I am not able to explain. But whatever removed by me is based on "Windows Features" or the information in the package. I don't add\remove a package by my own imagination. I obey Microsoft rule. e.g. Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1 Code: Client-EmbeddedBootExp Client-EmbeddedLogon Client-KeyboardFilter Client-UnifiedWriteFilter Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.26100.1 Code: Client-DeviceLockdown Client-EmbeddedShellLauncher So, for "Device Lockdown" Feature, I obey the rule and add\remove these two packages: Code: Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1 Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.26100.1 And I also apply this rule to customized CU for "up to date" without problem. PS: Don't forget to modify\update language packs if available.