DESlock+ Support DESlock+ Support
Installing Windows 10 Feature Updates on an Full Disk Encrypted (FDE) system
Article ID: KB379 email a link to this article

This article has been updated to reflect the latest Feature Update known as The Creators Update


Please note: The Creators Update allows users to convert the boot mode of their system from MBR to UEFI in place.
This is not supported by DESlock+


This article should be being used in the following context:

Upgrading from Windows 7, 8, 8.1 to a Windows 10 Feature update

Upgrading from an earlier version of Windows 10 (such as 1511 or 1607) to a newer Windows 10 Feature update



When installing a Windows 10 Feature Update, the process fails saying it "Can't install updates".

When the Windows Update and Security Settings panel is displayed it details that "We found some issues.  Select this message to fix and finish updating".

If the Fix issues button is clicked, Windows Update loads and explains it "Couldn't install Windows 10 - DESlock+ Disable encryption to continue or run Windows Setup with the /reflectdrivers command-line option".


Due to the way major upgrades of Windows 10 are performed, the update process runs in the same manner as if doing an in place upgrade from an older version of Windows to Windows 10. On a system that has Full Disk Encryption (FDE) in place the upgrade is prevented from accessing the disk as it does not come with the required drivers.  The Windows 10 updater realises this, resulting in the warning dialog being seen.

Solution 1:

This process is now seamless in DESlock+ Client version 4.8.17.

Please upgrade following the article here: KB203 - How to upgrade DESlock+ (managed)

Solution 2:

If you are unable to use the DESlock+ Client version 4.8.17 please follow the steps below:

In order to install the Windows 10 Feature Update on your machine while FDE, you will need to download and run the Microsoft Media Creation Tool. This will create the latest Windows 10 ISO for you to use. Then you will need to download and run the DESlock+ Windows 10 upgrade utility. The utility can be used to upgrade your machine from Windows 7, 8, 8.1 or from an earlier version of Windows 10.

Step 1. Create the Windows 10 Media ISO

You can perform this step on any Windows PC.

  • Download the Microsoft Media Creation tool from the following link:
  • Run MediaCreationTool.exe from the folder you downloaded it to.
  • Select the Create installation media for another PC option and click Next.

  • The tool will ask which version of the Windows 10 install you require. If you are running the tool on the PC being upgraded, or all PCs being upgraded are the same variant of Windows, you can accept the default choices. Otherwise, you should make the appropriate choice for the PC you will be updating. 

Note: It is important that the correct version of Windows and language is picked to match your existing system.

  • Choose to create either a USB flash drive or an ISO file. If you select an ISO file, then you will need to turn it into a bootable USB or DVD later. In our example we will select ISO file.

  • Choose where to save the Windows ISO file. We have selected the Downloads folder.

  • Wait for the download to complete.

  • You can either open the DVD burner now or click Finish to complete the creation

  • In our example we will click Open DVD burner to burn the ISO to a DVD.
  • Insert a DVD and click Burn


Step 2. Installing the Windows 10 Feature Update

On the PC you are updating:

  • Either burn the Windows ISO image to a DVD, create a bootable USB with the ISO or Mount the ISO on the machine you are updating
  • Download and Run the following executable: DESlock+Win10Updater

  • Press Go
  • Ensuring you have the Windows ISO disc inserted or mounted, locate the Setup.exe in the Windows ISO and double-click it

  • Wait for the Windows update to start

  • Follow the Windows update steps to complete the Windows upgrade process. Please note: your PC will restart several times during this process. You will need to provide the FDE credentials each time the machine restarts.

  • Click Install to begin installing the update



If Single Sign-On (SSO) has been enabled, you must also follow the article below:

KB396 - Single Sign-On (SSO) Access Denied after Windows 10 upgrade


Keywords: redstone 1, 14385, 1607, 14393, 1703, reflect, drivers, reflectdrivers, /reflectdrivers, disable, windows ten, FDE, feature, update, anniversary, creator's update, creators update
(17 vote(s))
Not helpful