Technical Articles ID:
KB85784
Last Modified: 6/30/2020
Environment
Multiple McAfee business and enterprise products
Microsoft Windows 10 version 2004 (May 2020 Update)
Microsoft Windows 10 version 1909 (November 2019 Update)
Microsoft Windows 10 version 1903 (May 2019 Update)
Microsoft Windows 10 version 1809 (October 2018 Update)
Microsoft Windows 10 version 1803 (April 2018 Update)
Microsoft Windows 10 version 1709 (Fall Creators Update)
Microsoft Windows 10 version 1703 (Creators Update)
Microsoft Windows 10 version 1607 (Anniversary Update)
Microsoft Windows 10 version 1511 (November Update)
Microsoft Windows 10 version 1507
NOTE: This article applies only to McAfee business and enterprise products. If you need information or support for McAfee consumer or small business products, visit https://service.mcafee.com.
Summary
Recent updates to this article
Date
Comments
June 30, 2020
Updated DLP Endpoint version for Windows 10 Version 2004 May 2020 Update.
May 27, 2020
Removed Management of Native Encryption (MNE) 5.1.0 from the Windows 10 Version 2004 column. MNE 5.1.0 is not yet released.
May 22, 2020
Added Endpoint Intelligence Agent. Added McAfee product versions expected to support Windows 10 Version 2004 May 2020 Update.
May 5, 2020
Added a column to support Windows 10 Version 2004 May 2020 Update.
Added supported versions of Management of Native Encryption (MNE), File and Removable Media Protection (FRP), and Drive Encryption (DE).
April 1, 2020
Updated MVISION Endpoint compatibility with Windows 10 Version 1909 in the "Compatibility with Windows 10 Versions 1709, 1803, 1809, 1903, 1909, and 2004" section.
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
The versions listed in this article are the minimum supported McAfee product versions for each Windows 10 version. For detailed product compatibility information, see the supported environments article for the McAfee product.
Compatibility with Windows 10
Click to expand the section that you want to view.
McAfee is committed to supporting the Microsoft release cadence for Windows 10. We work closely with Microsoft to make sure that McAfee security software and hardware products are fully compatible with Windows 10 endpoints.
To make sure release quality, all new releases that Microsoft publishes for Windows 10 require full validation by the individual product teams. The McAfee goal is to add same-day support for all Windows 10 releases over time, for those products that do not currently offer this cadence.
Late-breaking changes implemented by Microsoft to a release, or any unresolved compatibility issues raised by McAfee with Microsoft around a scheduled release, could lead to schedule changes. We will document any changes in this article.
NOTES:
Additional information regarding Windows 10 support for McAfee products will use standard McAfee communication methods including the Support Notification Service (SNS).
Future release dates are subject to change. NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.
GA =General Availability
RTS = Released To Support, also called Managed Release. RTS packages can be obtained by contacting Technical Support.
n/a = not available
HF = Hotfix
TBD = To be decided
1
SaaS Endpoint Protection 6.0 does not support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it.
If you are running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.0. ENS 10.0 Update 1 supports Windows 10.0.
2
IMPORTANT:
Same-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later. Run setup.exe when setup.exe is initiated from the Microsoft WSUS mechanism. There is no need for scripts or command-line arguments.
For DE 7.1.3 and 7.2.0 and later, reflect drivers parameter must be used when executing setup.exe directly.
For Windows Anniversary Update (Version 1607) only, see KB87909.
For Windows 10 Creators Update (Version 1703) and later, see KB89000. If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options.
In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Update 3 (7.1.3) or FRP 5.0.1 installed is supported. But, it requires specific steps be taken as part of the Windows 10 upgrade for it to be successful. For details, see the needed article:
For detailed instructions and sample scripts that can be tailored to suit the customer environment for DE, see KB84962.
DEGO deployment to Windows 10 clients fails. This issue is resolved by installing DE 7.1 Update 3 Hotfix 1087719 (build 7.1.3.554) or later.
3
For information about support for Device Guard with DE and FRP, see KB86009.
4
MACC8.0.1 and 8.1.0 are supported only if Microsoft KB4103721 or the latest updates are installed before installation.
5
ePO Deep Command reached End of Life (EOL) on April 10, 2018.
6
ENS 10.5.5 July Update Repost and ENS 10.6.1 July Update Repost installers allow a fresh installation of ENS on a system with Windows 10 version 1903 (May 2019 Update). ENS 10.5.5 or 10.6.1 May Update only allow an upgrade to Windows 10 version 1903 (May 2019 Update).
Windows 10 devices running versions listed below no longer receive security and quality updates. Microsoft recommends updating devices to the latest version of Windows 10.
Compatibility with Windows 10 Versions 1507 ,1511, 1607, and 1703 (end-of-service)
McAfee Products
Win 10
Version
1507
Win 10
Version
1511
(November Update)
Win 10 Version
1607
(Anniversary Update)9
Win 10
Version
1703
(Creators Update)10
Minimum Supported McAfee Product Version
Endpoint Protection Products1
Active Response
1.1.0 HF1.1.0.161
1.1.0 HF1.1.0.161
1.1.0.212
2.01
2.0
Application and Change Control
7.0
7.0
7.0.1
7.0.17
8.0.x
Data Loss Prevention Endpoint (DLP Endpoint)
11.0
11.0
11.0
11.0
Endpoint Security (ENS)
10.1 (major release)
10.0.1 (update)
10.1 (major release)
10.0.1 (update)
10.2
10.1.2
10.5.1
10.2.1
ENS Adaptive Threat Protection (ATP)
10.5.1
10.5.1
10.5.1
10.5.2
Endpoint Security Threat Intelligence
n/a
n/a
10.2
10.1 Update 2
10.2.2
Host Intrusion Prevention (Host IPS)
8.0.0 Patch 6
8.0.0 Patch 6
8.0 Patch 8
8.0 Patch 9
MVISION Endpoint
n/a
n/a
n/a
n/a
SiteAdvisor Enterprise (SAE)
3.5 Patch 44
3.5 Patch 44
3.5 Patch 5
3.5 Patch 5
Threat Intelligence for Endpoint Security Client
10.1
10.1
Threat Intelligence Exchange (TIE) Module for VSE
1.0.1
1.0.1
1.0.2
1.0.2
VirusScan Command Line Scanner (VSCL)
6.0.6
6.0.6
6.1.0
6.1.0
VirusScan Enterprise (VSE)
8.8.0 Patch 6
8.8.0 Patch 6
8.8.0 Patch 8
8.8 Patch 9
Database Security Products
Data Center Protection Products
Management for Optimized Virtual Environment (MOVE) Multi-platform
3.6.1
3.6.1
4.6
4.5
4.6
4.5
Data Protection Products
Drive Encryption (DE)2, 5
7.1.3
7.1.3
7.2.0
7.1.3 HF1148978
7.2.1
File and Removable Media Protection (FRP)5
5.0.x
4.3.1 HF10621183
5.0.x
4.3.1 HF10621183
5.0.2
5.0.1 HF1150417
5.0.38
Management of Native Encryption (MNE)
3.0.0
3.0.0
4.1.0
4.1.1
Security Management Products
Data Exchange Layer (DXL)
2.0.0
2.0.1
2.2.0
3.1.0
ePO Deep Command6
2.4
2.4
n/a
n/a
McAfee Agent (MA)
5.0.2
4.8.0 Update 3
5.0.2
4.8.0 Update 3
5.0.4
4.8.0 Update 3
5.0.5
4.8.0 Update 3
Policy Auditor (PA) Agent
6.2.0.309
6.2.0.2309
6.2.0.309
6.2.2
Rogue System Detection
5.0.3
5.0.3
5.0.4
5.0.5
Web Protection
McAfee Client Proxy (MCP)
2.1
2.1
2.1.0.177
2.3
1
SaaS Endpoint Protection 6.0 does not support Microsoft Windows 10.0. If you try to install Windows 10.0 while running SaaS Endpoint Protection 6.0, it asks you to uninstall it.
If you are running SaaS Endpoint Protection 6.0, uninstall it and install ENS 10.0. ENS 10.0 Update 1 supports Windows 10.0.
2
IMPORTANT:
Same-day in-place upgrade to Windows 10 is fully supported with DE 7.2.1 and later. Run setup.exe when setup.exe is initiated from the Microsoft WSUS mechanism. There is no need for scripts or command-line arguments.
For DE 7.1.3 and 7.2.0 and later, reflect drivers parameter must be used when executing setup.exe directly.
For Windows Anniversary Update (Version 1607) only, see KB87909.
For Windows 10 Creators Update (Version 1703) and later, see KB89000. If the organization administrator runs the setup.exe directly, setup.exe must include the additional command-line options.
In-place upgrade to Windows 10 (versions 1507 and 1511) with DE 7.1 Update 3 (7.1.3) or FRP 5.0.1 installed is supported. But, it requires specific steps be taken as part of the Windows 10 upgrade for it to be successful. For details, see the needed articles:
For detailed instructions and sample scripts that can be tailored to suit the customer environment for DE, see KB84962.
CAUTION: Installation or upgrade with earlier builds of Windows 10 Creators Update fails.
9
KB87536 has been redirected to this article because KB87536 became obsolete. (KB87536 was titled "Incompatibility between the Windows 10 Anniversary Update and multiple McAfee products.") The Windows 10 Anniversary Update now performs the needed upgrade and installation checks. These checks make sure that no incompatible McAfee product versions can be installed or present. It also blocks the upgrade if they are present.
10
CAUTION: Before you install McAfee products, if Device Guard or Credential Guard is enabled on a Windows 10 Creators Update 64-bit system, you must make sure that Microsoft KB4016251 is installed on the system. For more information, see KB89029.
