SCCM Co-management issue

Question

Hi,

We have recently started to move all our devices to a co-managed state to leverage the additional functionality that Intune will be able to provide our organisation in terms of managing our Windows 10 devices. The move has been quite easy with very little issues, however I have a couple of devices that just won't receive the 2004 feature upgrade since becoming co-managed. These devices receive both quality and driver updates via Intune without any issue, but just won't display the feature update. All of them are running 1909 and have the latest CU, SSU's installed. Bothe the comanagement handler log and wuahandler logs both show that the devices updates are being managed by intune.

There isn't any blockers present on these devices as I have ran the 2004 media to ensure that there was no issues with any drives, disk space etc and they all passed. I have repaired the SCCM client and reinstalled it to no avail, I really don't want to rebuild these devices, but at the moment it seems like the only option that I have left. Has anyone else experienced a similar issue?

Thanks

Billy

Answer 1

These devices are most likely subject to a feature update safeguard/compatibility hold. Some safeguard holds are listed at https://learn.microsoft.com/en-us/windows/release-information/status-windows-10-2004. Also, see https://learn.microsoft.com/en-us/windows/deployment/update/update-compliance-feature-update-status#safeguard-holds for implementing Updates Compliance so that you have visibility into these holds and overall update tracking to boot.

Answer 2

As per the docs https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-for-business-configure#limitations-for-windows-10-feature-updates,
While Windows 10 feature updates remains in public preview, when co-managing devices with Configuration Manager and Intune, there is a limitation where feature update policies may not immediately take effect, causing devices to update to a later feature update than configured in Intune. This limitation will be removed with a future update to Configuration Manager.

reference https://learn.microsoft.com/en-us/answers/questions/74051/intune-device-will-update-to-windows-10-version-20.html

Answer 3

Hi Jason,

Thanks for sharing the links it looks like you could onto something as they all have Conexant ISST audio installed, so that could be the reason why they aren't upgrading. I will opt out of safeguard hold on one of the devices to see if that allows the device to upgrade, and let you know the results

Thanks

Billy

Answer 4

Hi Jason,

I can confirm that the answer you provide was correct and the devices were in fact being prevent from upgrading by the safeguard hold because of the Conexant audio issues.

Thank you for help

Regards

Billy