The second hotfix for SCCM Current Branch (1606) is now available. This post is a complete SCCM 1606 Update Rollup 1 (KB3186654) installation guide. If you’re looking for a complete SCCM 1511 installation guide, see our blog series which covers it all. You can’t install this upgrade if you are running SCCM 2012. You need to be running at least SCCM 1606.

Installing SCCM upgrades is important for your infrastructure. It fixes a lot of issues from SCCM 1606, which some of them are important.

New Update and Servicing Model

If you’re not familiar with the new SCCM servicing model, read our New Update and Servicing section of the 1602 upgrade post which explain it all.

You may wonder what’s the difference between a Cumulative Update (CU) and an Update Rollup (UR) :

A CU is a new servicing baseline. A post-CU1 hotfix requires CU1 first, whereas a post-UR1 hotfix doesn’t require UR1. Like CU, UR are cumulative which means that UR2 will include previous hotfixes.

*If you are running SCCM 1511 or 1602, you first need to upgrade to 1606 prior to apply this Update Rollup, see our blog which covers the upgrade process. Once completed, the Update Rollup 1 will be available under Update and Servicing node.

SCCM 1606 Update Rollup 1 Fixes

Consult this support page for a full list of issues fixed.

Before you begin

Downloading and installing this update is done entirely from the console. There’s no download link, the update will appear in your console once synchronized.

When you install an in-console update: (New Versions,CU,UR,KB)

  • It automatically runs a prerequisite check. You can also run this check prior to starting the installation
  • It installs at the central administration site (if you have one), and at primary sites automatically. You can control when each primary site server is allowed to update its infrastructure by using Service Windows for site servers
  • After a site server updates, all affected site system roles (including instances of the SMS Provider) automatically update. Configuration Manager consoles also prompt the console user to update the console, after the site installs the update
  • If an update includes the Configuration Manager client, you are offered the option to test the update in pre-production, or to apply the update to all clients immediately
  • After a primary site is updated, secondary sites do not automatically update. Instead, you must initiate the secondary site update

In this post, we’ll be updating a standalone Primary Site Server, console and clients.

[su_box title=”Reminder” style=”glass” title_color=”#F0F0F0″]It’s a best practice to have some exclusions for your antivirus/anti-malware software on the SCCM server. Here a list for exclusions from SCCM 2012, which is still valid for CB as far as we know.

You could also consider disabling the AV prior to installing the update and re-enable it once completed.  [/su_box]

Before installing, check if your site is ready for the update :

  • Open the SCCM console
  • Go to Administration \ Cloud Services \ Updates and Servicing
  • In the State column, ensure that the update is Available

sccm 1606 update rollup 1

  • If it’s not available, right-click Updates and Servicing and select Check for Updates

sccm 1606 update rollup 1

  • The update state will change to Downloading
  • You can follow the download in Dmpdownloader.log

sccm 1606 update rollup 1

  • The update files are stored in the EasyPayload folder in your SCCM Installation directory

sccm 1606 update rollup 1

SCCM 1606 Update Rollup 1 Installation Guide

Step 1 | SCCM 1606 Update Rollup 1 Prerequisite Check

Before launching the update, we recommend to launch the prerequisite check :

  • Open the SCCM console
  • Go to Administration \ Cloud Services \ Updates and Servicing
  • Right-click the Configuration Manager 1606 Hotfix (KB3186654) update and select Run prerequisite check

sccm 1606 update rollup 1

  • Nothing will happen, the prerequisite check runs in the background. All menu options will be grayed out during the check

sccm 1606 update rollup 1

  • You can  monitor prerequisite check by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status

sccm 1606 update rollup 1

  • When completed the State column will show Prerequisite check passed

sccm 1606 update rollup 1

Step 2 | Launching the SCCM 1606 Update Rollup 1

We are now ready to launch the SCCM 1606 Update rollup 1. At this point, plan about 30 minutes for the update installation.

  • Right click the Configuration Manager 1606 update and select Install Update Pack

sccm 1606 update rollup 1

  • On the General tab, click Next

sccm 1606 update rollup 1

  • In the Client Update Options, select the desired option for your client update
    • This new feature allows to update only clients member of a specific collection. Refer to the Technet article for more details

sccm 1606 update rollup 1

  • On the License Terms tab, accept the licence terms and click Next

sccm 1606 update rollup 1

  • On the Summary tab, review your choices and click Next

sccm 1606 update rollup 1

  • On the Completion tab, close the wizard. The whole process took a minute but the installation is not over, it has been initiated

sccm 1606 update rollup 1

  • During installation, the State column changes to Installing
  • You can  monitor installation by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status

sccm 1606 update rollup 1

  • … or you can follow detailed installation progress in SCCM Installation Directory\Logs\CMUpdate.log

sccm 1606 update rollup 1

[su_box title=”Warning” style=”glass” title_color=”#F0F0F0″]We’ve done numerous SCCM 1606 installation/upgrade. Some installation start a couple of minutes after you complete the wizard but we’ve seen some installation starts after a 10 minutes delay. Do not reboot or restart any services during this period or your update could be stuck in “Prerequisite check passed” status and all other options greyed out. There’s actually no officially documented methods by Microsoft to fix that. Patience is the key ![/su_box]

  • When completed, you’ll notice the message There are no pending update package to be processed in the log file
  • Monitoring / Site Servicing Status, right-click your Update Name and select Show Status, the last step will be Installation Succeeded

sccm 1606 update rollup 1

  • Refresh the Updates and Servicing node, the State column will be Installed

sccm 1606 update rollup 1

Updating the consoles

Since 1602, the console has an auto-update feature. At console opening, if you are not running the latest version, you will receive a warning and the update will start automatically.

  • Since all updates operations were initiated from the console, we didn’t close it during the process. We received a warning message when clicking certain objects. You will have the same message when opening a new console

sccm 1606 update rollup 1

  • Click OK,  console update will starts automatically

sccm 1606 update rollup 1

sccm 1606 update rollup 1

  • Wait for the process to complete. You can follow the progress in C:\ConfigMgrAdminUISetup.log and C:\ConfigMgrAdminUISetupVerbose.log. Once completed, the console will open and you’ll be running the latest version



After setup is completed, verify the build number of the console. If the console upgrade was successful, the build number will be 5.0.8412.1307. Note that the Site Version is not changed to the Update rollup version. This is normal.

sccm 1606 update rollup 1


The client version will be updated to 5.00.8412.1307 (after updating, see section below)

sccm 1606 update rollup 1

SCCM 1606 Update rollup 1 Client Package distribution

You’ll see that the 2 client packages are updated :

  • Navigate to Software Library \ Application Management \ Packages

sccm 1606 update rollup 1

  • Check if both package were updated, if not, select both package and initiate a Distribute Content to your distribution points

Updating the Clients

Our preferred way to update our clients is by using the Client Upgrade feature :

  • Open the SCCM Console
  • Go to Administration / Site Configuration / Sites
  • Click the Hierarchy Settings in the top ribbon
  • Select Client Upgrade tab
  • The Upgrade client automatically when the new client update are available checkbox has been enabled
  • Review your time frame and adjust it to your needs

sccm 1606 update rollup 1

Monitor SCCM Client Version Number

You can see our SCCM Client version reports to give detailed information about every clients versions in your environment. It’s the easiest way to track your client updates.

SCCM 2012 - System Health Configuration Manager SS


You can also create a collection that targets clients without the latest client version. I use it to monitor which client haven’t been updated yet.

Here’s the query to achieve this: (You can also refer to our Set of Operational Collection Powershell Script which contains this collection)

[pastacode lang=”sql” manual=”select%20SMS_R_SYSTEM.ResourceID%2CSMS_R_SYSTEM.ResourceType%2CSMS_R_SYSTEM.Name%2CSMS_R_SYSTEM.SMSUniqueIdentifier%2CSMS_R_SYSTEM.ResourceDomainORWorkgroup%2CSMS_R_SYSTEM.Client%20from%20SMS_R_System%20where%20SMS_R_System.ClientVersion%20!%3D%20’5.00.8412.1307′” message=”” highlight=”” provider=”manual”/]

Happy updating ! 🙂



Comments (6)


10.17.2016 AT 11:38 AM
Have an issue where this update has been stuck in the downloading stage for several weeks. Wondering if you have any advice as to how to get it to move on? Based on the logs it appears to be downloaded but the console still says downloading. I've tried the normal stuff like reset the SMS_Executive service with no joy. Would appreciate any advice.


10.14.2016 AT 08:20 AM
Where is the console setup MSI for this update. I know the consoles auto update but where is the MSI in the event we hav e a seperate package we deploy for the console.

Jonathan Lefebvre

10.17.2016 AT 08:36 AM
Hi Travis, Here is the path : Program Files\Microsoft Configuration Manager\cd.latest\SMSSETUP\BIN\I386\ConsoleUpdate\ConfigMgr1606-AdminUI-KB3186654-i386.msp It cannot be used to install the console. This will only patch it if installed. Jonathan


10.12.2016 AT 01:50 PM
Your collection update references version # '5.00.8412.1006'. I believe it should be '5.00.8412.1307' after performing all of these steps.

Jonathan Lefebvre

10.17.2016 AT 08:46 AM
Fixed! Thanks Derek!


10.07.2016 AT 10:19 AM
Thank you detail guide how to do in console updates. for "we’ve seen some installation starts after a 10 minutes delay", you can check CMUpdate.log, it is always every 600 seconds check if should install updates. "Waiting for changes to the "...\inboxes\" directories, updates will be polled in 600 seconds", base on that it will start update sccm between 0-600 seconds when you choose install update, so based on that you can know what time it will actually start the update after you click "update". 🙂