In this guide, I’ll cover the best new features in SCCM 2409 release. Version 2409 of Configuration Manager CB includes bug fixes, enhancements, and new features that improve product stability and efficiency.
Microsoft has released ConfigMgr update 2409, and sites running version 2309 or later can be upgraded to version 2409. I recommend reading the SCCM 2409 upgrade guide, which includes all the information required for upgrading your Configuration Manager to the current branch version 2409.
If you are following up on my blog posts on technical preview releases, you will notice that most of the new features introduced in the Configuration Manager 2409 release were first introduced with TP versions. Not all TP features make it into CB releases, but a few key ones do.
SCCM 2409 New Features and Improvements
The list of new features in the SCCM current branch version 2409 includes:
- New centralized search box in the console with workspace selection
- Added support for Windows 11 24H2 and Server 2025
- Support for SQL extended protection for authentication
- Software Metering Support for Arm64 Devices
- SQL 2012 and 2014 are no longer supported by SCCM 2409
- BitLocker Support for Arm64 Devices
- CMG Enhanced Security Option
- CMG Entra Application secret key renewal in SCCM
- Performance enhancement of policy processing and collection evaluation
Let’s go through each of these new features in detail.
New Centralized Search Box with desired workspace selection
The centralized search box feature in the SCCM 2409 console enables the option to select the desired workspace for searching. Console users can easily refine their search results by selecting the desired workspace from the drop-down menu.
By default, when you search for anything in the ConfigMgr console, the search is extended for all the workspaces. This may require more time to fetch the results. But narrowing the search to a workspace gives more accurate results.
For example, if you are looking to locate a Windows 11 device in the console, you can click the ‘All Workspaces‘ drop-down and select Assets and Compliance. This will yield quicker results and restrict the search to the chosen workspace.
SCCM 2409 adds support for Windows 11 24H2 and Server 2025
Configuration Manager version 2409 and later will support deploying Windows 11 24H2 and Windows Server 2025 operating systems. In addition, the 2409 version also supports installing and managing Windows 11 24H2 and Server 2025 as clients.
If you visit the Product Lifecycle dashboard in the SCCM 2409 console, you’ll notice Windows 11 24H2 support is included.
If you check the Windows upgrade readiness dashboard, you’ll find the devices that are ready for the Windows 11 24H2 upgrade.
The Boot image creation in SCCM on Windows Server 2025 now supports the latest Windows ADK. If you are deploying Windows Server 2025 with SCCM, make sure you’re using the latest ADK.
SCCM Support for BitLocker Task Sequence Steps for ARM64 Devices
Configuration Manager CB version 2409 supports BitLocker Task Sequence steps for Arm64 devices. In BitLocker Management, policies that include OS Drive encryption with a TPM protector and Fixed Drive encryption with the Auto-Unlock option are supported on Arm64 devices.
SCCM 2409 supports SQL Extended Protection for Authentication
SCCM 2409 now supports SQL Extended Protection for Authentication. When connections are established with Extended Protection, this security feature strengthens defenses against MITM attacks, enhancing SQL Server’s security. All of these improvements work together to lower the possibility of unwanted access and safeguard private information stored on the SQL Server Database Engine.
Software Metering Support for Arm64 Devices
One of the best new features in SCCM 2409 is software metering support for Arm64 devices. Software metering is used to monitor Windows PC desktop apps with a filename ending in .exe. This feature is now extended for Arm64 devices, and that’s really useful.
Performance enhancement of policy processing and collection evaluation
The performance of policy processing and collection evaluation has been enhanced. Blocking chains from sp_ProcessPolicyChanges, which PolicyPv called, used to run for hours at a time, interfering with several workloads, such as processing policies and collection management.
Enhanced Security for CMG
One of the new features in SCCM 2409 is that the storage account keys are no longer used by CMG Setup to communicate with CMG’s Azure storage account; instead, managed identities and third-party server apps are used.
If you are setting up a new CMG in SCCM 2409 and later, the storage account key access is disabled. For sessions upgrading from earlier versions to 2409, the ‘CMG enhanced security‘ button is shown as enabled.
A new CMG enhanced security option will appear on the top ribbon of the SCCM console if you have already configured the CMG. The same option is available when you right-click the Cloud Management Gateway server in the console.
New CMG Entra Application secret key renewal in SCCM
The ‘Renew Secret Key‘ feature now opens a dialog with four options for the validity period. This update also prevents applications older than 800 days (approximately two years) from renewing their secret keys. The same options are available when creating a new app in CMG. Refer to the following guide on how to renew the Entra application secret key in SCCM.
SQL 2012 and 2014 are no longer supported by SCCM 2409
This is valuable information regarding SQL support for SCCM, not a new feature in itself. Starting with SCCM 2409, SQL 2012 and 2014 are no longer supported. Microsoft SQL Server 2012 reached its end of support on July 12, 2022, and Microsoft SQL Server 2014 support ended on July 9, 2024.
If you’ve hosted the SCCM database on SQL 2012 or SQL 2014, you must upgrade these versions to the next supported version. Refer to the guide on supported SQL Server versions for SCCM to find more details. A new prerequisite check has been added in ConfigMgr 2409 that will block the upgrade if it detects the SQL 2012 or SQL 2014 versions.
Still Need Help?
If you need further assistance on the above article or want to discuss other technical issues, check out some of these options.
