/
/

How to Enable or Disable “Do not Include Drivers with Windows Updates” in Windows 11

by Miguelito Balba, IT Editorial Expert
How to Enable or Disable “Include Drivers with Windows Updates” in Windows 11 blog banner image
How to Enable or Disable “Include Drivers with Windows Updates” in Windows 11 blog banner image

Key Points

  • Block hardware driver installs from Windows Update using the Settings app, Group Policy, the Registry, or PowerShell.
  • Confirm your Windows 11 edition first: Group Policy is available on supported Pro, Enterprise, Education, and IoT Enterprise editions, while other management methods may depend on your Windows edition and environment.
  • Use the Registry method when you need to configure the underlying policy value directly. It mirrors the Group Policy setting, although Microsoft documents the corresponding policy for supported Pro, Enterprise, and IoT Enterprise editions.
  • Exclude driver updates from the normal Windows quality-update cycle to protect validated OEM configurations, prevent unwanted driver changes, and maintain tested driver versions across managed fleets.
  • Check WSUS, Intune, or Windows Autopatch policies before troubleshooting, since driver delivery may already be controlled through centralized update policies.

For user convenience, Windows 11 can also deliver applicable hardware driver updates through Windows Update as part of its normal update. While the main intention is ease and efficiency, some system administrators may want greater control over driver management.

This preference is evident in enterprise environments, so understanding how to manage “Do not include drivers with Windows Updates” is vital for those who manage endpoints at scale or where administrators prefer OEM-supplied drivers. In this guide, we’ll explain several methods to enable or disable the “do not include drivers with Windows Updates” setting.

For a visual guide, watch our video on how to enable or disable “Do not Include Drivers with Windows Updates” in Windows 11.

How to manage “Do not include drivers with Windows Updates”

Before you proceed, here are some requirements your system should meet:

  • Administrative rights. Administrator privileges are required for Group Policy or Registry changes.
  • Group Policy Editor availability. The Group Policy Editor is available only on supported Windows 11 Pro, Enterprise, Education, and IoT Ensure you’re using a supported edition before proceeding with the Group Policy method.
  • Windows Update. Determine if driver updates are managed locally or through Windows Update policies, WSUS, Intune, or Windows Autopatch, since centrally managed policies can affect or override local driver-update behavior.
  • Policy refresh. After making changes, you can restart the system or run gpupdate /force to refresh Group Policy before verifying the configuration.

Method 1: Using the Settings app (limited availability)

This option is only partially visible in the Device installation settings dialog on some builds.

  1. Press the Windows key + R, type:  control /name Microsoft.DeviceInstallation
  2. In the Device Installation Settings window, select:
    • Yes (recommended) – to allow driver downloads with updates
    • No – to block drivers from being included

Method 2: Enable or disable via Group Policy (recommended for Enterprise)

This method is most effective for domain-joined or managed devices.

  1. Open the Group Policy Editor by pressing the Windows key + R. Type gpedit.msc and press Enter.
  2. Navigate to: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from Windows Update
  3. Locate and double-click Do not include drivers with Windows Updates
  4. Set the policy to:
    • Enabled – Prevents Windows Update from including drivers.
    • Disabled or Not Configured – Allows drivers to be installed via Windows Update.
  5. Click Apply, then close the Group Policy window.
  6. Open Command Prompt as Administrator and run: gpupdate /force

Note: This setting is limited only to Windows 11 Enterprise editions.

Method 3: Using the Registry Editor

This method is equivalent to the Group Policy setting and works on all editions of Windows.

  1. Open the Registry Editor by pressing the Windows key + R. Type regedit and press Enter.
  2. Navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    • If the WindowsUpdate key does not exist, create it manually.
  3. Right-click in the right pane and create a new DWORD (32-bit) Value named:
    ExcludeWUDriversInQualityUpdate
  4. Set its value to:
    • 1 = Disable driver updates through Windows Update
    • 0 = Enable driver updates
  5. Close the Registry Editor and reboot your PC.

Method 4: Verifying and applying via PowerShell

PowerShell can be used to verify and deploy the policy, which is especially helpful in scripts or automated system configurations.

  1. Press the Windows key and type PowerShell.
  2. From the search results, right-click PowerShell and choose Run as administrator from the context menu.
  3. Run the following:
    • To check the current setting:
      Get-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate”
      -Name ExcludeWUDriversInQualityUpdate
    • To apply the setting via script:
      Set-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate” `
      -Name ExcludeWUDriversInQualityUpdate -Type DWord -Value 1

This approach is ideal for enterprise deployments or configuration tasks managed via Intune, SCCM, or endpoint scripts.

Why manage driver delivery via Windows Update?

System administrators may want better control over how Windows includes hardware driver updates when pushing updates through the Windows Update platform. Other than that, here are some of the most common reasons why they prefer to manage driver delivery.

  • System administrators may want to halt Windows from replacing a manufacturer-tuned driver with a generic one. Managing driver delivery via Windows Update helps prevent the automatic overwriting of custom or OEM drivers.
  • Generic driver updates may not have been thoroughly tested for specific hardware configurations. Disabling automatic driver updates helps avoid instability caused by generic driver updates.
  • Enterprises often validate specific driver versions before deployment. Managing delivery allows IT teams to lock in tested versions across devices.
  • Controlling driver updates helps reduce driver-related issues in production environments or during upgrade cycles.

Additional considerations for changing driver updates in Windows Updates

There are factors you need to consider first when managing “Do not include drivers with Windows Updates” settings:

  • When using WSUS or Intune: Devices configured to receive updates from WSUS may already have driver delivery suppressed and controlled via centralized policies, deeming the registry or GPO settings dysfunctional. Microsoft has indefinitely delayed its plan to deprecate WSUS driver synchronization, so WSUS-based driver delivery is still supported; organizations moving away from WSUS can use Intune or the Windows Update for Business deployment service instead.
  • With OEM drivers: Always validate OEM or critical driver versions before allowing Windows to update them.
  • Audit environment: Utilize Get-WindowsUpdateLog or Event Viewer to check if unwanted driver updates were installed.
  • Driver control: Combine the “Do not include drivers with Windows Updates” setting with Device Installation Restrictions in GPO for maximum driver policy enforcement.

Quick-Start Guide

NinjaOne’s patch management tool includes a driver scanning option as part of its Windows Update management. Specifically, the documentation notes that a typical Windows Patch Management (WPM) scan cycle includes:

  • A scan for recommended updates
  • A scan for Optional updates and Feature Updates (if enabled)
  • A scan for Drivers (if enabled)

Key points about driver updates:

  • You can configure driver update settings at the policy level in NinjaOne
  • The patch management tool uses the Windows Update Agent API to detect and manage updates
  • Drivers can be approved, rejected, or set to manual approval in the policy settings

Managing “Do not include drivers with Windows Updates” setting

Maintaining driver consistency is enhanced when system administrators have appropriate control over whether Windows Update delivers drivers. This policy, which can streamline IT workflow, can be configured via Group Policy, the registry, and limited GUI methods depending on the environment.

Group Policy remains useful for enforcing driver exclusion in locally or domain-managed environments. Meanwhile, the Registry Editor can be utilized for direct or scriptable policy configuration. Additionally, system administrators can validate driver installation behavior via PowerShell or Windows logs. Applying any of these, along with other driver policies, can help restrict unauthorized driver modifications.

FAQs

No. Enabling this policy excludes Driver-classified updates from the normal Windows quality update cycle. Windows security and quality updates continue to be offered normally, since they’re a separate classification from drivers and aren’t affected by this policy.

Microsoft documents this policy for supported Windows 11 Pro, Enterprise, Education, and IoT Enterprise editions. Windows 11 Home does not include the Local Group Policy Editor, and Microsoft does not list Home among the supported editions for this policy.

It depends on how driver updates are centrally managed. WSUS, Intune, Windows Autopatch, Group Policy, and MDM settings can all affect driver-update behavior. Check for existing or conflicting update policies before applying local Registry or Group Policy changes.

No. The policy excludes driver update packages from the normal Windows quality update cycle, but it doesn’t cover every path a driver can arrive through. Windows may still install drivers required to complete a feature update, and some driver types have been reported to bypass this policy during major updates.

Yes. Microsoft Intune provides dedicated Windows driver update policies that let administrators centrally review, approve, and deploy applicable driver and firmware updates. These policies can use automatic or manual approval workflows and work with Windows Autopatch and Windows Update.

You might also like

Ready to simplify the hardest parts of IT?