It is totally ridiculous for Microsoft, a multi-billion dollar company to expect an end user to jump through hoops and loops just to get something installed for security without locking up the device. In my case My Surface Pro Lte advanced was no more than 1 week old and have already cost me hours and hours of restoring and recovering. Its totally stupid!
And now with the suggested resolution below, how in the world an end user would know where to download certain cumulative updates and other knowledge base patches and this or that. One would wonder how in the world (actually I meant to say hXXXX) would an end user know what to do!! Despite all the craziness Microsoft is still making loads of money. You go figure! Its nice that you tried to embed the link to the patches or KB..xxxx. Still what do I do?
It was the behind-the-scene automatic updates that caused me the tons of hours. So I am afraid to proceed. Do you see my problems? That was why I paused the automatic updates after I wasted over 12 jours of my time restoring and two trips to the local MS retail store. D@#$$$ S$#@%
Update (6/22/18):
Microsoft has included a solution for this issue in the May 23, 2018 Cumulative Update (KB4100403). This solution prevents the issue from occurring when installing the April 2018 Update. Please note that this solution does not restore systems that have already experienced the issue and are currently booting to a UEFI screen. Any devices already impacted should still follow steps to reinstall the previous operating system (Windows 10, version 1709). Any devices with Intel SSD 600p Series or Intel SSD Pro 6000p Series that have installed the June 12, 2018 Cumulative Update (KB4284835) will no longer be blocked from installing the April 2018 Update.