KICS, KSWS, KESS installation fails if it can't disable Windows Defender. To do this, during the installation the installer tries to edit local policy settings via Windows APIs, which load cached machine local policy from %windir%\System32\GroupPolicy folder, make changes and save back to the file system.
If mentioned operations with local policy fail, installation fails with MSI error 1603, MSI log contains following errors:
DisableWindowsDefender: Error: (_com_error): OpenLocalM
