Microsoft blames 'latent code issue' after Windows 11 upgrades sneak past admin blockades

Intune policies turn out to be mere suggestions

Microsoft has admitted some users are being offered Windows 11 upgrades despite Intune policies configured otherwise.

The problem, according to the mega-corp's advisory on the issue, is that "a recent service change uncovered a latent code issue, causing impact." Not all users are affected, but those who are will see an invitation to upgrade to Windows 11 regardless of how their IT admins have configured Intune, Microsoft's own PC management tool. We asked Microsoft for more details, and will update the article should the biz respond.

According to one Register reader: "We have thousands of devices affected. Users are definitely not kicking it off themselves and the affected devices are 100 percent excluded from the policy, but somehow appear not to be."

Users who received the Windows 11 upgrade will need to be manually rolled back to the correct Windows version. As a workaround, Microsoft recommends administrators in affected orgs pause Windows Feature Updates until the Azure titan can deploy a fix.

As of Wednesday, Microsoft said: "We've completed the development, testing and validation process for our targeted code fix and are deploying it in an effort to prevent additional impact and resolve the code issue."

Folks might remember the Windows Server 2025 incident from November 2024, when the new operating system was inadvertently published as a security update and was dutifully installed by patch management services before horrified administrators could dive for the off button.

This latest SNAFU, which has yet another bit of dodgy code at its root, has taken Windows 11 as a feature update and bypassed Intune policies to prevent installation. Unlike the Windows Server 2025 fiasco, this appears to be going through Microsoft's own management platform.

Imagine the surprise of sitting down in front of your Windows PC and finding a whole new operating system waiting for you. We can only offer our sympathy to affected helpdesks and administrators.

As for Microsoft, the root cause of "a latent code issue" is troubling. The question must be asked: What other "latent code issues" might still be hiding in its stack, waiting to trigger another outage or quietly push unwanted updates onto customer devices?

Thanks to Register reader Gerry for the tip. Feel free to let us know your Microsoft woes, too, as and when they crop up, in confidence if you wish. ®