Smart App Control is blocking the mso-x-none.msp package for the Office 2016 security update because it cannot validate the publisher for that specific installer file, so Windows is treating it as an unfamiliar or potentially unsafe app. This is why the update fails both through Windows Update and when running the downloaded .msp file directly.
For Office 2016 security updates like KB5002826/KB5002838, note the following from the documentation:
- The update package is an
mso-x-none.msp file that updates core Office components such as Mso.dll, Msores.dll, and related files.
- These updates are distributed either via Microsoft Update/Windows Update or as standalone packages from the Microsoft Update Catalog.
- The standalone package applies only to MSI-based Office 2016 installations, not Click-to-Run editions such as Microsoft 365.
Given that Smart App Control is blocking the .msp installer, the supported way to receive this update is:
- Ensure Office 2016 is the release MSI-based version (not Click-to-Run). The security update requires the release version of Office 2016 to be installed.
- Use Microsoft Update/Windows Update with automatic updating enabled so the update is delivered and installed through the trusted Windows update channel instead of running the
.msp manually.
- If the update continues to fail with Smart App Control blocking the installer, the behavior is due to Smart App Control’s reputation-based blocking of that specific
mso-x-none.msp package, not to a problem with the Office 2016 product key or version.
Remaining on Office 2016 is supported for these updates as long as the release version is installed. Installing a later perpetual version (2019/2021) would require uninstalling the existing Office 2016 first, but it is not required just to resolve this specific Smart App Control block.
References: