Some of Microsoft’s enterprise-based customers may be feeling cautious about installing the latest Windows 10 update because Microsoft warns that it could stop the Microsoft Defender Advanced Threat Protection (ATP) service from running.
The Update and Warning
The update in question is the October 15, 2019 KB4520062 (OS Build 17763.832). The update contains a long list of improvements and fixes (see here for full details: https://support.microsoft.com/en-us/help/4520062/windows-10-update-kb4520062), but also three known issues, one of which concerns the Microsoft Defender Advanced Threat Protection (ATP) service.
What Is The ATP?
The ATP is a paid-for service, for Microsoft Enterprise customers (not Home or Pro customers) that’s designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. It offers features like endpoint behavioural sensors embedded in Windows 10, Cloud security analytics and access to threat intelligence generated by Microsoft hunters, security teams, and augmented by threat intelligence provided by Microsoft’s partners.
What’s The Issue With the Update?
In the update’s release notes Microsoft says, “We suggest that devices in an affected environment do not install this optional non-security update”.
The reason given for the warning is that installing the update could mean that the ATP service could stop running and may fail to send reporting data. This could mean that certain enterprise customers are more exposed to security threats until a solution has been found.
Microsoft also warns that an error (0xc0000409) may be received in MsSense.exe.
Not Fixed Until November
Microsoft says that although it’s working on a resolution it estimates that it won’t have a solution to the problem until November.
One of Several Update Problems Recently
This is one of several updates from Microsoft recently that have come with problems. For example, an update on the 16th of September was reported to have caused issues with Windows Defender. Later in September, Microsoft had to issue two emergency Windows updates to protect against some serious vulnerabilities relating to Internet Explorer and Windows Defender (anti-virus software).
Also, the October 3 update is reported to have adversely affected the Start Menu and print spooler, and the Start Menu issues were reported to be still present following the 8 October update.
What Does This Mean For Your Business?
Although Home and Pro customers need not worry about this particular issue, Microsoft’s valued Enterprise customers, who have paid for the ATP service to help stay ahead of the game in security may be a little worried and frustrated at having to either wait until November to enjoy the improvements of the new (optional) update in safety, or install it now and risk the loss of their ATP service and face the associated potential security risks.
Microsoft customers seem to have suffered several problems related to updates in recent months, and Enterprise customers are likely to be those that Microsoft particularly does not want to upset. It is likely, therefore, that Microsoft will be focusing of getting an appropriate solution to the new update issues before November if possible.
