Summary
This article describes issues that are fixed in this update rollup for Microsoft Endpoint Configuration Manager current branch, version 2002. This update applies both to customers who opted in through a PowerShell script to the early update ring deployment, and customers who installed the globally available release.
For additional information on changes in Configuration Manager version 2002, refer to:
What’s new in version 2002 of Configuration Manager current branch
Summary of changes in Microsoft Endpoint Configuration Manager current branch, version 2002
Issues that are fixed
The option to schedule updates is unavailable when applying software updates to an image (offline servicing) for Windows Server, version 2004.
Hybrid Azure Active Directory domain joined clients are detected as Intranet clients when communicating with the Cloud Management Gateway. User based deployments are blocked as a result.
Users are unable to submit feedback from the Configuration Manager console when using a Japanese version of the operating system.
The value for dynamic task sequence variables are still displayed even after selecting the option Do not display this value in the Configuration Manager console.
After changing Enable third party software updates to "Yes" in client settings, clients perform an extra group policy update on startup resulting in increased load on domain controllers.
The SetupComplete.cmd window is now hidden during Windows 10 upgrade task sequences.
The Configuration Manager console may terminate unexpectedly after entering Microsoft Azure login credentials in the Co-Management Configuration Wizard.
After deleting a setting from the Co-management node in the Configuration Manager console, the Configure co-management option is unexpectedly grayed out and unavailable. This blocks you from re-enabling co-management and is a variation of the issue first resolved in KB 4540794.
After updating to Configuration Manager version 2002, content download for updates may fail when Allow clients to download delta content when available is enabled in client software update settings.
When multiple pilot groups are selected for co-management, the Automatic enrollment into Intune process may take longer than expected.
The co-management pilot process generates extraneous policy updates on Configuration Manager clients.
After clearing the Use a boot image option from the properties of a task sequence the reference is not removed as expected. This results in the boot image being referenced in the deployment and download of the task sequence.
The SMS Agent Host service (ccmexec.exe) may sporadically cause high CPU utilization on client computers if the local time zone setting is changed. This CPU utilization typically only persists until the client computer restarts, or for the delta between the old and new time zones.
The Configuration Manager console hangs when opening automatic deployment rules (ADR) when multiple languages are selected.
After updating to Configuration Manager current branch, version 2002, client policy data may fail to apply. Messages resembling the following are recorded in the PolicyEvaluator.log file.
Note
A newer version of policy {policy_guid}:98.00 is already in queue. Ignoring the older version 101.00
A newer version of policy {policy_guid}:98.00 is already in queue. Ignoring the older version 102.00Group policy updates are incorrectly triggered if Configuration Manager is set to manage Delivery Optimization (DO) settings on a client but DO is not yet implemented in the environment.
Co-managed device data, such as the operating system version, may be missing when viewed in the Intune portal. This occurs if the data was unavailable (null) when the device was first synchronized during the onboarding process, even if it was added later.
The Configurations tab of the client control panel applet may hang on Windows 10 ARM64 devices.
Client computers do not restart as required after a software update installation. This occurs when a software update group contains both an update that can install within the maintenance window, and one that cannot install within the maintenance window.
Expected subscriptions are not listed in the Create Cloud Management Gateway Wizard after signing in with the correct subscription admin account.
After updating to Configuration Manager current branch, version 2002, management points do not process domain data from client heartbeat discover data records (DDR). This leaves client records without domain data until Active Directory System Discovery runs.
Collections with the option Make this collection available to assign Microsoft Defender ATP policies in Intune enabled can no longer be deleted from the Configuration Manager console; that option must be disabled before deletion is available.
An operating system upgrade task sequence does not resume after the target computer restarts. This occurs when the task sequence incorrectly tries to take the client out of provisioning mode. Errors resembling the following are recorded in the TSAgent.log file.
Note
Could not execute WMI method SMS_Client.SetClientProvisioningMode
Failed to put client out of provisioning mode (0x800706BE)The BytesDownloaded property of instances in the CCM_CTM_DownloadHistory class does not record values larger than 4GB, leading to potential inaccuracies in reporting.
The Co-management Configuration Wizard may terminate unexpectedly when selecting a collection to upload.
The installation or removal of Office updates may fail. This occurs when the SMS Agent Host (ccmexec.exe) incorrectly holds a lock on Office add-in files, such as Visual Studio Tools for Office (VSTO) add-ins, after hardware inventory runs. Office updates fail to install via Configuration Manager in this scenario.
Additionally, users that install or uninstall Office updates manually in these environments may encounter errors resembling the following.Note
Something went wrong
Error Code: 30010-4Operating system deployment task sequences may fail in an environment with a mix of management points using HTTP and HTTPS for communications. This is most common with a HTTPS management points used for a cloud management gateway, and operating system boot images are not configured to use client authentication certificates.
After updating to Configuration Manager current branch, version 2002, delta hardware inventory files may be rejected at a primary site and copied to the \BADMIFS folder. Errors resembling the following are recorded in the dataldr.log on the primary site.
Note
Violation of PRIMARY KEY constraint 'BROWSER_USAGE_HIST_PK'. Cannot insert duplicate key in object 'dbo.BROWSER_USAGE_HIST'. The duplicate key value is (38284100, 1). : dbo.dBROWSER_USAGE_DATA
ERROR - is NOT retyrable.
Rollback transaction: Machine={client_name}GUID:{smsid}
Additional changes
KB 4561945 "The underlying connection was closed" error when the service connection tool downloads the ConfigMgr.AdminUIContent.cab file
Additional hotfixes contained in this rollup
Note
Note: If KB 4563473 or 4567007 were not installed previously, they do not need to be installed prior to this update.
KB 4563473 Update rollup for Configuration Manager version 2002 tenant attach issues
KB 4567007 PXE Boot failures or task sequence delays after updating to Configuration Manager current branch, version 2002
Update information for Microsoft Endpoint Configuration Manager, version 2002
This update is available in the Updates and Servicing node of the Configuration Manager console for environments that were installed by using early update ring or globally available builds of version 2002.
Members of the Configuration Manager Technology Adoption Program (TAP) must first apply the private TAP rollup before this update is displayed.
To verify which build is in use, look for a Package GUID by adding the Package GUID column to the details pane of the Updates and Servicing node in the console. The update applies to new installations of version 2002 from baseline media, as well as installations from packages that have the following GUIDs:
- AA9975F2-160A-4910-A698-B7A4AF35D727
- B39BBA45-E1F0-4233-971E-BB66EB25359D
- 382F6B53-9217-47CB-9852-7A53232EC80D
- 0808D0BA-B36F-4719-BD10-08585C1B8B3E
- AA09154F-56FB-449D-8009-5BBB7C23CB4F
- C427C4F5-6967-4B64-86BC-DEC9E0F201CC
- 06F89B19-5A8B-460E-A7F4-6CC0E86A1FC6
- A680BEFC-783A-49FC-8FAF-1AADB2A7EE84
The update is also applicable to the following package GUID with the private TAP rollup installed:
- 373BBBC6-F070-43C6-B0AC-163D91C731E7
Restart information
You do not have to restart the computer after you apply this update.
Update replacement information
This update replaces the following previously release updates.
KB 4553501 Update for Microsoft Endpoint Configuration Manager version 2002, early update ring
KB 4563473 Update rollup for Configuration Manager version 2002 tenant attach issues
KB 4567007 PXE Boot failures or task sequence delays after updating to Configuration Manager current branch, version 2002
Additional installation information
After you install this update on a primary site, pre-existing secondary sites must be manually updated. To update a secondary site in the Configuration Manager console, click Administration, click Site Configuration, click Sites, click Recover Secondary Site, and then select the secondary site. The primary site then reinstalls that secondary site by using the updated files. Configurations and settings for the secondary site are not affected by this reinstallation. The new, upgraded, and reinstalled secondary sites under that primary site automatically receive this update.
Run the following SQL Server command on the site database to check whether the update version of a secondary site matches that of its parent primary site:
select dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')
If the value 1 is returned, the site is up to date, with all the hotfixes applied on its parent primary site.
If the value 0 is returned, the site has not installed all the fixes that are applied to the primary site, and you should use the Recover Secondary Site option to update the secondary site.
File attributes for Microsoft Endpoint Configuration Manager current branch, version 2002
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| _smsprov.mof | Not Applicabile | 792904 | 26-May-2020 | 00:00 | Not Applicable |
| _uimanifest.xml | Not Applicabile | 752 | 26-May-2020 | 00:00 | Not Applicable |
| ac_extension_amd64manifest.xml | Not Applicabile | 332 | 26-May-2020 | 00:00 | Not Applicable |
| ac_extension_i386manifest.xml | Not Applicabile | 331 | 26-May-2020 | 00:00 | Not Applicable |
| adminconsole.msi | Not Applicabile | 54177792 | 26-May-2020 | 00:00 | Not Applicable |
| adminservice.common.dll | 5.0.8968.1042 | 23416 | 26-May-2020 | 00:00 | x86 |
| adminservice.common.dll | 5.0.8968.1042 | 23416 | 26-May-2020 | 00:00 | x86 |
| adminservice.controllers.dll | 5.0.8968.1042 | 70008 | 26-May-2020 | 00:00 | x86 |
| adminservice.controllers.dll | 5.0.8968.1042 | 70024 | 26-May-2020 | 00:00 | x86 |
| adminservice.host.dll | 5.0.8968.1042 | 158584 | 26-May-2020 | 00:00 | x86 |
| adminservice.host.dll | 5.0.8968.1042 | 158600 | 26-May-2020 | 00:00 | x86 |
| atphandler.dll | 5.00.8968.1042 | 171896 | 26-May-2020 | 00:00 | x64 |
| atphandler.dll | 5.00.8968.1042 | 142712 | 26-May-2020 | 00:00 | x86 |
| basesvr.dll | 5.00.8968.1042 | 4147064 | 26-May-2020 | 00:00 | x64 |
| ccmcore.dll | 5.00.8968.1042 | 1843576 | 26-May-2020 | 00:00 | x64 |
| ccmcore.dll | 5.00.8968.1042 | 1400184 | 26-May-2020 | 00:00 | x86 |
| ccmctm.dll | 5.00.8968.1042 | 1330552 | 26-May-2020 | 00:00 | x64 |
| ccmctm.dll | 5.00.8968.1042 | 1069944 | 26-May-2020 | 00:00 | x86 |
| ccmctmnotification.dll | 5.00.8968.1042 | 54648 | 26-May-2020 | 00:00 | x64 |
| ccmctmnotification.dll | 5.00.8968.1042 | 46968 | 26-May-2020 | 00:00 | x86 |
| ccmeval.exe | 5.00.8968.1042 | 3731336 | 26-May-2020 | 00:00 | x64 |
| ccmeval.exe | 5.00.8968.1042 | 3090296 | 26-May-2020 | 00:00 | x86 |
| ccmsdkprovider.dll | 5.00.8968.1042 | 1362296 | 26-May-2020 | 00:00 | x64 |
| ccmsdkprovider.dll | 5.00.8968.1042 | 1105784 | 26-May-2020 | 00:00 | x86 |
| ccmsetup.exe | 5.00.8968.1042 | 5286776 | 26-May-2020 | 00:00 | x64 |
| ccmsetup.exe | 5.00.8968.1042 | 4266872 | 26-May-2020 | 00:00 | x86 |
| ccmsetup.msi | Not Applicabile | 6701056 | 26-May-2020 | 00:00 | Not Applicable |
| ccmsetup-sup.cab | Not Applicabile | 1120321 | 26-May-2020 | 00:00 | Not Applicable |
| ccmutillib.dll | 5.00.8968.1042 | 1378680 | 26-May-2020 | 00:00 | x64 |
| ccmutillib.dll | 5.00.8968.1042 | 1112952 | 26-May-2020 | 00:00 | x86 |
| client.msi | Not Applicabile | 47841280 | 26-May-2020 | 00:00 | Not Applicable |
| client.msi | Not Applicabile | 56213504 | 26-May-2020 | 00:00 | Not Applicable |
| cloudproxyservice.cab | Not Applicabile | 16453799 | 26-May-2020 | 00:00 | Not Applicable |
| cloudproxyservice.cspkg | Not Applicabile | 16494209 | 26-May-2020 | 00:00 | Not Applicable |
| cm2002-client-kb4560496-i386.msp | Not Applicabile | 4792320 | 26-May-2020 | 00:00 | Not Applicable |
| cm2002-client-kb4560496-x64.msp | Not Applicabile | 8507392 | 26-May-2020 | 00:00 | Not Applicable |
| cm2002-kb4560496.update.sql | Not Applicabile | 1632 | 26-May-2020 | 00:00 | Not Applicable |
| cmgsconfiguration.xml | Not Applicabile | 4444 | 26-May-2020 | 00:00 | Not Applicable |
| cmpivot.msi | Not Applicabile | 5013504 | 26-May-2020 | 00:00 | Not Applicable |
| cmupdate.exe | 5.00.8968.1042 | 25241992 | 26-May-2020 | 00:00 | x64 |
| comanagementhandler.dll | 5.00.8968.1042 | 270200 | 26-May-2020 | 00:00 | x64 |
| comanagementhandler.dll | 5.00.8968.1042 | 213368 | 26-May-2020 | 00:00 | x86 |
| configmgr.ac_extension.amd64.cab | Not Applicabile | 12641976 | 26-May-2020 | 00:00 | Not Applicable |
| configmgr.ac_extension.i386.cab | Not Applicabile | 15926851 | 26-May-2020 | 00:00 | Not Applicable |
| consolesetup.exe | 5.00.8968.1010 | 1232464 | 26-May-2020 | 00:00 | x86 |
| ddrhandler.dll | 5.00.8968.1042 | 309640 | 26-May-2020 | 00:00 | x64 |
| distmgr.dll | 5.00.8968.1042 | 1259384 | 26-May-2020 | 00:00 | x64 |
| dwss.msi | Not Applicabile | 13012992 | 26-May-2020 | 00:00 | Not Applicable |
| failovermgr.dll | 5.00.8968.1042 | 275832 | 26-May-2020 | 00:00 | x64 |
| lsutilities.dll | 5.00.8968.1042 | 1239416 | 26-May-2020 | 00:00 | x64 |
| lsutilities.dll | 5.00.8968.1042 | 973176 | 26-May-2020 | 00:00 | x86 |
| m365ahandler.dll | 5.00.8968.1042 | 287608 | 26-May-2020 | 00:00 | x64 |
| m365ahandler.dll | 5.00.8968.1042 | 234872 | 26-May-2020 | 00:00 | x86 |
| mcs.msi | Not Applicabile | 17428480 | 26-May-2020 | 00:00 | Not Applicable |
| microsoft.configurationmanagement.feedback.common.dll | 5.2002.1086.1003 | 216432 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanagement.sensorframework.dll | 6.2008.50.1002 | 114552 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanagement.sensorframework.dll | 6.2008.50.1002 | 114552 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.azureroles.proxyservice.dll | 5.0.8968.1042 | 81800 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.azureroles.proxyservice.dll | 5.0.8968.1042 | 81800 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.cloudconnection.comanagmentworker.dll | 5.0.8968.1042 | 19840 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.cloudservicesmanager.dll | 5.0.8968.1042 | 152952 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.cloudservicesmanager.dll | 5.0.8968.1042 | 153464 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.oms_onboard.dll | 5.2002.1083.2900 | 41336 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.sensormanagedprovider.dll | 5.0.8968.1042 | 43896 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.sensormanagedprovider.dll | 5.0.8968.1042 | 43912 | 26-May-2020 | 00:00 | x86 |
| microsoft.configurationmanager.serviceconnector.dll | 5.0.8968.1042 | 391048 | 26-May-2020 | 00:00 | x86 |
| mp.msi | Not Applicabile | 24698880 | 26-May-2020 | 00:00 | Not Applicable |
| officeanalytics.dll | 5.00.8968.1042 | 207736 | 26-May-2020 | 00:00 | x64 |
| officeanalytics.dll | 5.00.8968.1042 | 170360 | 26-May-2020 | 00:00 | x86 |
| officeinventory.dll | 2006.0.13.0 | 637816 | 26-May-2020 | 00:00 | x64 |
| officeinventory.dll | 2006.0.13.0 | 534392 | 26-May-2020 | 00:00 | x86 |
| osdsetdynamicvariables.exe | 5.00.8968.1042 | 66944 | 26-May-2020 | 00:00 | x64 |
| osdsetdynamicvariables.exe | 5.00.8968.1042 | 54136 | 26-May-2020 | 00:00 | x86 |
| policyagentendpoint.dll | 5.00.8968.1042 | 1788288 | 26-May-2020 | 00:00 | x64 |
| policyagentendpoint.dll | 5.00.8968.1042 | 1318264 | 26-May-2020 | 00:00 | x86 |
| policyagentprovider.dll | 5.00.8968.1042 | 391048 | 26-May-2020 | 00:00 | x64 |
| policyagentprovider.dll | 5.00.8968.1042 | 292728 | 26-May-2020 | 00:00 | x86 |
| pulldp.msi | Not Applicabile | 12939264 | 26-May-2020 | 00:00 | Not Applicable |
| pulldp.msi | Not Applicabile | 15941632 | 26-May-2020 | 00:00 | Not Applicable |
| replicationconfiguration.xml | Not Applicabile | 124246 | 26-May-2020 | 00:00 | Not Applicable |
| resourceexplorer.exe | 5.2002.1083.2900 | 194424 | 26-May-2020 | 00:00 | x86 |
| sensorendpoint.dll | 5.00.8968.1042 | 122232 | 26-May-2020 | 00:00 | x64 |
| sensorendpoint.dll | 5.00.8968.1042 | 97144 | 26-May-2020 | 00:00 | x86 |
| sensorlogontask.exe | 6.2008.50.1002 | 29560 | 26-May-2020 | 00:00 | x86 |
| sensorlogontask.exe | 6.2008.50.1002 | 29560 | 26-May-2020 | 00:00 | x86 |
| sensorwmiprovider.dll | 5.00.8968.1042 | 114568 | 26-May-2020 | 00:00 | x64 |
| sensorwmiprovider.dll | 5.00.8968.1042 | 93048 | 26-May-2020 | 00:00 | x86 |
| setupcompletetemplate.cmd | Not Applicabile | 2094 | 26-May-2020 | 00:00 | Not Applicable |
| setupcompletetemplate.cmd | Not Applicabile | 2094 | 26-May-2020 | 00:00 | Not Applicable |
| setupcore.dll | 5.00.8968.1042 | 26622856 | 26-May-2020 | 00:00 | x64 |
| setuprollbacktemplate.cmd | Not Applicabile | 1863 | 26-May-2020 | 00:00 | Not Applicable |
| setuprollbacktemplate.cmd | Not Applicabile | 1863 | 26-May-2020 | 00:00 | Not Applicable |
| smp.msi | Not Applicabile | 11612160 | 26-May-2020 | 00:00 | Not Applicable |
| smsprov.dll | 5.00.8968.1042 | 14823288 | 26-May-2020 | 00:00 | x64 |
| srsrp.dll | 5.00.8968.1042 | 44920 | 26-May-2020 | 00:00 | x64 |
| srsrp.msi | Not Applicabile | 9306112 | 26-May-2020 | 00:00 | Not Applicable |
| srsserver.dll | 5.0.8968.1042 | 415112 | 26-May-2020 | 00:00 | x86 |
| srvmsgs.dll | 5.00.8968.1042 | 967544 | 26-May-2020 | 00:00 | x64 |
| srvmsgs.dll | 5.00.8968.1042 | 967032 | 26-May-2020 | 00:00 | x86 |
| statesyssqlclr.dll | 5.0.8968.1042 | 79224 | 26-May-2020 | 00:00 | x86 |
| supportcenterinstaller.msi | Not Applicabile | 5226496 | 26-May-2020 | 00:00 | Not Applicable |
| tsmanager.exe | 5.00.8968.1042 | 373128 | 26-May-2020 | 00:00 | x64 |
| tsmanager.exe | 5.00.8968.1042 | 302456 | 26-May-2020 | 00:00 | x86 |
| tsmbootstrap.exe | 5.00.8968.1042 | 729992 | 26-May-2020 | 00:00 | x64 |
| tsmbootstrap.exe | 5.00.8968.1042 | 588680 | 26-May-2020 | 00:00 | x86 |
| updatesdeployment.dll | 5.00.8968.1042 | 1907592 | 26-May-2020 | 00:00 | x64 |
| updatesdeployment.dll | 5.00.8968.1042 | 1490808 | 26-May-2020 | 00:00 | x86 |
| wuahandler.dll | 5.00.8968.1042 | 800648 | 26-May-2020 | 00:00 | x64 |
| wuahandler.dll | 5.00.8968.1042 | 545160 | 26-May-2020 | 00:00 | x86 |
References