Microsoft made its latest feature update rollup, Windows 11 22H2, available to “researchers” on September 20, two weeks ago today. Still, a number of customers who proactively tried to download the update found no joy. Based on its own telemetry data, Microsoft places “backup blocks” on certain PC configurations when new feature updates are released to try to prevent users from experiencing known issues. Microsoft has leaked some of the possible Windows 11 22H2 blockers, but customers have discovered others on their own.
Microsoft has posted on its Windows 11 22H2 health information page a handful of known issues that may prevent users from getting this update. Four are listed as of October 4:
- Some installed printers may only allow default settings
- Compatibility issues with Intel Smart Sound Technology drivers and Windows 11
- Copying files/shortcuts using Group Policy Preferences may not work as expected
- Installation of KB5012170 may fail and you may receive error 0x800f0922 (Installation of Security Update for Secure Boot DBX may fail)
Microsoft has released a workaround for the printer issue and says it is working on a resolution that the company will provide via an update in an upcoming release. Officials note that they recommend users affected by the printer backlog “not attempt to upgrade manually using the Update Now button or Media Creation Tool until this issue has not been resolved and the protection has not been removed”.
The company also released a workaround for the Group Policy Preferences issue and pledged to provide an update for it in an upcoming release. It investigates the Secure Boot DBX issue and advises customers not to attempt to update manually if they encounter the Intel Smart Sound driver issue in cases where no updated driver is available from PC manufacturers .
Adam Gross, a Microsoft Most Valuable Professional (MVP) and consultant known for publishing the FU.WhyAmIBLocked script, also recently discovered that DeviceGuard and some processors combined can result in Windows 11 22H2 block. The suspension reports that “Safe Launch data was not migrated on IceLake (Client), TigerLake, AlderLake devices”.
Gary Blok, a workplace engineer specializing in endpoint management, ConfigMgr, and Intune, blogged about the issue of Secure Launch data not being migrated. He said he’s found that users who want to get Windows 11 22H2 “need to turn off System Guard, both turn it off and make sure it doesn’t work. I’ve heard people have issues for the disable, even if they disable it.”
I asked Microsoft about the DeviceGuard blocking and a spokesperson told me Microsoft was aware of the issue and was working to fix it. The spokesperson did not provide a timeline for the resolution of this issue.
Blok said he is working on creating a crowdsourced backup database to help IT pros more easily find and search for holds placed on their systems when new Windows updates are released. The database is built on the FU.WhyAmIBlocked Powershell module from Gross. He said he already had 100 IDs and backup information.
Backups aren’t the only worry for Windows users upgrading to a new update. On October 3, Microsoft officials acknowledged that Windows 11 22H2 users who attempt to copy large multi-GB files may experience a noticeable slowdown in performance. Users can see up to 40% less throughput over SMB when copying (reading). There is a workaround for the problem, but it is not yet known when a permanent solution will be available.