There is a new hotfix KB28458746 available for SCCM version 2403 that fixes a software update deployment issue with Configuration Manager clients. This guide covers the fixes included in the KB28458746 hotfix and describes the process for installing this update.

The Configmgr product team discovered the issues in version 2403 and determined that they occur when Configuration Manager configures the policy “Specify source service for specific classes of Windows Updates” to use Windows Server Update Services. The KB28458746 update prevents Configuration Manager from configuring the policy but doesn’t remove or change any previously configured policy.

It is important to note that KB28458746 is the second hotfix released for SCCM 2403 after the KB28290310 CMG VMSS hotfix. It’s an out-of-band update, and you must use the update registration tool to import hotfixes in the SCCM console. This hotfix doesn’t replace any previously released hotfix.

Install and Update Third Party Applications with Patch My PC
Install and Update Third Party Applications with Patch My PC

Installing the KB28458746 update doesn’t require a computer restart or a site reset after installation. However, after installing the hotfix on your primary sites, pre-existing secondary sites must be manually updated. Remember that to apply the KB28458746 hotfix, you must be using Configuration Manager, version 2403.

Issues fixed in KB28458746

Installing the KB28458746 update for Configuration Manager 2403 resolves the following issues:

  • Features on demand, such as .NET 3.5 Framework, fail to install on clients with errors 80d02002 or 800F0954.
  • Optional features like the Remote Server Administration Tools (RSAT) fail to install on clients with no specific error code.
  • Language Packs fail to install on Configuration Manager clients.
  • The option to check online for Microsoft updates might be missing on Windows 10 computers.

Read the official documentation by Microsoft on KB28458746 Software update management client fix for version 2403.

Steps to Install SCCM 2403 Hotfix KB28458746

We’ll now go through the steps to download and install the hotfix KB28458746 for SCCM version 2403.

Step 1: Download the KB28458746 hotfix

The KB28458746 hotfix is available for download from the Microsoft Download Center. Click on the following link to obtain the hotfix: Download KB28458746. The browser downloads the file: CM2403-KB28458746.ConfigMgr.Update on your server.

Step 2: Import the hotfix KB28458746

Once you’ve obtained the hotfix, the next step is to use the update registration tool to import the KB28458746 hotfix into the Configuration Manager.

The steps for importing a KB28458746 update into SCCM are as follows:

  1. On the computer that hosts the service connection point, launch the command prompt with administrative privileges.
  2. Change directories to the location that contains the update file.
  3. Run the following command to start the update registration tool: CM2403-KB28458746.ConfigMgr.Update
Import the hotfix KB28458746 into SCCM
Import the hotfix KB28458746 into SCCM

To register the update, on the Configuration Manager update registration window, click Next. Close the Configuration Manager Update Registration window.

After the hotfix KB28458746 is registered, it appears as a new update in the Configuration Manager console within 24 hours. You can accelerate this process by going to the Administration > Updates and Servicing node and selecting Check for Updates.

Register the hotfix KB28458746 into SCCM
Register the hotfix KB28458746 into SCCM

Step 3: Install the KB28458746 hotfix

After importing the hotfix, use these steps to install the

  • Launch the Configuration Manager console on the server.
  • Navigate to Administration\Overview\Updates and Servicing.
  • Right-click Configuration Manager 2403 Hotfix KB28458746 and select Install Update Pack.
Install SCCM 2403 Hotfix KB28458746
Install SCCM 2403 Hotfix KB28458746

This OOB hotfix includes the updates for the site server and console. No console upgrade is required. For prerequisite warnings, you can enable the option “Ignore any prerequisite check warnings and install the update” on your production server running version 2403. Click Next.

Install SCCM 2403 Hotfix KB28458746
Install SCCM 2403 Hotfix KB28458746

Accept the license terms for installing the update and click Next.

Install SCCM 2403 Hotfix KB28458746
Install SCCM 2403 Hotfix KB28458746

Review the hotfix installation settings on the Summary page and click Next. Close the Configuration Manager Updates wizard.

Install SCCM 2403 Hotfix KB28458746
Install SCCM 2403 Hotfix KB28458746

The Configuration Manager 2403 hotfix KB 28458746 update required a total of just 30 minutes to install on the server, and there were no errors encountered at any point in the installation process. There won’t be a SCCM site reset after the installation of the hotfix, and it doesn’t require a restart of the computer.

Upgrade Clients

After installing the hotfix KB28458746 for ConfigMgr 2403, you must upgrade the client agents. Applying the KB28458746 hotfix updates the client agent version to 5.00.9128.1014. For more help on upgrading the clients, refer to the guide SCCM client upgrade options.

Update Secondary Sites

As mentioned earlier, after you install the hotfix KB28458746 on a primary site, pre-existing secondary sites must be manually updated. Read more about secondary site installation in SCCM to get an idea of how to install secondary sites in SCCM.

To update a secondary site in the Configuration Manager console, select Administration > Site Configuration > Sites > Recover Secondary Site, and then select the secondary site. Run the following SQL Server command on the site database to check whether the update version of a secondary site matches that of its parent primary site:

select dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')
  • If the value 1 is returned, the site is up-to-date, with all the hotfixes applied on its parent primary site.
  • If the value 0 is returned, the site has not installed all the fixes that are applied to the primary site, and you should use the Recover Secondary Site option to update the secondary site.

Post Installation

After you install hotfix KB28458746 for SCCM 2403, it might be necessary to use a group policy object (GPO) to remove previously configured policy values. These values are under Windows Components > Windows Update > Manage updates offered from Windows Server Update Service.

The corresponding registry location is HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate.

  • SetPolicyDrivenUpdateSourceForDriverUpdates
  • SetPolicyDrivenUpdateSourceForFeatureUpdates
  • SetPolicyDrivenUpdateSourceForOtherUpdates
  • SetPolicyDrivenUpdateSourceForQualityUpdates

Depending on your environment, it might also be necessary to set the Specify settings for optional components and component repair policy to “Download repair content and optional features directly from Windows Update“. This policy is under Computer Configuration > Administrative Templates > System.

Still Need Help?

If you need further assistance on the above article or want to discuss other technical issues, check out some of these options.

Prajwal Desai

Prajwal Desai is a technology expert and 10 time Dual Microsoft MVP (Most Valuable Professional) with a focus on Microsoft Intune, SCCM, Windows 365, Enterprise Mobility, and Windows. He is a renowned author, speaker, & community leader, known for sharing his expertise & knowledge through his blog, YouTube, conferences, webinars etc.