New SCCM 1906 Hotfix Rollup KB4517869
There is a new SCCM 1906 hotfix rollup KB4517869 and it replaces the previous updates – KB4515740 and KB4516430. This update applies both to customers who opted in through a PowerShell script and customers who installed the globally available release.

Table of Contents
Hotfix Rollup KB4517869
The hotfix rollup KB4517869 replaces the following previously released updates :-
- KB4515740 – Custom security roles lose folder permissions after an update to SCCM 1906.
- KB4516430 – Update for Configuration Manager version 1906, early update ring.
If you have not installed the above updates, you can install KB4517869 for SCCM 1906. First of all install this update on a primary site. After you do that, the pre-existing secondary sites must be manually updated.
Configuration Manager 1906 Hotfix Rollup KB4517869
KB4517869 includes the following fixes.
- The Configuration Manager console may terminate unexpectedly after reevaluating Management Insight rules or synchronizing third party updates.
- The Task Sequence Editor may return an Out of Memory error when trying to save large task sequences.
- Alternate Content Provider settings not defined as expected in the policy for custom client settings. Affected customers should remove the original custom client settings then recreate them after installing this update.
- Special characters, such as an apostrophe, in metadata cause the evaluation of application groups to fail. The SettingsAgent.log contains entries similar to the following.
- Windows Server 2019 displays as Unknown in the Microsoft Defender Advanced Thread Protection dashboard.
- Group membership data gets removed if the Active Directory group discovery process fails with the following error recorded in the adgdis.log
INFO: Processing search path: 'LDAP://<search path>. ERROR: Decryption failed ERROR: Failed to enumerate directory objects in AD container LDAP://<search path
- The group membership data restores after the discovery process runs successfully.
- A management point is unable to connect to a read-only replica in environments using SQL Server Always On availability groups.
Install SCCM 1906 Hotfix Rollup KB4517869
To install SCCM 1906 Hotfix Rollup KB4517869
- Launch Configuration Manager console. Go to Updates and Servicing node.
- Right click Configuration Manager 1906 Hotfix Rollup KB4517869 and click Install Update Pack.
The hotfix includes updates for site server, console and client agent. Since I am installing this on my lab setup, I am ignoring the prerequisite check warnings. Click Next.
Choose the client update setting and click Next.
On the Completion page, click Close.
Finally we must install the new version of console. Click OK to update the console from version 5.1906.1096.1600 to 5.1906.1096.2000.
We installed the update and still lost permissions for custom security roles. Anybody have a fix?
Hi Prajwal,i just installed SCCM 1906 Hotfix Rollup KB4517869.
After successfully installing, now users are unable to see apps in software center. Apps(available deployment)that are deployed to All users collection. But apps deployed to machine collection is fine.
Any idea if the upgrade caused this?
And any advise what i can check to find out what is causing this?
Thanks!
are you all right? I have problems downloading kb4517869, do not download and also give me no errors, I verified that you have a solution of [], correcting by DB, can you pass me please?
This hotfix rollup will not download. When I go to Updates and Servicing, it shows up and has a status of “Available to download”. It never changes. I had successfully updated from 1902 to 1906 3 days ago. The subsequent check pulled in the hotfix, but it will not download. If I click on “Download” (all other options are grayed out), it says either Checking for updates or Still checking for updates. I tried the reset tool and the update disappeared, came back on next check, but no change in status – still won’t download. I let it sit for a day and a half to see if things would change… nope.
We are experiencing the same issue. Upgraded from 1902 to 1906 this weekend, but when we wanted to apply the Hotfix it never downloaded. Also tried the reset tool, tried removing the DB object and restart SMS_EXECUTE, still nothing.
Watching the log, it seems that it doesn’t find anything to download to the EasySetup… as if it doesn’t find anything.
I’d appreciate getting any help proceeding with this.
Please read this – https://twitter.com/thefrankuk/status/1199769937901953026?s=21
Same issue here
Same issue here
https://twitter.com/thefrankuk/status/1199769937901953026?s=21
https://twitter.com/thefrankuk/status/1199769937901953026?s=21
Same issue and did the same things as Patrick Sporny wrote
https://twitter.com/thefrankuk/status/1199769937901953026?s=21
Were you able to figure it out?
Please read this – https://twitter.com/thefrankuk/status/1199769937901953026?s=21
Here’s the workaround, courtesy of “TheOriginalWitness” on Reddit:
Open SQL Mgmt Studio and run below
EXEC spAddPackageToDownload ‘PACKAGEGUIDHERE’ (You can get this from the Updates and Service Node > Package Guid Column
Restart smsexec and watch DMPDownloader.log for progress.
[Failed]:Checks if the specified SQL Server meets the minimum requirements for site upgrade.
SCCM1906 done.HotfiX getting error KB4517869…PLeASe helP
Issue resolved;
— Enable the SQL Broker on the Site database
USE master;
GO
ALTER DATABASE CM_P01 SET ENABLE_BROKER
GO
— SET the Site Database as trustworthy
USE master;
GO
ALTER DATABASE CM_P01 SET TRUSTWORTHY ON
GO
— SET the Database to honor the HONOR_BROKER_PRIORITY
USE master;
GO
ALTER DATABASE CM_P01 SET HONOR_BROKER_PRIORITY ON;
GO
THNX this help
After installing hotfix KB4517869, I am getting “insufficient permissions for software installation in software center, users are able to install any softwares and windows updates. please help me
read it as : users are not able to install any softwares and windows updates. please help me
Thanks for the great guide, just finished my update!
Hi sir,
we started the update for hotfix 1906 kb4517869.
download completed
replication ”
prerequisite check ”
Installation in progress
next box
process update package completed
download update package cab file – not started
extract – not started etc.
I do not see anything like an error in dmpdownloader.log
Thanks, Kchusa
Hi I have prereq failed …. there is no error in cmupdate.log.
in update is this
[Failed]:Checks if the specified SQL Server meets the minimum requirements for site upgrade.
Hello Prajwal, I can’t update, the error in the installation is “[Failed]:Unloading WMI provider. Check cmupdate.log for details.”
What is the error that you see in cmupdate.log ?.
Hello, I have the same problem. Im trying to update from 1906 to 1910 or 2002 but both updates fail on Unload WMI provider. The cmupdate.log says “Failed to unload WMI providers. (0x80041010)”. What can I do next ?
Hi Prajwal, we’re seeing a “SQL availability group configured for manual failover (Checking failover state of availability group replicas)” error when we try to run prerequisite check for this Hotfix. Have you seen tis before?
Thanks Prajwal!