14 DAY TRIAL // Old versions of Microsoft Security Essentials (MSE) can block the installation of Service Pack 1 on top of Windows 7. It should be common knowledge by now that major operating system upgrades from Microsoft fail to play nice with security solutions already installed on the platform.
Microsoft confirmed officially that the deployment of the SP1 update package can fail on both Windows 7 and Windows Server 2008 R2.
At the same time, it appears that not only Microsoft Security Essentials is at fault, but also additional security solutions from the software giant, including Microsoft Forefront Client Security, and Microsoft Forefront Endpoint Protection.
Affected users get an “Install Windows Service Pack” error message that reads: “Service Pack installation can't continue. Software installed on this computer isn't compatible with the service pack. Click the link for more information about this problem.
“After the problem is resolved, restart the installation. Microsoft Security Essentials - your version of this program may prevent successful installation of this service pack.”
Microsoft Security Essentials, Microsoft Forefront Client Security, and Microsoft Forefront Endpoint Protection all introduce a filter driver, mpfilter.sys, when they’re installed.
As part of the deployment process of SP1 on top of Windows 7 and Windows Server 2008 R2, mpfilter.sys is checked, and it needs to be version 2.1.6804.0 or later for the upgrade to continue.
“Microsoft Security Essentials - If you do not have version 1.0.1963.0 or later installed, upgrade (…), or launch Microsoft Update and install the update or a newer version from there,” the Redmond company said.
Microsoft is offering existing FCS Knowledge Base article 2394433, an update that they can deploy to resolve SP1 installation issues. New FCS customers will need to follow the guidance in Knowledge Base article 2394439.
“Microsoft Forefront Endpoint Protection - Upgrade to the latest version of the product. The product version is not necessarily upgraded during anti-malware definition updates. Additionally, if a beta version of FEP is currently installed, the product version displayed in Help, About might appear to be a higher version number than the RTM version of the product. It might be necessary to uninstall the current version before installing a new one,” Microsoft said.
Windows 7 SP1 RTM and Windows Server 2008 R2 SP1 RTM are available for download here.
Microsoft Security Essentials (MSE) 2.1.1116.0 is available for download here.