Client update for Configuration Manager current branch, version 1910

Applies to: Microsoft Endpoint Configuration Manager (current branch)


An update for Microsoft Endpoint Configuration Manager current branch, version 1910, is available to resolve the following three issues.

  • After updating to Configuration Manager version 1910, sites that have deployed a Windows Defender Application Control (WDAC) policy are unable to assign trust to new applications. 
  • Feature Updates for Windows 10 May 2019 update (version 1903) and higher do not install as expected after updating to Configuration Manager version 1910. Feature updates may fail to install, or may succeed but report a failure status afterward. 
  • The following resolution does not apply to the revised globally available build of Configuration Manager 1910, released on January 17, 2020. That build already incorporates this specific fix.

    If your site uses automatic client upgrade, when you update the site to version 1910, all clients immediately upgrade after the site updates successfully. The only randomization is when clients receive the policy, which by default is every hour. For a large site with many clients, this behavior can consume a significant amount of network traffic and stress distribution points. 

Note: This update is superseded by the following update rollup:
KB 4537079 Update Rollup for Microsoft Endpoint Configuration Manager current branch, version 1910

Update information for Microsoft Endpoint Configuration Manager current branch, version 1910

This update is applicable only to early update and globally available installations of Configuration Manager, version 1910 that are installed by using one of the following package GUIDs: 


It is also applicable to the following package GUID's with the private TAP rollup, or update KB 4535819 applied:

To verify which build is installed, add the Package GUID column to the details pane of the Updates and Servicing node in the console.

How to obtain the hotfix

Microsoft Download Center

The following hotfix to resolve this problem is available for download from the Microsoft Download Center:

Download this hotfix now.

After you download the hotfix, see the following documentation for installation instructions:

Use the Update Registration Tool to import hotfixes to Configuration Manager


To apply this hotfix, you must have Microsoft Endpoint Configuration Manager, version 1910 installed by using one of the package GUIDs that are mentioned in the "Update information" section.
Users who installed an early update ring version of 1910 should first apply the following update:

4535819 Update for Microsoft Endpoint Configuration Manager version 1910, early update ring

Members of the Technology Adoption Program (TAP) must also have the private TAP rollup applied.

Restart information

You don't have to restart the computer after you apply this hotfix. 

Hotfix replacement information

This update replaces the following:
KB 4538488: Clients immediately upgrade after updating to Configuration Manager current branch, version 1910

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.



Updates and servicing for Configuration Manager

Learn about the terminology Microsoft uses to describe software updates.