Windows 10: Can only boot with disabled driver signature enforcement after crash

You could just delete it from \System32\Drivers and run sfc again. That should copy the (hopefully) correct version from WinSxS. If you do this and it fails then please delete CBS.log, run sfc again and then zip and upload the whole CBS.log.

Alternatively, as I've got file version 10.0.16299.248, if you can get windows update working then that should also fix it. As the troubleshooter doesn't work you could try the script here Reset Windows Update in Windows 10 Windows 10 Tutorials

Or you could do a repair install or wait a couple of weeks for 1803 which will definitely replace it *Wink

 

When I did the system restore, those same two drivers were still unsigned. I could reboot as normal. When I went to run windows updates it tried to install those two updates I mentioned earlier and failed the Feature but was successful on the February Malicious Software Removal Tool one.

Also I was wrong earlier. Every one of the computers I have had this issue on have been upgraded from 10 Home to 10 Pro.

Running a system reset with keeping files will fix the issue but need to reinstall all programs. Even running updates again does not break it.

We also use Trend Micro Worry Free antivirus.

 

In place upgrade (sometimes called "repair install") doesn't involve reinstalling programs though. Download your current version ISO, mount it and click on setup.exe. Takes 20 minutes or so after you downloaded the ISO and all your programs, apps and data are retained. You just have to re-do you tweaks.

Repair Install Windows 10 with an In-place Upgrade Windows 10 Tutorials

 

I'll try this on the next one that goes down.