Updating MEMCM (Microsoft Endpoint Manager Configuration Manager) to version 1910 on Christmas Eve

Introduction

Configuration Manager 1910 went globally available this friday, december 20, so I wanted to stay true to tradition and walk through the upgrade process based on my own environment.

This is usually something I do the very moment it’s possible to opt-in using the early update ring, but this time around the hours usually spent on blogging, are spent on my new born (9 weeks today). šŸ™‚

As usual, this is based on a production environment. This might seem ballsy to do during the holiday season, but I’m confident I will be fine. Also, backup ftw, right? šŸ˜€ (NOTE: This particular environment have survived upgrades since SCCM 2012 without ever breaking)

Checklist

There is a checklist on how to update yourĀ Configuration Manager Current Branch to the latest version. Obviously, not everything listed in there is relevant to all environments, so therefore Iā€™m only covering those parts relevant to me. If interested in the complete checklist, you can find that right here: https://docs.microsoft.com/en-us/configmgr/core/servers/manage/checklist-for-installing-update-1910

Windows Update

Make sure your site servers are fully patched with any pendingĀ Windows Updates.Ā Also make sure the servers are being restarted if needed.

Review the Windows 10 ADK

ADKĀ is theĀ Windows Assessment and Deployment Kit, which is an external dependency when deploying operating systems withĀ ConfigMgr. The version required for MEMCM 1910Ā is the Windows 10 1903 ADK (10.1.18362), which also is the most recent version. I already use the 1903 ADK, so no need for me to do anything here. If you need the latest ADK, download that here:Ā https://docs.microsoft.com/en-us/windows-hardware/get-started/adk-install

Also, more on Windows 10 ADK and MEMCM support here: https://docs.microsoft.com/en-us/sccm/core/plan-design/configs/support-for-windows-10#windows-10-adk

A quick peek at my site server where the correctĀ Windows 10 ADKĀ is installed:

Disable Maintenance Tasks

A good practice, also according to the checklist, is to disable following highlighted maintenance tasks. There is a chance that the upgrade might fail, if one of the mentioned tasks runs while the upgrade is running. (Another approach is to run the upgrade, outside the schedule of those tasks)

Backup

Make sure you have backup! Backup of the SQL and backup of theĀ CD.latest folder. As per above screenshot, Iā€™m currently not using the built in backup task (I use something custom in SQL), but whatever backup method you use, make sure you have a relevant backup. That includes both SQL and the CD.latest folder. The CD.latest folder can be found in the installation directory ofĀ Configuration Manager:

Disable Antivirus

Thatā€™s right. The recommendation is to disable any running antivirus. My server is running Server 2016 and therefore comes withĀ Windows DefenderĀ built in. To quickly disable Windows Defender, launch the Local Group Policy Editor from run:Ā gpedit.mscĀ and findĀ Computer Configuration / Administrative Templates / Windows Components / Windows DefenderĀ and setĀ Turn off Windows DefenderĀ toĀ Enabled.

Run Prerequisite Check

Back in theĀ Configuration ManagerĀ Console in the Updates and Servicing note, itā€™s time to run the prerequisite check. Do so either in the ribbon or by right clicking on theĀ Configuration Manager 1910Ā update as shown below:

The status of theĀ Prerequsite CheckĀ can be monitored in theĀ Configuration ManagerĀ console in the Monitoring ->Ā  Updates and Servicing Status node:

Or by monitoring theĀ C:\ConfigMgrPrereq.logĀ file. When all done, the log file will yield ***** Prerequisite checking is completed. *****

Install Update Pack

With all the prerequisite checks passed, itā€™s time to install the actual update.

  • ClickĀ Install Update PackĀ in the console and complete the wizard as shown below:

  • Ignore the prerequisite checks ā€“ we already did that:

  • Select and enable optional features. They can also be added later, post-update:

  • Make a selection of whether you want to test the new MEMCM client or not. I went on without testing it (I have never ever seen any issues that made me wish that I tested the client first in pre-production, but Iā€™m also testing Technical Previews)

  • Accept the license terms. Filling out the SA expiration date is optional. I didnā€™t fill it out. This is the final step before getting the mandatoryĀ summary

  • By now the upgrade is installing. The progress can be followed in theĀ Monitoring / Updates and Servicing StatusĀ node. Use refresh regularly as the status is not real time:

  • Monitor ConfigMgr-InstallDir\Logs\CMUpdate.logĀ and ConfigMgr-InstallDir\Logs\hman.logĀ if curious to see what happens real time:

Update Completed

  • Once everything is done, theĀ Update Pack Installation StatusĀ will display something similar to below:

  • And theĀ Updates and Servicing StatusĀ in the console will be noting the update asĀ Installed:

Post Upgrade Steps

  • UpdateĀ Configuration ManagerĀ consoles
  • Review site status and component status
  • Enable the maintenance tasks that previously was disabled
  • Update custom boot images: RunĀ Update Distribution PointsĀ on all your boot images to include the latest client components

  • Enable Windows Defender that previously was disabled through the Local Group Policy Editor. When you do so, make sure to start the Defender service again.Ā Start now

ENJOY šŸ™‚

More Information

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.