windows 11 23H2 weird bug (persistent phishing protection)

I noticed that when installing windows 11 from a patched ISO (integrated updates), upon the the first reboot after successful install, the controls for phishing protection is "stuck" at enabled state and you cannot disable it anymore....this however doesn't happen if you install from the original 23H2 (build 22621.2495)

I recognize the bug is in effect when the windows security page shows a "blank" App & browser control option (neither a green check mark nor an exclamation mark), and when you go to the reputation based protection and try to disable phishing protection, it instantly revert to ON state





The updated ISOs I tried were obtained from UUP Dump website, and the second one from microsoft and patched with updates using NTLite (only updates without any further tweaking).

the last version I tried is 23H2 build 22631.4169

AsadAlrafidain said:

when installing windows 11 from a patched ISO (integrated updates),

Click to expand...

Did you have anything included in the patched iso that alters group policy settings? If so, I would be looking to group policy.

glasskuter said:

Did you have anything included in the patched iso that alters group policy settings? If so, I would be looking to group policy.

Available Microsoft Defender SmartScreen settings

A list of all available settings for Microsoft Defender SmartScreen using Group Policy and mobile device management (MDM) settings.

learn.microsoft.com

Click to expand...

no, no alterations were made...just a plain update integration,one time using NTLite, and the other time using UUP dump tools