Can't install Windows Updates if ENS is installed

[RenaldVachon]

For some reasons, if ENS is present, I can't get the cumulatives updates for Windows 10 - 1809 to install. Whenever I remove ENS, it goes without a problem. I have the same problem with a Windows 10 - 1903.

SoftwareDistribution folder and subfolders are in the exclusions list. ENS platform is 10.7.0.1285.

Any clue on the course of action to take?

[YashT · Accepted solution]

Hello @RenaldVachon ,

This should help : Windows fails to apply updates with Endpoint Security installed
Technical Articles ID: KB89402

Workaround
Within ePolicy Orchestrator, modify the policy managing the system to disable Access Protection and Self Protection until the updates are complete. Then, revert the changes to re-enable Access Protection and Self Protection.

[AdithyanT]

Hi @RenaldVachon,

Thanks for your post. Can you kindly please help me with the KB number of the update you are trying to install?

Is it KB4524244 ?

[RenaldVachon]

@YashT I've disabled the Access Protection by modifying the policy. It works, so I've been able to get the updates to install correctly on a machine.

After more search in the logs, it looks like a rule was set to block the .scr type of file. Disabling that rule lets the update install. I guess it's a matter now of creating an exclusion for this particular file in the access protection policy.

@AdithyanT The update is the KB4532695 for computers under Windows 10-1903 and KB4534273 for computers under Windows 10-1809

[YashT]

Hello @RenaldVachon ,

I am glad that now the updates are working fine with the exclusion and temporarily disabling access  protection till it updates. 🙂