This release delivers a crucial update for Protected Agent - it eliminates the limitation on Major Windows update.

The Protected mode of Teramind Agent blocks access to its own critical components, including the service registry key and the service object. During a Windows in-place feature upgrade, Windows Update must read and copy every service's registration data into the migrated registry. Because it cannot read the Teramind service's data, it silently skips it. Once the upgrade completes, the service no longer exists in the registry and therefore never starts.

Please note that this affects full in-place feature upgrades that rebuild the registry (i.e. 24H2, 25H2, 26H1, etc.).

We are adjusting the Agent's protection to grant the minimum access Windows Update needs during migration: read/write for SYSTEM and read-only for Administrators, on the service object and its registry key. The service registration is then preserved and the service starts normally after the upgrade.

Administrators will be able to see the Teramind service. They will still not be able to configure, stop, or delete it. No other protection is relaxed.