Windows Malicious Software Removal Tool x64 - November 2019 (KB890830) -Error 0x800711c7

So, simply from your 2’s input if Microsoft could ensure their own inbuilt update process to maintain 10S, then people would not need to override it to update a new PC setup. 

Actually, it's not really the update process that's the issue here Lee, since even if it's not kept fully up to date it's still inherently more secure than its legacy desktop Windows cousin.  That's due to the fact that S mode leaves out so many of the ancient components of Windows, that over time have become easily abused by malware, that it's often not truly affected by these specific vulnerabilities.

Since all programs sourced from the Windows Store must be some form of Universal Windows Program (UWP) application, even if they were just modified using a Windows Bridge, they're inherently more secure than their Win32 cousin as well.  These Desktop Bridge apps also behave like non-hybrid "native" UWP apps. They do not modify the system registry and are essentially sandboxed from the OS to ensure one-click uninstall with no orphaned DLL files in the Windows System directory.

The positive here is that these UWP apps inherently benefit from the additional security of not having the ability to directly affect the operating system and other apps, which is where many Windows security issues occur.  It's this improvement in isolation that makes it much less likely that any malware can gain control of the operating system, even if it does actually have an individual component that might itself be vulnerable to attack.

So as TMiq stated above, if I were still involved in corporate IT support I'd also use S mode whenever possible, since it removes or at least reduces the potential that many attacks might work.

The difference with S mode over most techniques used in the larger corporate or enterprise business communities is that it's just as available to both small business and consumers like yourself.  So rather than switching out of S mode and losing the inherent security it provides, you'd be better off trying to find either new apps or hardware that support it.

As I mentioned earlier, it's difficult to get most anyone, let alone consumers, to take the time to understand what S mode truly means to their security.  That's because unlike you, most won't even take the time to read a short discussion like this one.

Referring to TMiq's final comment, I think it's clear that Microsoft's intent, as with Windows 10 itself, is to bring more and more app developers to the UWP development community over time.  Eventually getting to the point where they can remove the ability for any non-UWP apps or supported hardware to work with Windows period.  At that point, S mode can become standard Windows, with no possibility of "upgrading" to a less secure, legacy version.

Rob

I’ve worked in IT a lot of years, and I like S mode ... a lot. I, too, just purchased a Surface Go, upgraded it to Windows Pro, and kept it in S mode just to see how it runs. So far, I like it. If I could, I’d put my other machines into S mode tomorrow. I’d also put as many as possible of our corp users onto S mode as well. My reasoning?  I’m tired of ever increasing sophisticated and destructive malware and hacks. I’ve quickly become an S mode fan, period. I for one will be watching Microsoft’s progress with S mode and do hope it rapidly gains acceptance in the marketplace. 

Yes Lee, Windows 10 S is most effective for people like myself who need little in the way of add-on hardware or even software, at least beyond what's already available in the Store.

What I find helping here is that few truly understand what's different, even among those helping, since they assume that not having things like PowerShell, the Registry Editor and other management tools available is a negative, when in truth it's tools like these that are often abused by malware in order to corrupt and take over a Windows device.

That's why with a security background and nearly 40 years in the computing industry I try to help others understand the reality behind how these things actually operate and what makes them secure, or not.

Nothing has been so difficult to explain as Microsoft's attempts to move to a much leaner and secure platform, which they've tried multiple times with the Surface including the earlier ARM versions that eventually failed.  Hopefully the tack they've taken more recently to make Windows 10 S mode a default option for nearly all versions of the OS will allow enough intelligent people to give it a try that it will begin to gain some traction.

I know I personally don't ever plan to buy anything that can't support Windows 10 S and feel that even Windows Defender itself is nearly unnecessary on such an inherently secure operating system.  That's precisely why I chose the Go and though it's still appropriate to have the Defender AV available on the off chance any malware manages to successfully attack, I feel it's highly unlikely a reasonably careful individual will ever experience any true malware.

It's perfect for protecting less careful users like kids as well, which is what I had to try and do with early Microsoft security tools and Windows configuration for my nephews over a decade ago.

You're a lot more fortunate to have Windows 10 S available or even just Windows 10 for that matter.

Rob

Thanks. Like all who replied, I am waiting for Microsoft to fix problem.

And MicroSoft won't put out any statement on update page. They know it's a major problem.