How to set a policy to prevent Azure AD joined Windows 10 machines from upgrading to Windows 11?

[OneTechBeyond]

Can anyone recommend the best method for being able to block end users on Azure AD Joined Windows 10 Pro/Business machines from being able to initiate the Windows 11 update?