Encrypted PC gets BSOD after installing Windows updates

Products

• Endpoint Encryption

Issue/Introduction

Lenovo T450 and T460 laptops running Windows 10 Anniversary Edition 1607 get a BSOD after installing some Windows updates.
The updates being installed are:
KB4016635 -  Cumulative Update for Windows 10 Version 1607 for x64-based Systems
KB890830 - Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - March 2017
KB4014329 - Security Update for Adobe Flash Player for Windows 10 Version 1607 (for x64-based Systems)
KB4013418 - Update for Windows 10 Version 1607 for x64-based Systems
KB4013867 - Security Update for Microsoft Silverlight
Office 365 Client Update - First Release for Current Channel (1702-3) 64-bit Edition

Environment

Symantec Endpoint Encryption 11.1.2
Lenovo T450s & T460s
Windows 10 anniversary edition 1607

Resolution

None, this has been referred to our Engineering team for review.

Workaround: 
1. Boot into Safe Mode.
2. Disable the SEE client service.
3. Boot into Windows.
4. Re-enable the SEE client service.

After this the computer may boot normally, i.e. PBA > Windows.
This workaround is not 100% successful.