An update for Microsoft Endpoint Configuration Manager current branch, version 1910, is available to resolve the following three issues.
- After updating to Configuration Manager version 1910, sites that have deployed a Windows Defender Application Control (WDAC) policy are unable to assign trust to new applications.
- Feature Updates for Windows 10 May 2019 update (version 1903) and higher do not install as expected after updating to Configuration Manager version 1910. Feature updates may fail to install, or may succeed but report a failure status afterward.
- The following resolution does not apply to the revised globally available build of Configuration Manager 1910, released on January 17, 2020. That build already incorporates this specific fix.
If your site uses automatic client upgrade, when you update the site to version 1910, all clients immediately upgrade after the site updates successfully. The only randomization is when clients receive the policy, which by default is every hour. For a large site with many clients, this behavior can consume a significant amount of network traffic and stress distribution points.
Note: This update is superseded by the following update rollup:
KB 4537079 Update Rollup for Microsoft Endpoint Configuration Manager current branch, version 1910
Update information for Microsoft Endpoint Configuration Manager current branch, version 1910
This update is applicable only to early update and globally available installations of Configuration Manager, version 1910 that are installed by using one of the following package GUIDs:
It is also applicable to the following package GUID's with the private TAP rollup, or update KB 4535819 applied:
To verify which build is installed, add the Package GUID column to the details pane of the Updates and Servicing node in the console.
How to obtain the hotfix
Microsoft Download Center
The following hotfix to resolve this problem is available for download from the Microsoft Download Center:
After you download the hotfix, see the following documentation for installation instructions:
To apply this hotfix, you must have Microsoft Endpoint Configuration Manager, version 1910 installed by using one of the package GUIDs that are mentioned in the "Update information" section.
Users who installed an early update ring version of 1910 should first apply the following update:
4535819 Update for Microsoft Endpoint Configuration Manager version 1910, early update ring
Members of the Technology Adoption Program (TAP) must also have the private TAP rollup applied.
You don't have to restart the computer after you apply this hotfix.
Hotfix replacement information
This update replaces the following:
KB 4538488: Clients immediately upgrade after updating to Configuration Manager current branch, version 1910
The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.