Some Windows 10 machines are locked to update after updating KB5003214 and KB5003690

This issue occurs after users install the cumulative updates KB5003215 (May 25) and KB5003690 (June 21). Due to the inability to update to the latest versions, these models are at risk of being attacked or exploited.

Microsoft says this issue occurs on devices that have been automatically scanned to remove obsolete resource records. When the system is scanned, the latest, most recently installed cumulative update will be marked as permanent and older components will be removed from the system.

Some Windows 10 machines are locked to update after updating KB5003214 and KB5003690 Picture 1

After the scan is completed, users will not be able to remove the KB5003214 or KB5003690 update and will not be able to install future updates.

To fix this issue as quickly as possible, Microsoft recommends that users perform an in-place upgrade. Proceed as follows:

1. Open a Command Prompt window by typing cmd in the Search box
2. Select Run as administrator
3. Next, you'll have to create an in-place upgrade key in Registry Editor by entering a command into the Command Prompt. At the command prompt enter:

Reg.exe Add HKLMSOFTWAREMicrosoftWindowsCurrentVersion /v AllowInplaceUpgrade /t REG_DWORD /f /d 1

1. Press Enter to confirm the command

Some note:

1. This key will be deleted once the in-place upgrade is completed
2. The in-place upgrade can take up to 48 hours, so please be patient
3. Once the upgrade is complete, the device will run the latest operating system version available
4. This process also installs the latest monthly security updates
5. After the in-place upgrade, the device can perform the update as usual
6. ARM64 computers will not be able to successfully upgrade in-place without the KB5005932 update installed. It is recommended that you check for and install this update before performing the in-place upgrade

Good luck!

David Pac

Update 27 August 2021