How to deploy KIR through script

Question

How to deploy KIR through script

Kishor Kumar 30

Team,

We have over 1000 assets managed by a third party RMM tool. The document here describes how to configure local groups manually through the GUI. Since we don't have GPO or Intune, we need a way to do this through CLI or a script. Please help us configure it through a script and proceed with the upgrade.

issue: https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23h2#3351msgdesc

Thank you,
Kishor Kumar

Accepted answer

0 additional answers

Your answer

Answer 1

MotoX80 36,401

Are you referring to the Windows Update API issue?

https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23h2#3351msgdesc

If so, you can follow along with this question.

https://learn.microsoft.com/en-us/answers/questions/1791668/powershell-command-outputting-system-comobject-on

Pablo Navarro figured out the registry update by downloading/installing the Group Policy definition for the KIR and analyzing the .admx file contents in C:\Windows\PolicyDefinitions.

reg add HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides /v 1931709068 /t REG_DWORD /d 0

You will need to reboot the pc's in order for that registry update to take effect.

Kishor Kumar 30 Reputation points

2024-07-16T14:32:33.0433333+00:00

Thanks. It is working on most of the assets, but it is failing on few assets. Attached are the configurations of the failed assets. Please provide a solution.

Edition Windows 11 Home

Version 23H2

Installed on ‎03-‎01-‎2024

OS build 22631.3880

Experience Windows Feature Experience Pack 1000.22700.1020.0
MotoX80 36,401 Reputation points

2024-07-16T14:49:57.6833333+00:00
but it is failing on most of them

Do you get an error message, or does the change just not work?

The update page says that it applies to both 23H2 and 22H2.

Affected platforms:

Client: Windows 11 version 23H2, Windows 11 version 22H2

For Windows Home you can also try this.

reg add HKLM\SYSTEM\CurrentControlSet\Control\FeatureManagement\Overrides\4\1931709068 /v EnabledState /t REG_DWORD /d 1 /f
Kishor Kumar 30 Reputation points

2024-07-22T08:48:57.0033333+00:00

It's working.
Kishor Kumar 30 Reputation points

2024-07-22T08:51:05.21+00:00

What actions should we take when Microsoft releases the resolution update for this issue? Specifically, should we remove the registry entries, or take any other steps?
Kishor Kumar 30 Reputation points

2024-07-22T08:51:23.4033333+00:00

What actions should we take when Microsoft releases the resolution update for this issue? Specifically, should we remove the registry entries, or take any other steps?
MotoX80 36,401 Reputation points

2024-07-22T11:38:38.4533333+00:00

I don't think that you need to do anything.

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/known-issue-rollback-helping-you-keep-windows-devices-protected/ba-p/2176831

Known Issue Rollback configurations have a limited lifespan—a few months at most—because we expect to solve the underlying problem quickly and re-issue the fix. Once the underlying problem has been fixed, the Group Policy has outlived its usefulness. It becomes a benign setting and can be undeployed safely.

It’s worth noting that each Known Issue Rollback Group Policy is unique to a specific issue, i.e. a regression, and, as such, these policies are not cumulative in nature.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Share via

How to deploy KIR through script

0 additional answers

Your answer