diff --git a/AppHandling/Sign-NavContainerApp.ps1 b/AppHandling/Sign-NavContainerApp.ps1
index 9d47333c8..1d0386837 100644
--- a/AppHandling/Sign-NavContainerApp.ps1
+++ b/AppHandling/Sign-NavContainerApp.ps1
@@ -89,7 +89,15 @@ try {
                 Write-Host "Downloading Signing Tools"
                 $winSdkSetupExe = "c:\run\install\winsdksetup.exe"
                 $winSdkSetupUrl = "https://go.microsoft.com/fwlink/p/?LinkID=2023014"
-                (New-Object System.Net.WebClient).DownloadFile($winSdkSetupUrl, $winSdkSetupExe)
+                try {
+                    Invoke-WebRequest -UseBasicParsing -Uri $winSdkSetupUrl -OutFile $winSdkSetupExe
+                }
+                catch {
+                    Write-Host (GetExtendedErrorMessage -errorRecord $_)
+                    Start-Sleep -Seconds 5
+                    Write-Host "Retrying..."
+                    Invoke-WebRequest -UseBasicParsing -Uri $winSdkSetupUrl -OutFile $winSdkSetupExe
+                }
                 Write-Host "Installing Signing Tools"
                 Start-Process $winSdkSetupExe -ArgumentList "/features OptionId.SigningTools /q" -Wait
                 if (!(Test-Path "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\SignTool.exe")) {
diff --git a/CreateScript.ps1 b/CreateScript.ps1
index c8812f60d..41b1b3334 100644
--- a/CreateScript.ps1
+++ b/CreateScript.ps1
@@ -1224,7 +1224,15 @@ $Step.Isolation {
     
         try {
             $bestContainerOS = "The image, which matches your host OS best is $($bestContainerOsVersion.ToString())"
-            if ($hostOsVersion.Major -eq $bestContainerOsVersion.Major -and $hostOsVersion.Minor -eq $bestContainerOsVersion.Minor -and $hostOsVersion.Build -eq $bestContainerOsVersion.Build) {
+            if ($hostOsVersion.Build -ge 20348 -and $bestContainerOsVersion.Build -ge 20348) {
+                if ($bestContainerOsVersion -le $hostOsVersion) {
+                    $defaultIsolation = "process"
+                }
+                else {
+                    $defaultIsolation = "Hyper-V"
+                }
+            }
+            elseif ($hostOsVersion.Major -eq $bestContainerOsVersion.Major -and $hostOsVersion.Minor -eq $bestContainerOsVersion.Minor -and $hostOsVersion.Build -eq $bestContainerOsVersion.Build) {
                 $defaultIsolation = "Process"
             }
             else {