EDR: After installing/upgrading to sensor 7.2.0 browsing to a network path produces error 'the specified network name is no longer available'

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Unable to browse to network paths where destination Windows server had freshly installed or upgraded sensor to version 7.2.0 or above

Environment

• EDR sensor: Version 7.2.0 and above
• Microsoft Windows Server 2012

Cause

• A known Microsoft bug with a Windows Filtering Platform (WFP) driver that starts automatically as a system driver causing an Interoperability 
  issue with the sensors Tamper Protection feature

• This issue occurs because of a race condition. Therefore, the WFP driver disrupts the network share access as the computer restarts

Resolution

• Apply the August 2014 Windows update for Windows Server 2012 R2
• If OS update is not possible, downgrade sensor to 7.1.1 or below

Additional Information

• Windows 2012 R1 operating system is no longer supported by Microsoft. The Windows update highlighted in this KB is not available for Windows Server 2012 R1. 
• Sensor version 7.1.1 is no longer support by Carbon Black. The latest 6.1.x version is still supported.