Can't update to 1909 [HRESULT 0x800704B8]

cat-grep 21 Reputation points

I work in an enterprise business. Currently we are transitioning hundreds of PCs from the server AD to Azure AD utilizing Windows Autopilot and Intune MDM, which requires Windows 10 v1909 or newer. Many devices are still running versions between 1607 and 1903, and it would seem all of them are failing to update to a newer version, presumably with the same error, "Cannot apply the security template for the new OS. Error: 0x800704B8"

Any assistance would be tremendously appreciated.

Setup Logs

Windows 10 Setup
Windows 10 Setup
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,920 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Limitless Technology 39,511 Reputation points

    Hello @cat-grep

    Initially I can recommend you the tool SetupDiag that can help determine what may be the cause of blocking the upgrade:

    On the other hand, to workaround the version limitation you could set up a WSUS server and deploy the feature update for these computers up to 1909 and then let Autopilot/MDM do the reest. Here is a comprehensive guide to the WSUS Setup for this kind of purpose:

    Hope this helps with your query,


    --If the reply is helpful, please Upvote and Accept as answer--