How to Fix 'Windows 11 26H2 Upgrade Says Installation is Blocked by Policy'

If your Windows 11 26H2 upgrade is blocked by policy, it indicates that certain group policy settings are preventing the installation. This is common in corporate environments or on personal devices that have specific configurations. Fortunately, there are steps you can take to troubleshoot and resolve this issue.

What Does 'Blocked by Policy' Mean?

Seeing the message that the installation is blocked by policy means your system's group policy settings are restricting the upgrade. This usually occurs in managed environments, such as corporate networks, where IT administrators enforce policies for software installations. Common reasons for this blockage include restrictions against upgrading to a new version, mandatory settings for specific updates, or requirements to maintain a certain configuration before proceeding with an upgrade.

Before You Start

Ensure that you have administrative privileges on your device, as modifying group policies requires such access. Additionally, confirm that your Windows 11 installation is eligible for the 26H2 upgrade and that there are no pending updates that need to be installed before proceeding with this upgrade.

How to Check Group Policy Settings

To determine if group policy settings are causing the upgrade block, follow these steps:

1. Press Windows + R to open the Run dialog.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor.
3. Navigate to the following path: Computer Configuration > Administrative Templates > Windows Components > Windows Update.
4. Review the policies listed in this section for any settings that might restrict upgrades, such as 'Select when Preview Builds and Feature Updates are received' or 'Turn off the upgrade to the latest version of Windows'.

If you find any relevant policies, take note of them for the next steps.

How to Modify Group Policy Settings

If you identified any group policy settings that may be blocking the upgrade, modify them as follows:

1. In the Local Group Policy Editor, locate the policy you noted earlier.
2. Double-click the policy to open its properties window.
3. Change the setting to 'Not Configured' or 'Disabled' as appropriate.
4. Click Apply, then OK to save the changes.
5. Close the Group Policy Editor.

After modifying the policies, restart your computer to ensure the changes take effect.

What to Do If Modifying Policy Doesn’t Help

If changing the group policy settings does not resolve the issue, you can try these alternative solutions:

• Run the Windows Update Troubleshooter: 1. Go to Settings > Update & Security > Troubleshoot. 2. Select Additional troubleshooters and then Windows Update. 3. Click Run the troubleshooter and follow the prompts.

• Reset Windows Update components:

  1. Open Command Prompt as Administrator.

  2. Enter the following commands one by one:

     net stop wuauserv
     net stop cryptSvc
     net stop bits
     net stop msiserver
     net start wuauserv
     net start cryptSvc
     net start bits
     net start msiserver

  3. Restart your computer.

Verifying Successful Upgrade

After completing the above steps, you can verify if the upgrade was successful by checking your system information:

1. Press Windows + R, type winver, and press Enter.
2. A window will appear showing your current Windows version.

You should see that your system is now running Windows 11 26H2. If the upgrade is still unsuccessful, consider reaching out to your IT department (if applicable) or checking Microsoft's support resources for further assistance.

Conclusion

If you continue to experience issues after trying these steps, it may be necessary to consult with IT support or refer to Microsoft’s official documentation for additional troubleshooting resources.