• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
• Not supported:
  • The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
  • The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
  • BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

• If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS/Firewall/Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

• If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS/Firewall/Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and Critical Fix 1 installed:

• If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
• If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS/Firewall/Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

• If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
• The ReFS file system is supported with limitations.
• Case-sensitive file paths are supported with limitations:
  • Case-sensitive FLE paths are not supported.
  • HIPS/Firewall/Application Control. File paths in rules are not case-sensitive.
• The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
• The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
  For 32-bit operating systems:
  • Pausing other processes and threads
  • Code injection
  For 32-bit and 64-bit operating systems:
  • Using other applications’ APIs
  • Installing hooks
  • Creating a service
  • Opening the service for reading
  • Modifying the service configuration
  • Access to audio devices
  • Access to video devices
  • Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

• If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
• After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
• If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

• The ReFS file system is supported with limitations.
• The Server Nano configuration is not supported.
• Firewall / Application Control: file paths in rules are not case-sensitive.
• When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
• When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano, and Cluster Mode configurations are not supported.
• Firewall / Application Control: file paths in rules are not case-sensitive.
• When the product is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
• When the product is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

• The ReFS file system is supported with limitations.
• The Server Core, Server Nano, and Cluster Mode configurations are not supported.
• Firewall / Application Control: file paths in rules are not case-sensitive.
• Before installing the application on Microsoft Windows Server 2022, you must remove Windows Defender. For details, see the Microsoft support site.