Can't update to 1909 [HRESULT 0x800704B8]

Question

I work in an enterprise business. Currently we are transitioning hundreds of PCs from the server AD to Azure AD utilizing Windows Autopilot and Intune MDM, which requires Windows 10 v1909 or newer. Many devices are still running versions between 1607 and 1903, and it would seem all of them are failing to update to a newer version, presumably with the same error, "Cannot apply the security template for the new OS. Error: 0x800704B8"

Any assistance would be tremendously appreciated.

Setup Logs

Answer 1

Hello @cat-grep

Initially I can recommend you the tool SetupDiag that can help determine what may be the cause of blocking the upgrade:

https://learn.microsoft.com/en-us/windows/deployment/upgrade/setupdiag

On the other hand, to workaround the version limitation you could set up a WSUS server and deploy the feature update for these computers up to 1909 and then let Autopilot/MDM do the reest. Here is a comprehensive guide to the WSUS Setup for this kind of purpose:

https://learn.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wsus

Hope this helps with your query,

------------

--If the reply is helpful, please Upvote and Accept as answer--