Forum Discussion

LayneMoody's avatar
LayneMoody
Copper Contributor
Nov 28, 2024

How do I just block/prevent the Secure Boot update, without going into the BIOS?

Event viewer is populated with many Error messages, that "The Secure Boot update failed to update a Secure Boot variable with error Secure Boot is not enabled on this machine."

Searching how to prevent/block this update only shows results such as for disabling or enabling Secure Boot in the BIOS (or, sometimes on answers.microsoft.com, its typical recourse to doing a repair or clean install). However, I cannot find anyway on how to block/prevent this update. Of course, I find MS still trying to install updates even though they have been paused for 35 days.

2 Replies

  • KennethAdams's avatar
    KennethAdams
    Copper Contributor

    Group Policy Editor:

    Press Win + R, type gpedit.msc, and hit Enter.

    Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.

    Find and enable the setting called Do not include drivers with Windows Updates.

  • Use Microsoft's official tool Wushowhide to hide Secure Boot-related updates, or directly pause updates in Windows Settings.

Resources