Win-10 Update issue and Group Policy

nkaufman · 08 Oct 2018

Hello,

Had followed a tutorial on this forum and installed Win-10 and set up Data Partition on D:\.

Did Win-10 update v.1803 some time back and got the following error:
Update for Windows Defender antimalware platform - KB4052623 (Version 4.18.1809.2)
Failed to install on ‎10/‎8/‎2018 - 0x8024001e

Clicking on the above (it was a link) led me to:
https://support.microsoft.com/en-us/...lware-platform

that mentions:
Because of a change in the file path location in the update, many downloads are blocked when AppLocker is enabled. To work around this issue, open Group Policy, and then change the setting to Allow for the following path:%OSDrive%\ProgramData\Microsoft\Windows Defender\Platform\*

Any ideas how to do the above? Detailed steps?

Thanks,

dalchina · 09 Oct 2018

Hi, not come across this so hope someone else may be able to help.

Winaero says this:
Microsoft has changed where Windows Defender is installed
(I simply searched using part of your error message)

What version of Windows 10 do you have? (See below)

Found:
AppLocker (Windows 10) | Microsoft Docs

AppLocker policies can only be configured on and applied to computers that are running on the supported versions and editions of the Windows operating system.

AppLocker is included with enterprise-level editions of Windows. You can author AppLocker rules for a single computer or for a group of computers.

You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016.

Requirements to use AppLocker (Windows 10) | Microsoft Docs

This appears to be an IT managed feature via Group Policy.

This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies.

This guide provides steps based on your design and planning investigation for deploying application control policies by using AppLocker. It is intended for security architects, security administrators, and system administrators. Through a sequential and iterative deployment process, you can create application control policies, test and adjust the policies, and implement a method for maintaining those policies as the needs in your organization change.

nkaufman · 09 Oct 2018

Hello,
Using Win-10 Pro - So didn't understand why I'm facing this issue that is related to AppLocker under Win-10 Enterprise.

I don't use Win Defender, use Avast.

I do have auto Win Update disabled under Group Policy.

Thanks,

dalchina · 09 Oct 2018

There is a bare ref. to Applocker and Pro here, with some evident confusion:
Compare Windows 10 Editions - Page 2 - | Windows 10 Tutorials

You might try searching the forum for any other refs, and wait for someone else to comment- I've stayed on 1709 for a while.

nkaufman · 09 Oct 2018

Thanks for your assistance.

Windows did get updated to 1803 it seems. Only Windows Defender shows the issue as I described in the original post.

Just trying to find out the resolution just in case this situation occurs again.

I do see AppLocker on my Win-10 Pro but there are no rules, nothing configured..

dalchina · 10 Oct 2018

Windows 10 AppLocker Policies still affect after disabling the service - IT-Pirate

This gives lots of detail which may help you resolve this.

Simpler overview:
Setting Application Control Policies with Microsofts AppLocker - Petri