Support of Windows 10, Windows Server 2016 and Windows Server 2019 in Kaspersky Endpoint Security

Support

General

General articles

Support of Windows 10, Windows Server 2016 and Windows Server 2019 in Kaspersky Endpoint Security

Latest update: July 25, 2023 ID: 13036

For information about current limitations in support of Windows 11 and Windows Server 2022, see this article.

Kaspersky Endpoint Security for Windows supports the following editions of Microsoft Windows 10:

Windows 10 Pro/Enterprise	Kaspersky Endpoint Security
Windows 10 Pro/Enterprise	10 SP2 MR3 10.3.3.275 10 SP2 MR4 10.3.3.304	11.0.0.6499	12.2.0.462, 12.1.0.506, 12.0.0.465, 11.11.0.452, 11.10.0.399, 11.9.0.351, 11.8.0.384, 11.7.0.669, 11.6.0.394, 11.5.0.590, 11.4.0.233, 11.3.0.773, 11.2.0.2254 CF 1, 11.2.0.2254, 11.1.1.126, 11.1.0.15919, 11.0.1.90
October 2022 Update (22H2)	limitations		limitations
October 2021 Update (21H2)	limitations		limitations
May 2021 Update (21H1)	limitations		limitations
October 2020 Update (20H2, version 2009)	limitations		limitations
May2020 Update (20H1, version 2004)	limitations		limitations
November2019 Update (19H2, version 1909)	limitations	limitations	limitations
May 2019 Update (19H1, version 1903)	limitations	limitations	limitations
October 2018 Update (Redstone 5, version 1809)	limitations	limitations	limitations
April 2018 Update (Redstone 4, version 1803)	limitations	limitations	limitations
Fall creators Update (Redstone 3, version 1709)	limitations	limitations	limitations
Creators Update (Redstone 2, version 1703)	limitations	limitations	limitations
Anniversary Update (Redstone 1, version 1607)	limitations	limitations	limitations
Fall Update (TH2, version 1511)
Release (TH1, version 1507)
Windows Server
Version 2019	limitations	limitations	limitations
Version 2016	limitations	limitations	limitations

Support of Windows 10 October 2022 Update (22H2)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2), Windows 10 May 2021 Update (21H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2), Windows 10 May 2021 Update (21H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Support of Windows 10 October 2021 Update (21H2)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2), Windows 10 May 2021 Update (21H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2), Windows 10 May 2021 Update (21H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Support of Windows 10 May 2021 Update (21H1)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1), Windows 10 October 2020 Update (20H2) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Support of Windows 10 October 2020 Update (20H2)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2), Windows 10 May 2020 Update (20H1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Support of Windows 10 May 2020 Update (20H1)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1), Windows 10 November 2019 Update (19H2) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after updating the operating system.
After updating the operating system, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Support of Windows 10 November 2019 Update (19H2)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and
Critical Fix 1 installed:

If KES 11.2.0 or 11.2.0 Critical Fix 1 with the FLE encryption component is installed on your computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows November 2019 Update (19H2).
After upgrading to November 2019 Update (19H2), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 11.0.0, Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES 11.0.0, KES 10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows November 2019 Update (19H2).
After upgrading to November 2019 Update (19H2), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line

File Level Encryption (FLE) components are not supported.
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5), Windows 10 May 2019 Update (19H1) is supported.
If the FDE encryption component or the Device Control component is installed on the computer, November 2019 Update (19H2) is not supported.
After upgrading to November 2019 Update (19H2), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If after installing November 2019 Update (19H2) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 10 May 2019 Update (19H1)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:

If KES 11.2.0 or 11.2.0 Critical Fix 1 with the FLE encryption component is installed on your computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows May 2019 Update (19H1).
After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 11.0.0 , Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
File Level Encryption (FLE) is not supported.

Limitations of updating the operating system on computers with KES 11.0.0, KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows May 2019 Update (19H1).
After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
File Level Encryption (FLE) components are not supported.
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4), Windows 10 October 2018 Update (Redstone 5) is supported.
If there are FDE encryption components or the Device Control component installed on the computer, the installation of the May 2019 Update (19H1) is not supported.
After upgrading to May 2019 Update (19H1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing May 2019 Update (19H1) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Microsoft Windows 10 October 2018 Update (Redstone 5)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:	Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported. The ReFS file system is supported with limitations. Case-sensitive file paths are supported with limitations: Case-sensitive FLE paths are not supported. HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.

Limitations of updating the operating system on computers with KES 11.1.0 and 11.1.1 installed:

After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows October 2018 Update (Redstone 5).
After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 11.0.0 , Kaspersky Endpoint Security 10 SP2MR2

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.

Limitations of updating the operating system on computers with KES 11.0.0, KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows October 2018 Update (Redstone 5).
After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP1MR4, SP1MR3

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
File Level Encryption (FLE) components are not supported.
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
On Hyper-V virtual machines, the system may stop responding if the computer switches off or enters hibernation while encrypting a hard drive with FDE.

Limitations of updating the operating system on computers with KES10 SP1MR4, SP1MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3), Windows 10 April 2018 Update (Redstone 4) is supported.
If there are FDE encryption components or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows October 2018 Update (Redstone 5).
After upgrading to October 2018 Update (Redstone 5), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows October 2018 Update (Redstone 5) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 10 April 2018 Update (Redstone 4)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.
The update task might not work properly, causing the application to stop responding on computers with Windows 10 April 2018 Update (Redstone 4, version 1803). To fix the issue, install the KB4340917 operating system update.
Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.

Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.
The update task might not work properly, causing the application to stop responding on computers with Windows 10 April 2018 Update (Redstone 4, version 1803). To fix the issue, install the KB4340917 operating system update.

Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.
The update task might not work properly, causing the application to stop responding on computers with Windows 10 April 2018 Update (Redstone 4, version 1803). To fix the issue, install the KB4340917 operating system update.

Limitations of updating the operating system on computers with KES 11.1.0 and 11.1.1 installed:

After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.

Limitations of updating the operating system on computers with KES 11.0.1, KES10 SP2MR4, SP2MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Spring Creators Update (Redstone 4).
After upgrading to Spring Creators Update (Redstone 4), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 11.0.0

Limitations:

The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.

Limitations of updating the operating system on computers with KES 11.0.0 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Spring Creators Update (Redstone 4).
After upgrading to Spring Creators Update (Redstone 4), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP2 MR2

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.
Full Disk Encryption (FDE) is incompatible with Hyper-V platform components.
Text input into Cortana’s search line does not work if the File Encryption component is installed.
You may experience problems with saving a new text file created in Microsoft Office if the File Encryption component is installed. The problem only occurs at the first saving attempt and at the next attempts the file will be successfully saved.

Limitations of updating the operating system on computers with KES10 SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1), Windows 10 Creators Update (Redstone 2), Windows 10 Fall Creators Update (Redstone 3) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows Redstone 4.
After upgrading to Redstone 4, the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR3

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Limitations of updating the operating system on computers with KES10 SP1MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 10 Fall Creators Update (Redstone 3)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:	Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported. The ReFS file system is supported with limitations. Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.
Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:	Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported. The ReFS file system is supported with limitations.
Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES 11.1.0 and 11.1.1 installed:

After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.0, 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3, SP2MR2

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES 11.0.1, KES 11.0.0, KES10 SP2MR4, SP2MR3, SP2MR2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2 MR1, SP2

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Accessing audio devices
- Accessing video devices
- Using the browser command line
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES10 SP2 MR1, SP2 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, then the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR3

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
For 32-bit operating systems:
- Pausing other processes and threads
- Injecting the code
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Limitations of updating the operating system on computers with KES10 SP1MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2, Windows 10 Anniversary Update (Redstone 1) and Windows 10 Creators Update (Redstone 2) is supported.
If there are encryption components (FLE and/or FDE) or the Device Control component installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Fall Creators Update (Redstone 3).
After upgrading to Fall Creators Update (Redstone 3), the Firewall component is displayed in the Windows Security Center as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Fall Creators Update (Redstone 3) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 10 Creators Update (Redstone 2)

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:	Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported. The ReFS file system is supported with limitations. Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.
Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:	Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported. The ReFS file system is supported with limitations.
Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.

Limitations of updating the operating system on computers with KES 11.1.0 and 11.1.1 installed:

After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.0, 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3, SP2MR2, SP2MR1, SP2

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES 11.0.1, KES 11.0.0, KES10 SP2MR4, SP2MR3, SP2MR2, SP2MR1, SP2 installed:

Only upgrading from Windows 10, Windows 10 TH2 , and Windows 10 Anniversary Update (Redstone 1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Creators Update (Redstone 2).
After upgrading to Creators Update (Redstone 2), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10, Windows 10 TH2 , and Windows 10 Anniversary Update (Redstone 1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Creators Update (Redstone 2).
After upgrading to Creators Update (Redstone 2), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Creators Update (Redstone 2) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR3

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
x86
- Pausing other processes and threads
- Injecting the code
x86/x64
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.
Full Disk Encryption (FDE) cannot be applied to the UEFI computers.

Limitations of updating the operating system on computers with KES10 SP1MR3 installed:

Only upgrading from Windows 10, Windows 10 TH2 , and Windows 10 Anniversary Update (Redstone 1) is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Creators Update (Redstone 2).
After upgrading to Creators Update (Redstone 2), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Creators Update (Redstone 2) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 10 Anniversary Update (Redstone 1).

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:	Windows Subsystem for Linux (WSL) is not supported. ReFS is supported with limitations. Taking screenshots in the Host Intrusion Prevention component (Application Control Rules → Rights) is not supported for 32-bit and 64-bit operating systems.
Limitations of updating the operating system on computers with KES 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0, 11.2.0 and Critical Fix 1

Limitations:	Windows Subsystem for Linux (WSL) is not supported. ReFS is supported with limitations.
Limitations of updating the operating system on computers with KES 11.3.0, 11.2.0 and Critical Fix 1 installed:	If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES 11.1.0 and 11.1.1 installed:

After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. When the application is started for the first time, a window will appear requesting participation in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.0.0, 11.0.1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3, SP2MR2

Limitations:

Windows Subsystem for Linux (WSL) is not supported.
ReFS is supported with limitations.

Limitations of updating the operating system on computers with KES 11.0.1, KES 11.0.0, KES10 SP2MR4, SP2MR3, SP2MR2 installed:

Only upgrading from Windows 10 and Windows 10 TH2 is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Anniversary Update (Redstone1).
After upgrading to Anniversary Update (Redstone 1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions:
- for KES11
- for KES10

Kaspersky Endpoint Security 10 SP2MR1, SP2

Limitations:

Windows Subsystem for Linux (WSL) is not supported.

Limitations of updating the operating system on computers with KES10 SP2MR1, SP2 installed:

Only upgrading from Windows 10 and Windows 10 TH2 is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Anniversary Update (Redstone1).
After upgrading to Anniversary Update (Redstone 1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR4

Limitations:

The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.

Limitations of updating the operating system on computers with KES10 SP1MR4 installed:

Only upgrading from Windows 10 and Windows 10 TH2 is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Anniversary Update (Redstone1).
After upgrading to Anniversary Update (Redstone 1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Anniversary Update (Redstone1) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 10 SP1MR3

Limitations:

The following privileges in Activation Privilege Control are not available (Application Control Rules → Rights):
x86
- Pausing other processes and threads
- Injecting the code
x86/x64
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Opening the service for writing
- Modifying the service configuration
- Using the browser command line
The Device Guard mode is not supported.
Windows Subsystem for Linux (WSL) is not supported.

Limitations of updating the operating system on computers with KES10 SP1MR3 installed:

Only upgrading from Windows 10 and Windows 10 TH2 is supported.
If file encryption components (FLE and/or FDE) or the Device Manager component are installed on the computer, the application will be automatically restored after the upgrade to Microsoft Windows 10 Anniversary Update (Redstone1).
After upgrading to Anniversary Update (Redstone 1), the Firewall component is displayed in the Windows Security settings as disabled. Upon restart, the status is displayed correctly.
If after installing Microsoft Windows 10 Anniversary Update (Redstone1) the application does not recognize the activation code, restart the application.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows Server 2019

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0 and 11.8.0

Limitations:

The ReFS file system is supported with limitations.
The Server Nano configuration is not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security 11.7.0, 11.6.0, 11.5.0, 11.4.0, 11.3.0, 11.2.0 and Critical Fix 1, Kaspersky Endpoint Security 10 SP2MR4, SP2MR3, SP2MR2

Limitations:

The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security11.1.1, 11.1.0, 11.0.0, 11.0.1

Limitations:

The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
Before installing the application on Microsoft Windows Server 2019, you must remove Windows Defender. For details, see the Microsoft support site.

Kaspersky Endpoint Security 10 SP1MR4, SP1MR3

Known issues and restrictions:

The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
The Device Guard mode is not supported.
Before installing Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 on Microsoft Windows Server 2019, you must remove Windows Defender. For details, see the Microsoft support site.

Support of Windows Server 2016

Kaspersky Endpoint Security 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0 and 11.8.0

Known issues and restrictions:

Windows Subsystem for Linux (WSL) is supported with limitations.
Firewall / Application Control: file paths in rules are not case-sensitive.
The ReFS file system is supported with limitations.
The Server Nano configuration is not supported.
When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security 11.7.0, 11.6.0, 11.5.0, 11.4.0, 11.3.0, 11.2.0 and Critical Fix 1

Known issues and restrictions:

Device Guard is not supported.
Windows Subsystem for Linux (WSL) is supported with limitations.
Firewall / Application Control: file paths in rules are not case-sensitive.
The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security 11.1.0 and 11.1.1

Known issues and restrictions:

Device Guard is not supported.
Windows Subsystem for Linux (WSL) is supported with limitations.
Firewall / Application Control: file paths in rules are not case-sensitive.
The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Before installing the application on Microsoft Windows Server 2016, you must remove Windows Defender. For details, see the Microsoft support site.

Kaspersky Endpoint Security 11.0.0, 11.0.1

Known issues and restrictions:

Device Guard is not supported.
The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Before installing the application on Microsoft Windows Server 2016, you must remove Windows Defender. For details, see the Microsoft support site.

Kaspersky Endpoint Security 10 SP2MR4, SP2MR3, SP2MR2, SP2MR1, SP2

Known issues and restrictions:

Device Guard is not supported.
The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security 10 SP1MR4, SP1MR3

Known issues and restrictions:

Device Guard is not supported.
The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
The Device Guard mode is not supported.
Before installing Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 on Microsoft Windows Server 2016, you must remove Windows Defender. For details, see the Microsoft support site.

Useful references

Support of Windows 11 and Windows Server 2022 in Kaspersky Endpoint Security

The newest Kaspersky solutions. More than just an anti‑virus.

Complete security in the digital world for you & your family. Choose your perfect solution for any device.

Kaspersky Safe Kids. Watch over your children, even when you’re not around.

GPS tracking, parent control of the mobile and social networks for your children’s security. There’s one license for all devices.

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.