How to temporarily block installation of the .NET Framework 4.7

This article describes how to temporarily block the installation through Windows Update of the .NET Framework 4.7 and its corresponding language packs on all supported platforms.

The .NET Framework 4.7 is an in-place upgrade to versions 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 of the .NET Framework.

Some customers may have a business requirement to block the automatic installation through Windows Update of the .NET Framework 4.7 in their managed environments. This article describes how to perform this blocking action.

Note After you complete the steps in the "Resolution" section, the .NET Framework 4.7 and its corresponding language packs will no longer be offered through Windows Update.

The .NET Framework 4.7 is available through Windows Update and Windows Server Update Services (WSUS). The .NET Framework 4.7 is categorized as a recommended update on these platforms.

Note For security, stability, reliability, and servicing, we recommend that you do not maintain this block for an extended time.

1. Back up the registry.
2. Start Registry Editor. To do this, click Start, type regedit in the Start Search box, and then press Enter.
3. Locate and click the following subkey:
   
   HKEY_LOCAL_MACHINE\Software\Microsoft\NET Framework Setup\NDP
4. After you select this subkey, point to New on the Edit menu, and then click Key.
5. Type WU, and then press Enter.
6. Right-click WU, point to New, and then click DWORD Value.
7. Type BlockNetFramework47, and then press Enter.
8. Right-click BlockNetFramework47, and then click Modify.
9. In the Value data box, type 1, and then click OK.
10. On the File menu, click Exit to exit Registry Editor.

Note Organizations do not have to modify the registry in environments that are managed through an update management solution, such as Microsoft WSUS or System Center Configuration Manager. Organizations can use these products to fully manage the deployment of updates that are released through Windows Update or Microsoft Update. The procedure that's discussed in this article is necessary only for computers that directly connect to and receive updates from Windows Update.