• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE file paths are not supported.
  • HIPS / Firewall / Application Control. File paths fore rules are case insensitive.
• Installing and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.
• Case-sensitive paths to files are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems: 
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems: 
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line

Limitations of updating the operating system on computers with KES11.1.0 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems: 
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems: 
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• File Level Encryption (FLE) components are not supported.

Limitations of updating the operating system on computers with KES11.0.1 KES10 SP2 MR4, SP2 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) and Windows 10 October 2018 Update (Redstone 5) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to May 2019 Update (19H1) .
• After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems: 
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems: 
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• On Hyper-V virtual machines, the system may crash if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
• File Level Encryption (FLE) components are not supported.

Limitations of updating the operating system on computers with KES11, KES10 SP2 MR2 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) and Windows 10 October 2018 Update (Redstone 5) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to May 2019 Update (19H1) .
• After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
  • for KES11
  • for KES10

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• File Level Encryption (FLE) components are not supported.
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• On Hyper-V virtual machines, the system may crash if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Upgrade limitations on computers with KES10 SP1 MR4 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) and October 2018 Update (Redstone 5) is supported.
• If the FDE encryption component or the Device Control component is installed on the computer, then upgrading to May 2019 Update (19H1) is not supported.
• After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to the May 2019 Update (19H1) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE file paths are not supported.
  • HIPS / Firewall / Application Control. File paths fore rules are case insensitive.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.

Limitations of updating the operating system on computers with KES11.1.0 and 11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES11.0.1, KES10 SP2 MR4, SP2 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), and Windows 10 April 2018 Update (Redstone 4) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to October 2018 Update (Redstone 5).
• After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems: 
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems: 
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• On Hyper-V virtual machines, the system may crash if the computer switches off or enters hibernation while encrypting a hard drive with FDE.

Limitations of updating the operating system on computers with KES11, KES10 SP2 MR2 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), and Windows 10 April 2018 Update (Redstone 4) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to October 2018 Update (Redstone 5).
• After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
  • for KES11
  • for KES10

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• File Level Encryption (FLE) components are not supported.
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• On Hyper-V virtual machines, the system may crash if the computer switches off or enters hibernation while encrypting a hard drive with FDE.

Upgrade limitations on computers with KES10 SP1 MR4 and KES10 SP1 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), and Windows 10 April 2018 Update (Redstone 4) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to October 2018 Update (Redstone 5).
• After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to the October 2018 Update (Redstone 5) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• ReFS file system is supported with limitations.
• Kaspersky Full Disk Encryption (FDE) is not supported if Hyper-V are installed.
• Update task may work incorrectly resulting in the application stopping to respond on computers with Windows 10 April 2018 Update (Redstone 4, version 1803). To fix the issue, install the KB4340917 operating system update.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.
• Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.
• On computers running Windows 10 April 2018 Update (Redstone 4, version 1803), the update task may work incorrectly and cause the application to freeze. To fix this issue, install the operating system update KB4340917.

Limitations of updating the operating system on computers with KES11.1.0 and 11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.

Limitations of updating the operating system on computers with KES11.0.1 and KES10 SP2 MR4, SP2 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Spring Creators Update (Redstone 4).
• After upgrading to Spring Creators Update (Redstone 4), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems: 
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems: 
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• Kaspersky FDE is not supported if Hyper-V Platform components are installed.

Limitations of updating the operating system on computers with KES11 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Spring Creators Update (Redstone 4).
• After upgrading to Spring Creators Update (Redstone 4), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.
• Kaspersky FDE is not supported if Hyper-V Platform components are installed.
• Text input into Cortana’s search line does not work if the File Level Encryption (FLE) component is installed.
• You may experience problems saving a new text file created in Microsoft Office if the File Level Encryption component is installed. The problem only occurs at the first saving attempt and at the next attempt the file will be successfully saved.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Creators Update (Redstone 4).
• After upgrading to Redstone 4, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Upgrade limitations on computers with KES10 SP1 MR4 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Limitations of updating the operating system on computers with KES10 SP1, SP1 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES11.1.0 and 11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES11.0.1, KES 11, KES10 SP2 MR4, SP2 MR3, SP2 MR2 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
  • for KES11
  • for KES10

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Accessing audio devices
  • Accessing video devices
  • Using the browser command line
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Upgrade limitations on computers with KES10 SP2 MR1 and KES10 SP2 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Upgrade limitations on computers with KES10 SP1 MR4 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Injecting the code
  for 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Limitations of updating the operating system on computers with KES10 SP1 SP1 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
• If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Fall Creators Update (Redstone 3).
• After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
• If after upgrading to Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes are not supported in FLE.
• The ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES11.1.0 and 11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Upgrade limitations on computers with KES11.0.1, KES11, KES10 SP2 MR4, SP2 MR3,  SP2 MR2, SP2 MR1, SP2 installed:

• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Upgrade limitations on computers with KES10 SP1 MR4 installed:

• Only upgrading from Windows 10, Windows 10 TH2, and Windows 10 Anniversary Update (Redstone 1) is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Creators Update (Redstone 2).
• After upgrading to Creators Update (Redstone 2), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If after installing Microsoft Windows 10 Creators Update (Redstone 2) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Right):
  x86
  • Pausing other processes and threads
  • Injecting the code
  x86/x64
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.
• Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Upgrade limitations on computers with KES10 SP1 MR3 installed:

• Only upgrading from Windows 10, Windows 10 TH2, and Windows 10 Anniversary Update (Redstone 1) is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Creators Update (Redstone 2).
• After upgrading to Creators Update (Redstone 2), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If after installing Microsoft Windows 10 Creators Update (Redstone 2) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES11.2.0 installed:

• If the computer is encrypted with Full Disk Encryption and the update is performed through WSUS, follow the instructions from this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES11.1.0 and 11.1.1 installed:

• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.
  

• Windows Subsystem for Linux (WSL) is not supported.
• ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES11.0.1, KES 11, KES10 SP2MR4, SP2MR3, SP2MR2 installed:

• Only upgrading from Windows 10 and Windows 10 TH2 is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Anniversary Update (Redstone 1).
• After upgrading to Anniversary Update (Redstone 1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
  • for KES11
  • for KES10

• Windows Subsystem for Linux (WSL) is not supported.

Limitations of updating the operating system on computers with KES10 SP2 MR1 and KES10 SP2 installed:

• Only upgrading from Windows 10 and Windows 10 TH2 is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Anniversary Update (Redstone 1).
• After upgrading to Anniversary Update (Redstone1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.

Upgrade limitations on computers with KES10 SP1 MR4 installed:

• Only upgrading from Windows 10 and Windows 10 TH2 is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Anniversary Update (Redstone 1).
• After upgrading to Anniversary Update (Redstone1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If after installing Microsoft Windows 10 Anniversary Update (Redstone1) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The following management privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
  x86
  • Pausing other processes and threads
  • Injecting the code
  x86/x64
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Opening the service for writing
  • Modifying the service configuration
  • Using the browser command line
• The Device Guard mode is not supported.
• Windows Subsystem for Linux (WSL) is not supported.

Limitations of updating the operating system on computers with KES10 SP1 MR3 installed:

• Only upgrading from Windows 10 and Windows 10 TH2 is supported.
• If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Anniversary Update (Redstone 1).
• After upgrading to Anniversary Update (Redstone1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
• If after installing Microsoft Windows 10 Anniversary Update (Redstone1) the application does not recognize the activation code, restart the application.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano and Cluster Mode configurations are not supported.
• Firewall / Application Control: file paths in rules are not case-sensitive.
• When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
• When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano and Cluster Mode configurations are not supported.
• The Device Guard mode is not supported.
• Before installing Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 on Microsoft Windows Server 2016, you must remove Windows Defender. For details, see the Microsoft support site.

• Windows Subsystem for Linux (WSL) is supported with limitations:
• Firewall / Application Control: file paths in rules are not case-sensitive. 
• The ReFS file system is supported with limitations.
• The Server Core, Server Nano and Cluster Mode configurations are not supported.
• When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
• When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano and Cluster Mode configurations are not supported.
• When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
• When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano and Cluster Mode configurations are not supported.
• The Device Guard mode is not supported.
• Before installing Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 on Microsoft Windows Server 2016, you must remove Windows Defender. For details, see the Microsoft support site.