CB Response: Sensor will not upgrade Error: CarbonBlackK driver present and did not stop in timely manner. Aborting install

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Attended upgrade fails with error: "CarbonBlackK driver present and did not stop in timely manner. Aborting install"
• Upgrade via SCCM fails
• Manually running `sc stop carbonblack` results in a permission denied result
• `sc query carbonblackk` shows the driver in a "STOP PENDING" state

Environment

• CB Response Sensor: All Versions
• Microsoft Windows: All Supported Versions
• GPO 

Cause

GPO settings prevent users from stopping the services

Resolution

The account used to upgrade the service must have sufficient permissions to stop Carbon Black services