Deleting the catroot2 folder on a Windows Server - Access Denied

Hi, I have a playbook which I can stop all the required services to repair the windows update agent, run sfc and dism, delete the softwaredistribution folder. Unfortunately when I try to rename the catroot2 folder to catroot2.old I get access denied. I can delete/rename it locally on the server from cmd or powershell. I’m running the playbook as the local administrator. When I try to rename it the cryptsvc service automatically starts which gives me the access denied.

Any help would be appreciated.

Does this Microsoft Answers post help?

Yes, the catroot2 folder. Looks like it detects tampering and starts the cryptsvc which locks the folder located in c:\windows\system32.
Any workaround?