To permanently block Windows 10 from “automatically” (forcing you to) upgrade to Windows 11:

In Windows 10 Pro:

1. GPEDIT
   Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business

2. Edit ‘Select the target Feature Update version’ policy to ‘Enabled’ in the right of the Windows Update for Business folder to edit.
3. Set ‘Which Windows product version would you like to receive feature updates for?’ to WIndows 10
4. Set ‘Target version of Feature updates’ to 21H1 or 21H2 or 22H2 (latest)

In Windows 10 Home: (this REG file can also be used to do the following)

1. REGEDIT
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
2. Add key WindowsUpdate
3. Add new DWORD 32-bit named TargetReleaseVersion and set value to 1
4. Add new String Value named ProductVersion and set value to Windows 10
5. Add new String Value named TargetReleaseVersionInfo and set value to 21H2

This can happen on Windows 7 when TLS hasn’t been updated.

1. Make sure KB3140245 has been installed:
   https://www.catalog.update.microsoft.com/search.aspx?q=kb3140245
   
2. Update the registry:
   https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi

(From: https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392)

During the out-of-the-box setup procedure, stop at the screen where it asks to you select a network and:

1. Press Shift + F10
2. At the cmd window type taskmgr and then enter
3. Expand to more details
4. Find ‘Network Connection Flow’ – right click and choose End task
5. Now go back to Setup and continue to add local account

Here’s a YouTube video that shows this being done:

https://www.youtube.com/watch?v=i3NPilpkC8M