Delay the next Windows feature update without losing security patches

There are three realistic choices and each one still receives security patches. Pick the lightest one that solves your problem.

Budget tier:      Pause updates for up to 5 weeks (Settings)
Sweet spot:       Set TargetReleaseVersion to 25H2 (Registry or GPO)
No-compromise:    Managed via WSUS / Intune (business only)

Two settings matter: the **Pause updates** switch in Settings, and the **TargetReleaseVersion** policy. Everything else - metered connections, scheduled restarts, active hours - is marketing for a workaround; it does not block a feature update cleanly.

Matters:   Pause updates, TargetReleaseVersion = 25H2
Ignore:    Metered connection, active hours, 'Get the latest as soon as available' toggle

Open **Settings > Windows Update** and click **Pause for 1 week**. You can repeat this up to five times for roughly five weeks total. This blocks both feature and quality updates during the pause, so only use it as a short holdover.

Settings -> Windows Update -> Pause for 1 week

This is the clean solution. It tells Windows: give me quality updates for 25H2, do not offer 26H2. On Pro/Enterprise use **gpedit.msc** under Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from Windows Update > Select the target feature update version. On Home, set the same values via the registry.

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersion /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v TargetReleaseVersionInfo /t REG_SZ /d "25H2" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ProductVersion /t REG_SZ /d "Windows 11" /f

After applying the policy, open **Settings > Windows Update** and click **Check for updates**. You should see monthly cumulative updates (KB numbers starting with KB50) continue to install. Only the feature update to 26H2 is held back.

winver

Skip third-party "update blocker" utilities. They usually disable the Windows Update service, which also stops security patches and Defender definitions. Skip the "Show or hide updates" troubleshooter trick - it does not persist across reboots on current builds.