A recent Windows Update in Windows 10 has meant that the Kaspersky Microsoft-signed EFI boot file that is used by agFM on the Easy2Boot USB drive is often blocked by the target systems UEFI Firmware.
This prevents us from Secure UEFI-booting.
Apart from disabling Secure Boot in the BIOS, you can go into the BIOS Setup menu and delete/clear/reset the DBx UEFI database - or - another way around this problem is to place a version of WinPE on a new FAT32 3rd partition of the E2B USB drive.