Remove Windows 11 Update Patch Latest Cumulative Update

You must restart your Windows 11 Computer to apply these changes (uninstall of Windows 11 Update). Before restarting, save any open files and close all programs. You will need to Restart Now button to continue.

Remove Windows 11 Update Patch Latest Cumulative Update 2
Restart to complete the removal of the Windows 11 updates process

Event Logs Uninstall Windows 11 Update or Patch

You can check the event logs to confirm whether the patch or Windows 11 update uninstall was successful or not. I have seen 3 events related to the uninstall process. Hopefully, you can verify these event ID/logs -> Windows Logs -> Setup to confirm the removal process.

Event ID 1 – Initiating changes for package KB5006674. The current state is Installed. The target state is Absent. Client id: Software Explorer.
Event ID 4 – A reboot is necessary before package KB5006674 can be changed to the Absent state.
Event ID 2 – Package KB5006674 was successfully changed to the Absent state.

 Event Logs Uninstall Windows 11 Update or Patch
Event Logs Uninstall Windows 11 Updates or Patch

Event ID 1 – Microsoft Windows Servicing

Event ID 1 Microsoft-Windows-Servicing indicates that the uninstall process of Windows 11 is started. This is the first step or event related to Windows 11 update removal process.

Initiating changes for package KB5006674. The current state is Installed. The target state is Absent. Client id: Software Explorer.

Log Name:      Setup
Source:        Microsoft-Windows-Servicing
Date:          10/18/2021 2:28:48 PM
Event ID:      1
Task Category: (1)
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      Win11-Prod
Description:
Initiating changes for package KB5006674. Current state is Installed. Target state is Absent. Client id: Software Explorer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" />
    <EventID>1</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2021-10-18T13:28:48.0335172Z" />
    <EventRecordID>42</EventRecordID>
    <Correlation />
    <Execution ProcessID="8584" ThreadID="1832" />
    <Channel>Setup</Channel>
    <Computer>Win11-Prod</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <CbsPackageInitiateChanges xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
      <PackageIdentifier>KB5006674</PackageIdentifier>
      <InitialPackageState>5112</InitialPackageState>
      <InitialPackageStateTextized>Installed</InitialPackageStateTextized>
      <IntendedPackageState>5000</IntendedPackageState>
      <IntendedPackageStateTextized>Absent</IntendedPackageStateTextized>
      <Client>Software Explorer</Client>
    </CbsPackageInitiateChanges>
  </UserData>
</Event>

Event ID 4 – Microsoft Windows Servicing

The event ID 4 Microsoft Windows Servicing indicates that the uninstall process is completed. But the uninstall process will be successful only when you restart the Windows 11 PC.

A reboot is necessary before package KB5006674 can be changed to the Absent state.

Event ID 2 – Microsoft Windows Servicing

Event ID 2 – Microsoft Windows Servicing indicates that Windows 11 PC is restarted after the uninstallation of the patches. The Windows 11 patch uninstallation process is successful.

Event ID 1 – Microsoft Windows ServicingPackage KB5006674 was successfully changed to the Absent state.

MUSA – Microsoft Update Standalone Installer to Uninstall Windows 11 Patch

You can try to use this method for automation of Windows 11 patch uninstall. I have tried to uninstall the Windows 11 patch using MUSA (Microsoft Update Standalone Installer), and you can see the results below section. Let me know whether it worked for you or not.

I have downloaded Windows 11 MSU package ( windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu ) from the Microsoft update website and tried to uninstall the patch using MUSA.exe.

The MUSA.exe is available on all Windows 11 PCs by default. So, you don’t need to download or install it separately. This is the application that helps install MSU patch files (example – windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.MSU) on Windows 11 PCs.

  • Download the KB from Microsoft Update Catalog – https://www.catalog.update.microsoft.com/Search.aspx?q=KB5006674
  • Click on the Keep option to download the MSU file for Windows 11 update/patch.
MUSA - Microsoft Update Standalone Installer to Uninstall Windows 11 Patch
MUSA – Microsoft Update Standalone Installer to Uninstall Windows 11 Update – Remove Windows 11 Update Patch

I have tried different command-line options but couldn’t make it work.

  • wusa /uninstall “C:\Users\anoop\Downloads\windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu” /quiet /log /norestart
  • wusa /uninstall “C:\Users\anoop\Downloads\windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu”

WUSA Event ID 8 – Uninstallation of Windows 11 Updates Failed Catastrophic failure

Event ID 8 – Error – Windows update could not be uninstalled because of error 2147549183 Catastrophic failure” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall windows10.0-kb5006674-x64_c71b094804f4f592fa810ee9c4484489297c5dfc.msu /quiet /log /norestart”)

Remove Windows 11 Update Patch Latest Cumulative Update 3
Event ID 8 – Uninstallation of Windows 11 Updates Failed Catastrophic failure

Uninstall Windows 11 Updates or Patches using Command Line

I successfully uninstalled Windows 11 update or patch using the WUSA.EXE (Windows Update Standalone Installer). The silent parameter is not supported when you use the \KB: kb5006674 parameter. So, the following is the good MUSA.exe command-line to Uninstall Windows 11 Patch (the one in bold).

The following are the list of command-lines that I tried to Remove Windows 11 Update Patch.

Windows update could not be uninstalled because of error 2147944018 “Another installation is already in progress. Complete that installation before proceeding with this install.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674″)
Windows update “Security Update for Microsoft Windows (KB5006674)” could not be uninstalled because of error 2147943623 “The operation was canceled by the user.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674″)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /log /norestart”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /log”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet /norestart”)
Windows update could not be uninstalled because of error 2147942487 “The parameter is incorrect.” (Command line: ““C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /quiet“)

wusa /uninstall /kb:5006674 /log /norestart

Remove Windows 11 Update Patch Latest Cumulative Update 4
MUSA.exe to Uninstall Windows 11 Update – Remove Windows 11 Update Patch

You can verify these event ID/logs -> Windows Logs -> Setup to confirm the removal process.

WUSA Event ID 7 – Uninstalled Windows 11 Updates Successfully

Event ID 7 – Windows update “Security Update for Microsoft Windows (KB5006674)” was successfully uninstalled. (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /log /norestart”)

Event ID 9 – Warning – Windows update “Security Update for Microsoft Windows (KB5006674)” requires a computer restart to finish uninstalling. (Command line: “”C:\Windows\system32\wusa.exe” /uninstall /kb:5006674 /log /norestart”)

MUSA.exe to Uninstall Windows 11 Patch
MUSA.exe to Uninstall Windows 11 Patch – Remove Windows 11 Update Patch

PowerShell Command to Uninstall Windows 11 Updates

The same command that I used above can be used to uninstall Windows 11 Updates from any Windows 11 PC. You can deploy this PowerShell command to uninstall Windows 11 patches using SCCM or Intune. I have taken KB5006674 as an example in the below PowerShell command.

You will need to be very careful before you deploy this type of PowerShell command using SCCM and Intune. This could cause a serious impact on all those systems. Force reboot and end-user experience issues etc.

wusa /uninstall /kb:5006674 /log /norestart

You can use the following post as an example for SCCM and Intune PowerShell command deployment:

Author

Anoop is Microsoft MVP! He is a Solution Architect on enterprise client management with over 17 years of experience (calculation done in 2018). He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, Intune. He writes about technologies like ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.…

2 thoughts on “Remove Windows 11 Update Patch Latest Cumulative Update”

  1. Hi,

    I’ve tried packaging the command line you mentioned into a BAT file and convert to win32app. However when this tries to run on the device. I see the same error as you was seeing.

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.