cancel
Showing results for 
Search instead for 
Did you mean: 

Windows Updates with Application Control without entering update mode

Jump to solution

I am running Application Control (currently trial version) on my Windows 10 LTSB system and am wondering if there is away to allow for Windows updates on the system without the user entering update mode. I am looking for something similar to certificate based updates for applications where you can just add a trusted certificate. Is there anything like that for Windows OS updates? Thanks!

1 Solution

Accepted Solutions
Reliable Contributor wouterr
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Windows Updates with Application Control without entering update mode

Jump to solution

for standalone solidcore use the finetune.bat tool and run following command:

finetune.bat ADD u-WindowsUpdate 

which you can find here: "C:\Program Files\McAfee\Solidcore\finetune.bat"

 

for epo managed click "Add" in you application control rule" policy

5 Replies
Reliable Contributor wouterr
Reliable Contributor
Report Inappropriate Content
Message 2 of 6

Re: Windows Updates with Application Control without entering update mode

Jump to solution

Hi,

 

there is a predefined rule group called "windows Update" which you can add to your Appcontrol policy which will allow you to install windows updates in enabled mode. 

Highlighted

Re: Windows Updates with Application Control without entering update mode

Jump to solution

Thank you! Do you know how I can add this rule group to my whitelist? I am searching the documentation for it now.

Reliable Contributor wouterr
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: Windows Updates with Application Control without entering update mode

Jump to solution

for standalone solidcore use the finetune.bat tool and run following command:

finetune.bat ADD u-WindowsUpdate 

which you can find here: "C:\Program Files\McAfee\Solidcore\finetune.bat"

 

for epo managed click "Add" in you application control rule" policy

Re: Windows Updates with Application Control without entering update mode

Jump to solution

Hmm sadly this did not work Smiley Sad the command seemed to run successfully and after a reboot and even resolidify-ing the drive, my Windows updates are still unable to install. Looking in the Windows event logs it looks like McAfee is still blocking the update. Is there any other step I need to take?

Re: Windows Updates with Application Control without entering update mode

Jump to solution

Looks like it did work after all! I just needed to change some firewall settings.

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.