# Agent block windows update

**URL:** <https://discuss.elastic.co/t/agent-block-windows-update/375551>\
**Category:** Elastic Security\
**Created:** [March 7, 2025, 9:21am UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551 "2025-03-07T09:21:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Charles\_Nkuna](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@Charles\_Nkuna](https://discuss.elastic.co/u/Charles_Nkuna)\
**Post date:** [March 7, 2025, 9:21am UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551/1 "2025-03-07T09:21:52Z")

</div>

Hello,

After installing elastic agent(8.15.2) enabling elastic defend on when we apply windows updates they getting blocked. what might cause the issue ? anything i need to refine ?

Kind regards,  
Charlie

---

<div class="post-metadata">

**Author:** ![lesio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lesio/32/89323_2.png) [@lesio](https://discuss.elastic.co/u/lesio)\
**Post date:** [March 7, 2025, 9:55am UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551/2 "2025-03-07T09:55:55Z")

</div>

Elastic Defend should not block windows updates. Could you share some more info about your it.

- OS Version, go to System -\> About
- Do you mean windows updates or windows release upgrade?
- If you're seeing failed windows updates, are there any Endpoint alerts?

---

<div class="post-metadata">

**Author:** ![Charles\_Nkuna](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@Charles\_Nkuna](https://discuss.elastic.co/u/Charles_Nkuna)\
**Post date:** [March 10, 2025, 7:52am UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551/3 "2025-03-10T07:52:22Z")

</div>

Hi Lesio,

Thanks for the feedback  
i meant windows updates and no alerts detected.

---

<div class="post-metadata">

**Author:** ![lesio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lesio/32/89323_2.png) [@lesio](https://discuss.elastic.co/u/lesio)\
**Post date:** [March 10, 2025, 8:15pm UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551/4 "2025-03-10T20:15:40Z")

</div>

Thanks for the update. Could you share the OS information and blocked updates KB numbers? Also windows event logs related to the failed updates.

Did you define any blocklist entries? Is there a chance that your blocklist entry is blocking the updates?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 7, 2025, 8:15pm UTC](https://discuss.elastic.co/t/agent-block-windows-update/375551/5 "2025-04-07T20:15:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.