Prohibit flyweight patching
Verified with Windows 11 25H2 — updated on July 30, 2026
Supported on: Windows Installer v3.0
Path in the GPO console
Computer Configuration\Administrative Templates\Windows Components\Windows Installer Description
This policy setting controls the ability to turn off all patch optimizations. If you enable this policy setting, all Patch Optimization options are turned off during the installation. If you disable or do not configure this policy setting, it enables faster application of patches by removing execution of unnecessary actions. The flyweight patching mode is primarily designed for patches that just update a few files or registry values. The Installer will analyze the patch for specific changes to determine if optimization is possible. If so, the patch will be applied using a minimal set of processing.
Registry
HKLM
Software\Policies\Microsoft\Windows\Installer MDM / Intune (CSP)
./Device/Vendor/MSFT/Policy/Config/ADMX_MSI/DisableFlyweightPatching Microsoft Learn documentation Mapping data: Microsoft Learn (CC BY 4.0)
Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Prohibit flyweight patching
; State: Enabled
; Supported on: Windows Installer v3.0
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer]
"DisableFlyweightPatching"=dword:00000000More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
$path = 'HKLM:\Software\Policies\Microsoft\Windows\Installer'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DisableFlyweightPatching' -Value 0 -Type DWordIntune XML
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/ADMX_MSI/DisableFlyweightPatching
Data type: String
Value:
<enabled/>
<data id="DisableFlyweightPatching" value="0"/>Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Windows\Installer' -Name 'DisableFlyweightPatching' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
$path = 'HKLM:\Software\Policies\Microsoft\Windows\Installer'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DisableFlyweightPatching' -Value 0 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Windows\Installer' -Name 'DisableFlyweightPatching' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Prohibit flyweight patching
# State: Enabled
# Supported on: Windows Installer v3.0
$path = 'HKLM:\Software\Policies\Microsoft\Windows\Installer'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DisableFlyweightPatching' -Value 0 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.