Update Rollup for Microsoft Endpoint Configuration Manager current branch, version 2010

KB 4600089

Summary

This article describes issues that are fixed in this update rollup for Microsoft Endpoint Configuration Manager current branch, version 2010. This update applies both to customers who opted in through a PowerShell script to the early update ring deployment, and customers who installed the globally available release.
For additional information on changes in Configuration Manager version 2010, refer to:
What’s new in version 2010 of Configuration Manager current branch
Summary of changes in Microsoft Endpoint Configuration Manager current branch, version 2010

Issues that are fixed

Configuration Manager console exceptions
The console terminates or generates an exception under any of the following conditions. 

  • If the process to update boot images on distribution points takes longer than eight minutes exception details resembling the following are shown.

Exception type:   System.ArgumentOutOfRangeException
Message:          Value of '101' is not valid for 'Value'. 'Value' should be between 'minimum' and 'maximum'.

  • If the tenant onboarding process is completed and device uploads are limited to a specific collection, the user cannot modify the limiting collection as the console terminates. This occurs if the user is denied access to  if they are denied access to the parent of the limiting collection.

  • When editing an application deployment type that did not previously contain a content path.

  • The console issue detailed in the following article.
    KB 4599924 Console terminates unexpectedly in Configuration Manager current branch, version 2010

SMS_Executive (smsexec.exe) service exceptions
The SMS_Executive service terminates under any of the following conditions.

  • On Windows Server 2012 R2 site servers after updating to Configuration Manager version 2010. This occurs if Internet Information Services (IIS) was never previously installed on the server.

  • If the client installation lock file has an invalid file date.

  • If the software update point has the “Use a proxy server when downloading content by using automatic deployment rules” setting enabled.

Other issues

  • The Run PowerShell Script task sequence step does not honor the SMSTSDisableStatusRetry variable. This results in multiple attempts to send status messages even when a machine is offline, leading to increasing delays in task sequence completion.

  • Firewall policies assigned through the Microsoft Endpoint Manager admin center do not apply on Windows 10, version 20H1 and later clients.

  • Configuration Manager clients that update their BIOS may be listed in twice in multiple locations in the Configuration Manager console.

  • Multiple client log files, such as CoManagementHandler.log and execmgr.log, contain the following false negative log entry. This results in potentially valuable troubleshooting information being overwritten.

    Failed to GetDeviceManagementConfigInfo, honor MEM authority. Error (0x00000000).

  • If you delete downloaded content from the Community Hub, the content isn't deleted from the Community hub > Your downloads page and you're unable to download the content again.

  • The Push Update button is not enabled for revised Community Hub content.

  • Temporary content is not always deleted after a task sequence runs.

  • The Set custom schedule checkbox is cleared and any custom schedule settings removed when the list of partner software update catalogs is refreshed.

  • Hybrid Azure Active Directory joined clients may appear duplicated in the Configuration Manager console, but with different GUID's (SMSID). This occurs during an operating system deployment to the client where the management point is configured for HTTPS communication.

  • The CCMDEBUGLOGGING client installation property does not work when passed in during the Setup Windows and ConfigMgr task sequence step.

  • The Office 365 Client Management Dashboard displays all client channels as Other.

  • Client hardware inventory data is not replicated from a primary site to the central administration site (CAS) when reporting is enabled for the CCM_SoftwareDistributionClientConfig class in the ROOT\ccm\Policy\Machine\ActualConfig namespace. Errors resembling the following are recorded in the dataldr.log file on the primary site.

    Column names in each view or function must be unique. Column name 'ADV_RebootLogoffNotification0' in view or function 'v_GS_CCM_SOFTWAREDISTRIBUTIONCLIENTCONFIG' is specified more than once.

  • Software updates deployed via task sequence during a maintenance window may not restart the computer as expected. The Update Deployment.log file contains an error resembling the following.

    InstallTargetedUpdates failed, error 87d00708

  • A user with read-only access to applications is unable to copy or scroll down through script content in the Script Editor window.

  • Processing of Automatic Deployment Rules fails after updating to Configuration Manager version 2010. The Last Error Description reads "Auto Deployment Rule download failed". This occurs due to zero-byte temporary files left in the Windows\Temp folder during the download process.
     

  • Software Center fails to open on some Configuration Manager current branch, version 2010 clients. The SCClient_<domain>@<username>_1.log contains errors resembling the following. Note the line number may differ from the example below.

    Call to ExecuteQuery failed, Query: "Select * From CCM_Application WHERE UserUIExperience = TRUE"
    Exception caught in ExecuteQuery, line 465...
    (Microsoft.SoftwareCenter.Client.Data.WmiConnectionManager at ExecuteQuery)

    The DCMAgent.log also contains an error resembling the following, recorded at the same time as the SCClient log entry.  The 0x87d00315 error code translates to "The CI version info data is not available."  

    ExecuteApplicationQuery - Failed to get machine targeted applications (0x87d00315).

  • Client computers may unexpectedly receive a software update deployment if the target collection is changed from “All Systems” to another collection.

  • Package content beyond the first package is not cached locally on the client when the Save path as a variable setting is enabled for the Download Package Content task sequence step.

  • Computers incorrectly report non-compliance with a BitLocker fixed data drive encryption policy. This occurs for computers with only a single drive and partition, even when encrypted with BitLocker.

  • Surface driver synchronization fails if the Software Update Point is in a separate untrusted domain from the site server. And error resembling the following is recorded in the wsyncmgr.log file.

    Sync failed: The request failed with HTTP status 401: Unauthorized. Source: Microsoft.UpdateServices.Internal.ApiRemoting.ExecuteSPSearchUpdates

  • The Deployment Options and Allow clients to use distribution points from the default site boundary group settings on the Content tab of deployment properties may unexpectedly revert to default after saving changes.

  • Existing co-management policies do not apply to Windows Virtual Desktop.

  • Domain-joined clients that are connected to the internet, but not connected via VPN to a corporate network, are now able to receive Microsoft Defender policy data.

Hotfixes that are included in this update

KB 4594177 Client notifications sent to all collection members in Configuration Manager current branch, version 2010

Update information for Microsoft Endpoint Configuration Manager current branch, version 2010

This update is available in the Updates and Servicing node of the Configuration Manager console for environments that were installed by using early update ring or globally available builds of version 2010.

Members of the Configuration Manager Technology Adoption Program (TAP) must first apply the private TAP rollup before this update is displayed.

To verify which build is in use, look for a Package GUID by adding the Package GUID column to the details pane of the Updates and Servicing node in the console. The update applies to installations from packages that have the following GUIDs:

  • 8DD2203C-3250-4FEA-996E-CBB17B96BB7E

  • D5054056-F41C-4E61-90A7-4F135B76F806

  • AC764035-EEE2-4E87-A5D2-1F666A328A8D

  • 6B4F84B7-5555-48B0-AECC-74FB5A8AA24B

The update is also applicable to TAP builds with the private TAP rollup (6EB8FDAB-5ECE-4A05-8BDA-E175ED7F12D3) installed.

Restart information

This update does not require a computer restart but will initiate a site reset after installation.

Additional installation information

After you install this update on a primary site, pre-existing secondary sites must be manually updated. To update a secondary site in the Configuration Manager console, click Administration, click Site Configuration, click Sites, click Recover Secondary Site, and then select the secondary site. The primary site then reinstalls that secondary site by using the updated files. Configurations and settings for the secondary site are not affected by this reinstallation. The new, upgraded, and reinstalled secondary sites under that primary site automatically receive this update.

Run the following SQL Server command on the site database to check whether the update version of a secondary site matches that of its parent primary site:

select dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')

If the value 1 is returned, the site is up to date, with all the hotfixes applied on its parent primary site.

If the value 0 is returned, the site has not installed all the fixes that are applied to the primary site, and you should use the Recover Secondary Site option to update the secondary site.

File name

File version

File size

Date

Time

Platform

_smsprov.mof

Not Applicable

814353

20-Jan-2021

00:00

Not Applicable

_uimanifest.xml

Not Applicable

752

20-Jan-2021

00:00

Not Applicable

ac_extension_amd64manifest.xml

Not Applicable

332

20-Jan-2021

00:00

Not Applicable

ac_extension_i386manifest.xml

Not Applicable

331

20-Jan-2021

00:00

Not Applicable

adminconsole.msi

Not Applicable

54968320

20-Jan-2021

00:00

Not Applicable

adminservice.host.dll

5.0.9040.1044

155000

20-Jan-2021

00:00

x86

adminservice.host.dll

5.0.9040.1044

155000

20-Jan-2021

00:00

x86

adsource.dll

5.00.9040.1044

378768

20-Jan-2021

00:00

x64

affinityagent.dll

5.00.9040.1044

321400

20-Jan-2021

00:00

x64

affinityagent.dll

5.00.9040.1044

231312

20-Jan-2021

00:00

x86

aiupdatesvc.exe

5.0.9040.1044

94584

20-Jan-2021

00:00

x86

aius.msi

Not Applicable

6606848

20-Jan-2021

00:00

Not Applicable

baseutil.dll

5.00.9040.1044

1553272

20-Jan-2021

00:00

x64

baseutil.dll

5.00.9040.1044

1079696

20-Jan-2021

00:00

x86

bitlockermanagementhandler.dll

5.00.9040.1044

477048

20-Jan-2021

00:00

x64

bitlockermanagementhandler.dll

5.00.9040.1044

371088

20-Jan-2021

00:00

x86

ccm.dll

5.00.9040.1044

208248

20-Jan-2021

00:00

x64

ccmaadbroker.exe

5.00.9040.1044

31608

20-Jan-2021

00:00

x64

ccmaadbroker.exe

5.00.9040.1044

27536

20-Jan-2021

00:00

x86

ccmcisdk.dll

5.00.9040.1044

1288056

20-Jan-2021

00:00

x64

ccmcisdk.dll

5.00.9040.1044

962960

20-Jan-2021

00:00

x86

ccmcore.dll

5.00.9040.1044

1855352

20-Jan-2021

00:00

x64

ccmcore.dll

5.00.9040.1044

1408400

20-Jan-2021

00:00

x86

ccmexec.exe

5.00.9040.1044

2258832

20-Jan-2021

00:00

x64

ccmexec.exe

5.00.9040.1044

1696144

20-Jan-2021

00:00

x86

ccmid.dll

5.00.9040.1044

635768

20-Jan-2021

00:00

x64

ccmid.dll

5.00.9040.1044

507768

20-Jan-2021

00:00

x86

ccmiis.dll

5.00.9040.1044

1679224

20-Jan-2021

00:00

x64

ccmiis.dll

5.00.9040.1044

1493392

20-Jan-2021

00:00

x86

ccmsetup.cab

Not Applicable

11277

20-Jan-2021

00:00

Not Applicable

ccmsetup.exe

5.00.9040.1044

5392248

20-Jan-2021

00:00

x64

ccmsetup.exe

5.00.9040.1044

4350328

20-Jan-2021

00:00

x86

ccmsetup.msi

Not Applicable

6672384

20-Jan-2021

00:00

Not Applicable

ccmsetup-sup.cab

Not Applicable

1144286

20-Jan-2021

00:00

Not Applicable

client.msi

Not Applicable

51261440

20-Jan-2021

00:00

Not Applicable

client.msi

Not Applicable

60407808

20-Jan-2021

00:00

Not Applicable

cloudmanagementgateway.cab

Not Applicable

8180829

20-Jan-2021

00:00

Not Applicable

cloudmanagementgateway.cab

Not Applicable

8180905

20-Jan-2021

00:00

Not Applicable

cloudproxyservice.cab

Not Applicable

8853217

20-Jan-2021

00:00

Not Applicable

cloudproxyservice.cspkg

Not Applicable

8883328

20-Jan-2021

00:00

Not Applicable

cm2010-client-kb4600089-i386.msp

Not Applicable

8097792

20-Jan-2021

00:00

Not Applicable

cm2010-client-kb4600089-x64.msp

Not Applicable

10158080

20-Jan-2021

00:00

Not Applicable

cmupdate.exe

5.00.9040.1044

25820024

20-Jan-2021

00:00

x64

comanagementhandler.dll

5.00.9040.1044

405368

20-Jan-2021

00:00

x64

comanagementhandler.dll

5.00.9040.1044

325496

20-Jan-2021

00:00

x86

configmgr.ac_extension.amd64.cab

Not Applicable

15674930

20-Jan-2021

00:00

Not Applicable

configmgr.ac_extension.i386.cab

Not Applicable

19498947

20-Jan-2021

00:00

Not Applicable

crp.msi

Not Applicable

7770112

20-Jan-2021

00:00

Not Applicable

dmp.msi

Not Applicable

9330688

20-Jan-2021

00:00

Not Applicable

endpointprotectionendpoint.dll

5.00.9040.1044

594808

20-Jan-2021

00:00

x64

endpointprotectionendpoint.dll

5.00.9040.1044

460152

20-Jan-2021

00:00

x86

mcs.msi

Not Applicable

17338368

20-Jan-2021

00:00

Not Applicable

microsoft.configurationmanagement.feedback.common.dll

5.2010.1146.1005

421752

20-Jan-2021

00:00

x86

microsoft.configurationmanagement.sensorframework.dll

6.2011.91.3107

193936

20-Jan-2021

00:00

x86

microsoft.configurationmanagement.sensorframework.dll

6.2011.91.3107

193936

20-Jan-2021

00:00

x86

microsoft.configurationmanager.cloudbase.dll

5.2010.1146.1005

138616

20-Jan-2021

00:00

x86

microsoft.configurationmanager.cloudbase.dll

5.2010.1146.1005

138616

20-Jan-2021

00:00

x86

microsoft.configurationmanager.cloudconnection.telemetry.dll

5.0.9040.1016

69496

20-Jan-2021

00:00

x86

microsoft.configurationmanager.commonbase.dll

5.2010.1146.1000

48504

20-Jan-2021

00:00

x86

microsoft.configurationmanager.configmgrgatewayclient.dll

6.2011.91.3107

208784

20-Jan-2021

00:00

x64

microsoft.configurationmanager.configmgrgatewayclient.dll

6.2011.91.3107

208784

20-Jan-2021

00:00

x64

microsoft.configurationmanager.isvupdatessyncagent.dll

5.0.9040.1044

189328

20-Jan-2021

00:00

x86

microsoft.configurationmanager.oms_onboard.dll

5.2010.1093.3100

41336

20-Jan-2021

00:00

x86

microsoft.configurationmanager.sensormanagedprovider.dll

5.0.9040.1044

36216

20-Jan-2021

00:00

x86

microsoft.configurationmanager.sensormanagedprovider.dll

5.0.9040.1044

36240

20-Jan-2021

00:00

x86

microsoft.configurationmanager.serviceconnector.dll

5.0.9040.1044

504208

20-Jan-2021

00:00

x86

mp.msi

Not Applicable

24686592

20-Jan-2021

00:00

Not Applicable

osdbitlocker_wtg.exe

5.00.9040.1044

4295544

20-Jan-2021

00:00

x64

osdbitlocker_wtg.exe

5.00.9040.1044

3493776

20-Jan-2021

00:00

x86

osddownloadcontent.exe

5.00.9040.1044

78736

20-Jan-2021

00:00

x64

osddownloadcontent.exe

5.00.9040.1044

67472

20-Jan-2021

00:00

x86

osdrunpowershellscript.exe

5.00.9040.1044

97144

20-Jan-2021

00:00

x64

osdrunpowershellscript.exe

5.00.9040.1044

80760

20-Jan-2021

00:00

x86

osdsetuphook.exe

5.00.9040.1044

5154168

20-Jan-2021

00:00

x64

osdsetuphook.exe

5.00.9040.1044

4142992

20-Jan-2021

00:00

x86

patchdownloader.dll

5.00.9040.1044

164216

20-Jan-2021

00:00

x64

patchdownloader.dll

5.00.9040.1044

122256

20-Jan-2021

00:00

x86

policyagentendpoint.dll

5.00.9040.1044

1796472

20-Jan-2021

00:00

x64

policyagentendpoint.dll

5.00.9040.1044

1324944

20-Jan-2021

00:00

x86

policypv.dll

5.00.9040.1015

993672

20-Jan-2021

00:00

x64

portlweb.msi

Not Applicable

7335936

20-Jan-2021

00:00

Not Applicable

pulldp.msi

Not Applicable

12865536

20-Jan-2021

00:00

Not Applicable

pulldp.msi

Not Applicable

15855616

20-Jan-2021

00:00

Not Applicable

settingsagentdb.sqlce

Not Applicable

19403

20-Jan-2021

00:00

Not Applicable

settingsagentdb.sqlce

Not Applicable

19403

20-Jan-2021

00:00

Not Applicable

settingswmihandler.dll

5.00.9040.1044

249208

20-Jan-2021

00:00

x64

settingswmihandler.dll

5.00.9040.1044

209296

20-Jan-2021

00:00

x86

setupcore.dll

5.00.9040.1044

27198328

20-Jan-2021

00:00

x64

sitecomp.exe

5.00.9040.1016

910712

20-Jan-2021

00:00

x64

smp.msi

Not Applicable

11517952

20-Jan-2021

00:00

Not Applicable

smsclient.dll

5.00.9040.1044

487312

20-Jan-2021

00:00

x64

smsclient.dll

5.00.9040.1044

383864

20-Jan-2021

00:00

x86

smsprov.dll

5.00.9040.1044

15026064

20-Jan-2021

00:00

x64

srsrp.msi

Not Applicable

9248768

20-Jan-2021

00:00

Not Applicable

srsserver.dll

5.0.9040.1044

416632

20-Jan-2021

00:00

x86

supportcenterinstaller.msi

Not Applicable

5541888

20-Jan-2021

00:00

Not Applicable

tscore.dll

5.00.9040.1044

3845496

20-Jan-2021

00:00

x64

tscore.dll

5.00.9040.1044

2987384

20-Jan-2021

00:00

x86

tsmanager.exe

5.00.9040.1044

6178680

20-Jan-2021

00:00

x64

tsmanager.exe

5.00.9040.1044

4833144

20-Jan-2021

00:00

x86

updatesdeployment.dll

5.00.9040.1044

1981304

20-Jan-2021

00:00

x64

updatesdeployment.dll

5.00.9040.1044

1546616

20-Jan-2021

00:00

x86

wsyncact.dll

5.0.9040.1044

128888

20-Jan-2021

00:00

x86

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

×