Solved Windows 11 optional Driverupdate has a bios 1720 for my board - Seems wrong?

[DudeDK]

In my MSI Z690 BIOS, I have a setting to present downgrade my BIOS ..

Me too, but I don't think it will prevent an update delivered through the OS. I think it's only for the EZ-bios update.

 

[DudeDK]

DO NOT INSTALL A BIOS UPDATE OFFERED IN WINDOWS UPDATE

I've had terrible experiences with that, especially since they love to mess with secure boot settings and even set supervisor passwords that you need to reset after to get back control over your system.

Hide it using Windows Update Mini Tool, or block driver updates entirely, you are risking yourself to be left out of your BIOS configuration interface (Unless you reset the supervisor password with generators online... is a true mess).

If you absolutely need to update your BIOS, go to your vendor's site and install an update from there.

Do not let Microsoft handle that for you, they could even potentially brick your system.

Exactly, that's why having this optional biosupdate lurking is scary. What if MS decides that it's to important to be optional, even though that bios are older than dinos. After all, MS do make crazy mistakes from time to time.

 

[DudeDK]

yes, I hate it very bad when MS windows stick their nose in my motherboard files... stay out! you can't do anything right, stay out of my motherboard! they try b.s. like that with my Asus motherboard.

Exactly, bios updates should not even be a part of windows update imo.

 

[DudeDK]

I have the exact same board. BIOS v. 4505 will give you every updated Secure Boot certificate. Just something to consider.
And I've never had Windows Update offer me a bios update, so I'm surprised they offered you one, and a very old one at that.

They don't actively offer it, but they have it lurking in "windows update/advanced options/optional updates/Driver updates" have you looked there?

I know it's posted as optional, but a tired MS-dev could probably at some point make it important by accident. That is scary.

 

[bobkn]

This is a bit off to the side, but do you have Armoury Crate installed? Do you have its autoinstall enabled in the BIOS settings?

 

[garlin]

Exactly, bios updates should not even be a part of windows update imo.

BIOS updates are offered, because your OEM provided them to MS. There is a supported mechanism for vendors to package a BIOS update in a "capsule" format, and have Window execute the update by rebooting into an EFI tool. This replaces the proprietary flashing tool with a MS-provided app.

MS doesn't force the vendors to provide BIOS updates, your OEM volunteered it.

 

[DudeDK]

This is a bit off to the side, but do you have Armoury Crate installed? Do you have its autoinstall enabled in the BIOS settings?

No, never had it installed. Not a big fan of tools like that. And it has been disabled in bios from the start.

 

[DudeDK]

BIOS updates are offered, because your OEM provided them to MS. There is a supported mechanism for vendors to package a BIOS update in a "capsule" format, and have Window execute the update by rebooting into an EFI tool. This replaces the proprietary flashing tool with a MS-provided app.

MS doesn't force the vendors to provide BIOS updates, your OEM volunteered it.

My rig is build by me, so it's not OEM, all parts retail, even the OS :) . I still don't get why the OS is ignoring that the Bios installed are way newer.

 

[DudeDK]

Seems odd that Windows Update is offering firmware that is older than what you have installed.

I suggest using the Group Policy Editor to block all automatic driver updates. (A BIOS update is treated as a driver update.)

Enable or Disable Include Drivers with Windows Updates in Windows 11

This tutorial will show you how to enable or disable including drivers with Windows Updates in Windows 10 and Windows 11. Windows Update will include drivers when available in Windows 11 by default. You can enable the Do not include drivers with Windows Updates policy to not include drivers...

www.elevenforum.com

I'll give this solution a go.


Thank you to all who chipped in, it's really appreciated.

Hope you all get a nice weekend.

 

[garlin]

My rig is build by me, so it's not OEM, all parts retail, even the OS :) . I still don't get why the OS is ignoring that the Bios installed are way newer.

ASUS is the OEM. Just because it's not a factory PC, doesn't mean ASUS won't supply a BIOS.

 

[Helmut]

All you have to do is update the BIOS to 4505 dated 15.12.2025, check, double check, and PC in good working order before you do so.
You have obviously done this probably several times before. Just leave the optional 1720 lounge there, it will probably go away once diagnostics have been sent to Microsoft.
It is up to you, use the ASUS updater, or do it manually.

My rig is build by me, so it's not OEM, all parts retail, even the OS :)

A desktop PC is a modular design, each module is OEM - MOBO, RAM modules, Graphics Card, Cooler, fans, case, etc. You assembled OEM premade modules in to your PC, You are the OEM of your assembled PC.

 

[Scott]

in "windows update/advanced options/optional updates/Driver updates" have you looked there?

Turns out I don't have a "Driver Updates" section.



Might be because I have this enabled

 

[DarkShadowMD]

In my ignorance, I'm surprised that MS modifies a firmware update that it is passing through from Asus.

Probably I should clarify that I'm talking about my old Acer laptop... it's not Asus, but the same principles apply TBH, I would only trust the manufacturer website for it...

 

[DarkShadowMD]

Exactly, that's why having this optional biosupdate lurking is scary. What if MS decides that it's to important to be optional, even though that bios are older than dinos. After all, MS do make crazy mistakes from time to time.

There's also this if you are positive about their updates: If you don't have a UPS or an alternative way to power your system, and they think it's time to update your BIOS, and power just goes off, they will basically bricking your system, because they pushed an update they shouldn't push without any type of safeguard.

I am more inclined to seek for updates in my manufacturer's website and install if needed. And even there, I just update BIOS if it's A MUST... Things are expensive today to just risk your backside and brick your PC. I don't like to update BIOS, I just did it recently in February for the Secure Boot Armaggedon... fortunately all works perfectly and system is updated. No more BIOS updates for me unless it's absolutely necessary, and ONLY from my vendors website.

So no, Microsoft, thank you, I'll hide firmware updates for my HP until the end of time.

Again, is a good idea to use Windows Update MiniTool to hide updates, that way you can safely update windows without risking a sneaky BIOS update.