You want to automatically update (perform feature update on) your Windows 10 (1607) or later client computers encrypted with Symantec Encryption Desktop to a supported Windows 10 release without decrypting the drives.
If you want to upgrade your encrypted computers to a Windows 10 release from an earlier Windows release (7, 8, 8.1, 10) manually or using the Symantec provided upgrade scripts, see the Symantec Support article at https://support.symantec.com/us/en/article.howto128174.html.
Starting with Windows 10, Microsoft packages new features into "feature updates" and offers them through Windows Update for Windows 10 users.
Starting with version 10.4.2 MP3, Symantec Encryption Desktop uses the Windows Setup Automation functionality and allows the Windows feature updates to automatically install and update the encrypted systems to a newer version of Windows 10 without decrypting the drives.
When installed, Symantec Encryption Desktop 10.4.2 MP3 automatically configures the SetupConfig.ini (configuration file). Later, when Windows feature updates are ready to install, the Windows setup.exe uses the parameters from the Setupconfig.ini file to install the feature updates on the encrypted computers.
For more information on Windows Setup Automation functionality, refer to the Microsoft article titled Windows Setup Automation Overview, available at https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-setup-automation-overview.
Note: Before you install or upgrade to Symantec Endpoint Desktop 10.4.2 MP3, ensure that the Windows updates are not being downloaded or not being installed on the client computer.
If the Windows feature update fails on computers encrypted with Symantec Encryption Desktop 10.4.2 MP3, administrators can do the following:
If you do not want to update your encrypted computers automatically using the Windows Setup Automation functionality, do the following: