Summary of changes in Microsoft Endpoint Configuration Manager current branch, version 1910

Site Systems

• After expanding a stand-alone primary site into a hierarchy, replication may fail between the central administration site (CAS) and other sites. This occurs due to conflicts in replication groups added after the expansion.

• During the site update process the perquisite checker incorrectly reports a warning regarding Active Directory permissions. A message resembling the following is logged even though the site server machine account has the correct permission.

  Warning; The site server might be unable to publish to Active Directory. The computer account for the site server must have Full Control permissions to the System Management container in its Active Directory domain.

• The Site Backup maintenance task can be enabled without configuring a path for backup files; this results in the task failing until a path is added.

• Hyper-V Production Checkpoints may fail for virtualized Configuration Manager site servers due a timeout condition in the SMSWriter service.

• The SMS_MESSAGE_PROCESSING_ENGINE.log on a secondary site server may record the following error approximately every five minutes. Note this is log entry is not indicative of a true problem state on the site server.

  ERROR: Failed to initialize message processor. System.InvalidOperationException: Unsupported type Instant when create message process runtime

• The extraction process for the Data Replication Service (DRS) may fail in large environments. Errors resembling the following are recorded for the failing configuration group.

  SQL Server reported error: NET Framework execution was aborted by escalation policy because of out of memory at sqllang!CClrError::CheckClrSystemError

• In environments with many distribution points, the Component Status Summarizer log – compsumm.log – may quickly fill with entries resembling the following. Note these messages are not indicative of a problem state, but may cause other relevant data to be overwritten in the log file.

  Warn>: UpdateServerRolesFromSCF: Unknown role name: SMS SITE SYSTEM

• New database indexes are added to reduce the likelihood of Data Replication Service (DRS) backlogs.

Operating System Deployment and Task Sequences

• The timeout period used in a task sequence to wait for complete startup of the SMS Agent Host service (ccmexec) is now configurable using as a variable. The SMSTSWaitCcmexecOperationalTimeout task sequence variable can be configured with a value in seconds. The default value if nothing is specified is 30 minutes.

• The SetupComplete.cmd file may contain an unexpected NULL character after modification during a task sequence. This can block other applications, such as System Center Virtual Machine Manager, from later updating that file.

• Windows 10 Upgrade task sequences may fail with error 80041010 due to a timing condition. Errors resembling the following are recorded in the smsts.log on the client.

  Updating settings in \\.\root\ccm\policy\machine\actualconfig​
  Failed to initate policy evaluation for namespace 'root\ccm\policy\machine', hr=0x80041010​
  Error compiling client config policies. code 80041010​
  Task Sequence Manager could not initialize Task Sequence Environment. code 80041010​

• The Enable BitLocker task sequence step fails if there are any existing volumes encrypted with BitLocker. This occurs even if the “Current operating system drive” is the only one selected for encryption.

• After a site recovery, the distribution manager component may record errors resembling the following in the distmgr.log file.

  Failed to get sitesystem cert for server {Distribution Point}
  Failed to check if the sitesystemcert installation state for ["Display=\\{Distribution Point}\"]MSWNET:["SMS_SITE={Site code}"]\\{Distribution Point}\, Error - 0x80004005
  InstallDPSiteSystemCert failed to install the sitesystem certificate for ["Display=\\{Distribution Point}\"]MSWNET:["SMS_SITE={Site code}"]\\{Distribution Point}\, Error - 0x80004005

  Additionally, the CertMgr.log contains entries resembling the following.

  ProcessRoleSSLCert() - Detect reencryption needed for the active issuing cert. Possible reason: Site key was changed. Skip to process role SSL certs in this cycle

  These errors do not impact typical content distribution scenarios but may lead to errors in sites with enhanced HTTP enabled.

• If you deploy a task sequence for PXE or media (USB or DVD), the client does not receive the associated policy. An error resembling the following is recorded in the smsts.log file on the client.

  There are no task sequences available to this computer.

• An operating system deployment task sequence may not resume when the client computer restarts after installation of the Configuration Manager client. Errors resembling the following are recorded in the smsts.log file.

  Failed to set DP auth token in registry
  Failed to resume task sequence (0x800703E6).
  Error to resume task seqauence.
  Exiting with return code 0x800703E6
  Process completed with exit code 2147943398
  Task sequence completed 0x800703E6

   

Product Feedback

• The UploadOfflineFeedback utility now supports the use of a proxy server.
  The following additional command line parameters are available to enable proxy server support.

  -x, Proxy: Specifies a proxy server to connect internet
  -o, Port: Specifies the port for the proxy server to connect internet.
  -u, User: Specifies user name for the proxy server to connect internet.
  -w, Password: Specifies the password for the proxy server to connect internet. Type an asterisk (*) to produce a prompt for the password. The password is not displayed when you type it at the password prompt. We strongly recommend to use an asterisk (*) to produce a prompt for the password input since plain text on command line is less secure.
  -i, Skip Connection Check: Skips the network connection check, just uploads feedback with specified settings.

   

Hardware Inventory

• Hardware inventory data using the KernelModeTime property of the Win32_Process class is not displayed in Resource Explorer.

   

PowerShell

• The Set-CMSoftwareUpdateDeployment PowerShell cmdlet is updated to resolve issues with several parameters.

   

• The Get-CMDevice cmdlet does not return a device entry unless a collection is also specified as a parameter.

• After using the Set-CMTSStepDownloadPackageContent cmdlet to add a driver package, later attempts to edit the task sequence return an error resembling the following in the Configuration Manager console.

  The objects referenced in the task sequence cannot be found. Verify that the object exists and that the task sequence references the correct object name and location.

• The Import-CMDriver cmdlet fails if the source location specified in the -Path parameter contains a txtsetup.oem file.

• Wildcards do not work as expected in the ScriptName parameter of the Get-CMScript PowerShell cmdlet.
   

• The New-CMSoftwareUpdateAutoDeploymentRule PowerShell cmdlet does not support the “No deployment package” option seen in the Create Automatic Deployment Rule Wizard.

• Software Update Point proxy settings are not affected when using the Set-CMSiteSystemServer cmdlet with the relevant proxy parameters.

   

Reporting and Data Warehouse

• The SCCMReporting.log file may increase in size beyond the maximum log file size. Depending on the activity recorded in the file, it may consume all available free space on the host drive.

• Data for applications that are upgraded or reinstalled is not reported in the Data Warehouse as expected.

Configuration Manager console

• Configuration Manager administrators may be able to see and delete deployment settings for an automatic deployment rule when they do not have permissions on the target collection.

• The Task Sequence Editor is updated to allow for more efficient memory usage, reducing the chance of “Out of memory” errors when saving large task sequences.

Software Distribution and Content Management

• An Install Package or Install Application task run via stand-alone media will fail if either of the following conditions is true.

  • The Active Directory schema is not extended when using the media in the same domain.

  • The standalone media is run in a domain different from which it was created.​​

• In an environment with many active pull-distribution points (Pull DP), a deadlock or hang condition on one Pull DP may halt content transfer to all others.

   

Client

• Users are prompted for authentication as soon as they open Software Center if a custom tab is enabled, instead of when they access the custom tab. This occurs if Common Access Card authentication is required for the web page displayed on the custom tab.

• Client language pack files are removed after repairing the Configuration Manager client with the ccmrepair.exe utility.

• Windows Update for Business Policy deployments will fail with error 0x8004100c in the WUfBHandler.log file when targeted to client computers running the May 2019 Update of Windows 10 (version 1903) or later.

• Content is not available for tasks sequences when the client is on an intranet network, and the Always Internet Facing (CCMALWAYSINF) parameter is set to 1.

Co-management

• The option to enable co-management is not available after updating to Configuration Manager current branch, version 1910. This occurs if co-management was previously enabled with automatic client enrollment and/or client workloads configured for Pilot, and the co-management policy was deleted prior to updating to version 1910.

Software Updates Management

• Individual operating system security updates may still appear as Required in the Configuration Manager console even after the corresponding monthly quality rollup is installed. This is the result of an error with the update status summarizer stored procedure and occurs if the synchronization schedule between the software update point and Windows Server Update Services (WSUS) is configured on a monthly interval.