Client update for Configuration Manager current branch, version 1910

Symptoms

An update for Microsoft Endpoint Configuration Manager current branch, version 1910, is available to resolve the following three issues.

• After updating to Configuration Manager version 1910, sites that have deployed a Windows Defender Application Control (WDAC) policy are unable to assign trust to new applications.

• Feature Updates for Windows 10 May 2019 update (version 1903) and higher do not install as expected after updating to Configuration Manager version 1910. Feature updates may fail to install, or may succeed but report a failure status afterward.

• The following resolution does not apply to the revised globally available build of Configuration Manager 1910, released on January 17, 2020. That build already incorporates this specific fix.
  
  If your site uses automatic client upgrade, when you update the site to version 1910, all clients immediately upgrade after the site updates successfully. The only randomization is when clients receive the policy, which by default is every hour. For a large site with many clients, this behavior can consume a significant amount of network traffic and stress distribution points.

Note: This update is superseded by the following update rollup:
KB 4537079Update Rollup for Microsoft Endpoint Configuration Manager current branch, version 1910

Update information for Microsoft Endpoint Configuration Manager current branch, version 1910

This update is applicable only to early update and globally available installations of Configuration Manager, version 1910 that are installed by using one of the following package GUIDs: 

0BB82139-0DC3-4B18-B219-97FB2EFD9E56
E2F7B2F9-4828-4650-9144-5DC7956781B7
4CE24C49-E6B0-4B4F-9AD8-CA31FF269F23
It is also applicable to the following package GUID's with the private TAP rollup, or update KB 4535819applied:
3B4824FF-02FC-40B8-95AB-2AE986B0B63F
D237809A-6210-4209-A0E6-247543C241E4

To verify which build is installed, add the Package GUID column to the details pane of the Updates and Servicing node in the console.

How to obtain the hotfix

Prerequisites

To apply this hotfix, you must have Microsoft Endpoint Configuration Manager, version 1910 installed by using one of the package GUIDs that are mentioned in the "Update information" section.
Users who installed an early update ring version of 1910 should first apply the following update:

4535819 Update for Microsoft Endpoint Configuration Manager version 1910, early update ring

Members of the Technology Adoption Program (TAP) must also have the private TAP rollup applied.

Restart information

You don't have to restart the computer after you apply this hotfix. 

Hotfix replacement information

This update replaces the following:
KB 4538488: Clients immediately upgrade after updating to Configuration Manager current branch, version 1910

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

References

Updates and servicing for Configuration Manager

Learn about the terminology Microsoft uses to describe software updates.