Update Windows With an Agent Installed

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Upgrade or patch the Microsoft Windows operating system with an App Control Agent installed.

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

Support for upgrading the operating system while an Agent is installed will depend on which version of Windows is currently installed, and which version of Windows is being installed.

Pre-Windows 10 versions, service packs:
Service pack upgrades for pre-Windows 10 releases are supported with an Agent installed, and do not cause Health Check failures.

Pre-Windows 10 versions, major and minor version changes:
Changing the major or minor version of Windows with an Agent installed is not supported for upgrades to any pre-Windows 10 version. The Agent must be uninstalled prior to the upgrade, and installed after the upgrade. Failure to do so will produce a Health Check failure. As an example; upgrading from Windows 8.0 to Windows 8.1 with an Agent installed is not supported.

Windows 10 versions prior to the Anniversary Edition (August 2016):
Upgrading from another major or minor version (such as Windows 8 or 8.1) to a version of Windows 10 prior to the Anniversary update is not supported with an Agent installed.

Windows 10, Anniversary update and later:
Upgrading to Windows 10 Anniversary Update (August 2016) and later Windows 10 releases can be done with an Agent installed, as long as the requirements below are met:

• Trusted Directory approval of WIM files must be enabled & configured.
• Agent Exclusions must be added to any other antivirus or security product (including Windows Defender).
• It is recommended to verify the Windows Defender Updater (Rules > Software Rules > Updaters) is enabled.

Additional Information

• Updating the operating system to a version with a different major, minor or build number (for example, if any of the numbers in 10.0.35 change) with the Agent in place will require a Cache Consistency Check be run automatically after the update.
• Verify the version of the operating system being deployed is currently supported by the Agent by visiting the App Control Documentation > Agent Documentation > Windows Agent OER.
• More details can be found in the User Guide section, "Operating System Updates on Windows Agents".