Go to Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Windows Update for Business.Open the Local Group Policy Editor ( gpedit.msc).You can configure the target version using GPO or through the registry: After that, you will have to set a new target build, otherwise, Windows will be automatically updated to the latest available build within 60 days. You will receive all security updates for your target Windows version until the end of support. In Windows 10, you can specify a target version (build number) that will be used on your computer and not automatically updated. However, you may bypass all hardware checks during Windows 11 installation. If the computer does not have a TPM chip and the UEFI+Secure Boot mode is not available, the device is considered unsupported for installing/upgrading to Windows 11.
