Let’s learn how to turn on and off Safeguard Holds for feature updates in Windows 11. Feature updates are new versions of Windows released via Windows Update twice a year. Microsoft uses quality and compatibility data to identify issues that might cause a Windows client feature update to fail or roll back. When Microsoft identifies such an issue, it may apply holds to the update service to prevent affected devices from installing the update and thus protect them from these experiences.
Microsoft also applies holds when a customer, a partner, or Microsoft internal validation identifies an issue that would cause severe impact as rollback of the update, data loss, loss of connectivity, or loss of key functionality and when a workaround is not immediately available. Safeguard holds prevent devices with known issues from being offered new operating system versions.
Microsoft renews the offering once a fix is found and verified. Microsoft uses holds to ensure customers have a successful experience as their devices transition to a new Windows client version. On devices that use Windows Update, but not the Windows Update for Business, the Windows Update page in the Settings app displays a message stating that a feature update is on its way, but not ready for the device. You can find Notification Settings of Windows 11 Full Review here.
Instead of the option to download and install the feature update, users will see a Learn more message. If you see this message, it means one or more holds affect your device. The lifespan of a hold varies depending on the time required to investigate and fix an issue. During this time, Microsoft works diligently to procure, develop, and validate a fix and then offer it to affected devices. Microsoft monitors quality and compatibility data to confirm a complete fix before releasing the hold. Once Microsoft releases the hold, Windows Update will resume offering new operating system versions to devices.

Table of Contents
Benefits of Windows Update for Business Reports (Safeguard Holds for Features Updates)
Some of the benefits of Windows Update for Business reports are: Compatibility with feature updates and Expedite Windows quality updates policies in Intune. A new Alert data type to assist you with identifying devices that encounter issues during the update process.
Error code information is provided to help troubleshoot update issues. Currently, Windows Update for business reports contains the following features:
- Windows Update for Business report workbook
- Compliance status charts in the Microsoft 365 admin
- Access to the following Windows update for Business reports tables:
- UCClient
- UCClientReadinessStatus
- UCClientUpdateStatus
- UCDeviceAlert
- UCDOAggregatedStatus
- UCDOStatus
- UCServiceUpdateStatus
- UCUpdateAlert
Client data collection to populate the Windows Update for Business reports tables.
- Intune Monthly Patching Guide Software Update Patching Options with Intune WUfB
- Upgrade Windows 10 using Windows Autopatch in Intune | Ring Based Deployment
- Notification Settings of Windows 11 Full Review | Global Vs Individual Application Notifications
Local Group Policy Settings
In Windows 11, you can set the Local Group Policy Editor to Turn on or off Safeguard Holds for Feature Updates. Open the Local Group Policy to turn on or off Safeguard Holds for Feature Updates, and follow the process.
- Open the Run command and press Win Key + R.
- Type gpedit.msc
- Click OK or press Enter.

When the Group Policy Editor opens, navigate to the following path to access the required policy settings. To make changes, select Search.
Computer Configuration>Administrative Templates>Windows Components>Windows Update>Manage updates offered from Windows Updates

Double-click on Disable safeguards for Feature Updates to open the settings. Here, you can see that it needs at least Windows Server 2016, Windows 10 Version 1909. You can choose the following option: press Apply, then press the OK button to apply the changes. You can enable or disable the Safeguard Holds feature updates in Windows 11.
This policy specifies whether the Safeguard Holds feature updates is allowed on the device. Unless you change this in your settings, Safeguard Holds feature updates will be turned on by default. If you turn this feature on before, it will stay on automatically unless you turn it off.
Enabling this setting when Feature Updates should be deployed to devices without blocking on any safeguard holds. Safeguard holds are known compatibility issues that block the upgrade from being deployed to affected devices until the issue is resolved. Enabling this policy can allow an organization to deploy the Feature Update to devices for testing, or to deploy the Feature update without blocking on safeguard holds.
- Enabled: It enables safeguards for Feature Updates.
- Disabled: It disables the safeguards for Feature Updates.
- Not Configured: Same as Disabled.

Limitations
Windows Update for Business reports is a Windows service hosted in Azure that uses Windows diagnostic data. You should be aware that Windows Update for Business reports doesn’t meet US Government community compliance (GCC) requirements.
For a list of GCC offerings for Microsoft products and services, see the Microsoft Trust Center. Windows Update for Business reports is available in the Azure Commercial cloud, but not available for GCC High or United States Department of Defense customers.
Registry File
Using the registry editor, there are ways to Turn on or off Safeguard Holds for Feature Updates in Windows. This procedure is done using the Registry File. Let’s discuss the step-by-step guidelines for it.
Now, open Run Window, and press Windows Key + R from the keyboard simultaneously. This is the keyboard shortcut to open the run window. Now, type regedit and click on OK to continue. Then, it asks the Admin’s permission to change the Device. Click Yes.
- Window Key + R (To open run command)
- Type ‘regedit‘ and press OK
- Administrator Permission press Yes

NOTE! Take Backup—If any mistake occurs in the Registry Editor, it may affect the system. It is advisable to take a backup of the Registry before proceeding. To back up, go to File in the top left corner of the Registry Editor. Click on it, then select Export and save the backup.
- Go to File
- Right-click on HKEY_LOCAL_MACHINE
- Click on Export
- Please save it

Use the .reg file to Enable the safe guard feature updates in Windows. To create a .reg file, open NotePad, type the following code, and name it EnableSafeGuardFeatureUpdates. Then, save it on the desktop using the .reg extension.

When the file is saved at your selected location, double-click on it. The User Account Control Window will open; click Yes to continue. Then, the Registry Editor Waring window will open.
Adding information can unintentionally change or delete values and cause components to stop working correctly. If you do not trust the source of this information in the path you created, do not add it to the registry; otherwise, click Yes to continue.
The following window shows that the key and value you added have been successfully added to the registry editor. Now click on OK and restart your PC to add the applicable test.

Use the .reg file to Disable the safe guard feature updates in Windows. To create a .reg file, open NotePad, type the following code, and name it DisableSafeGuardFeatureUpdates. Then, save it on the desktop using the .reg extension.

When the file is saved at your selected location, double-click on it. The User Account Control Window will open; click Yes to continue. Then, the Registry Editor Waring window will open.
Adding information can unintentionally change or delete values and cause components to stop working correctly. If you do not trust the source of this information in the path you created, do not add it to the registry; otherwise, click Yes to continue.
The following window shows that the key and value you added have been successfully added to the registry editor. Now click on OK and restart your PC to add the applicable test.

Intune Policy
Let’s learn how to Add or Remove All Program Lists from the Start Menu on a Windows device through configuration profiles in Intune. To manage safeguard holds for feature updates in Intune, you can utilize the Update/DisableWUfBSafeguards setting, which is part of the Windows Update CSP.
This setting allows administrators to turn On or turn Off safeguard holds preventing or allowing feature updates to be offered to devices even if there are known compatibility issues. Let’s have a look on the steps to configure the profile in Intune.
- Log in to the Microsoft Intune Admin Center.
- Navigate to Devices > Configuration profiles > Create profile.
- Select Windows 10 and later as the platform.
- Choose Templates as the profile type.
- Select Custom and click Create.
NOTE: Refer to the Intune Settings Catalog policy creation guide to complete the policy creation process – Create Intune Settings Catalog Policy.
Read this guide for more information on Customizing Windows 11 S

After creating a profile, it is time to configure the profile. Now give the profile a descriptive name e.g., Disable Safeguard Holds and then click Next.

In the following the step by step guidelines are indicted to add row, where to provide name, OMA-URI details and also selecting the data type and providing the value.
- Next click Add to open the Add Row page.
- Name: Choose a name e.g., Disable WUfBSafegurards
- OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Update/DisableWUfBSafeguards
- Data type select Integer.
- Value: enter 1 to disable safeguard holds or 0 to enable them.
- Now click on Save.

Now for assign the profile in the Assignments Section, select the device or user groups to which you want to apply this policy then click Next. Then review the configuration and click on Create. There are some important considerations regarding safeguard holds are as follows.
- Safeguard Holds: Safeguard holds are designed to protect devices from feature updates that might cause issues.
- Risk Assessment: Disabling Safeguards should be done with caution and after careful consideration of potential risks.
- Monitoring: After disabling safeguards, it is crucial to monitor devices for any issued related to the feature update.
I hope the information on Turn On and Off Safeguard Holds for Feature Updates in Windows 11 is helpful. Please follow us on the HTMD Community and visit our website, HTMD Forum, if you like our content. Suggest improvements, if any, and we would love to know which topic you want us to explore next.
Sources
- KB5006965: How to check information about safeguard holds affecting your device
- Windows Update for Business reports overview
- Safeguard holds
- Opt out of safeguard holds
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
Alok graduated with a Master of Computer Applications (MCA) degree. He loves writing on Windows 11 and related technologies. He likes to share his knowledge, quick tips, and tricks with Windows 11 or Windows 10 with the community.