Consulting Services

Need help with your SCCM infrastructure ? Consult our fixed price consulting plans to see our rates or contact us for a custom quote.

The second Hotfix Rollup for SCCM Current Branch (1710) is now available. This post is a complete SCCM 1710 Hotfix Rollup 2 (KB4086143) installation guide. If you’re looking for a complete SCCM Current Branch installation guide, see our blog series which covers it all. You can’t install this upgrade if you are running SCCM 2012. You need to be running SCCM 1710 to apply this update.

Installing SCCM upgrades is important for your infrastructure. It fixes a lot of issues from SCCM 1710, which some of them are important.

New Update and Servicing Model

If you’re not familiar with the new SCCM servicing model, read our New Update and Servicing section of the 1602 upgrade post which explain it all.

You may wonder what’s the difference between a Cumulative Update (CU) and an Update Rollup (UR)/Hotfix RollUp (HR) :

A CU is a new servicing baseline. A post-CU1 hotfix requires CU1 first, whereas a post-UR1 hotfix doesn’t require UR1. Like CU, UR is cumulative which means that UR2 will include previous hotfixes.

*If you are running SCCM 1511, 1602, 1606,1610, 1702 and 1706 you first need to upgrade to 1710 prior to applying this Hotfix Rollup, see our blog which covers the upgrade process. Once completed, the Hotfix Rollup will be available under Update and Servicing node.

List of SCCM 1710 Hotfix Rollup 2 Fixes

This hotfix rollup brings the long-awaited fix for Office 365 updates users interaction. Previous attempt to manage led to inconsistency for the user experience, like the Office product would close without any warning, while it was expected to be the case.

The new hotfix bring a simple restart notice (SCCM regular reboot) if any Office product is open while an update has been installed.

We will update our post on Office 365 updates, once we have successfully tested this change.

Consult the Microsoft support page for a full list of fixed issues.

Before you begin

Downloading and installing this update is done entirely from the console. There’s no download link, the update will appear on your console once synchronized.

When you install an in-console update: (New Versions, CU, UR, KB)

  • It automatically runs a prerequisite check. You can also run this check prior to starting the installation
  • It installs at the central administration site (if you have one), and at primary sites automatically. You can control when each primary site server is allowed to update its infrastructure by using Service Windows for site servers
  • After a site server updates, all affected site system roles (including instances of the SMS Provider) automatically update. Configuration Manager consoles also prompt the console user to update the console, after the site installs the update
  • If an update includes the Configuration Manager client, you are offered the option to test the update in pre-production, or to apply the update to all clients immediately
  • After a primary site is updated, secondary sites do not automatically update. Instead, you must initiate the secondary site update

In this post, we’ll be updating a standalone Primary Site Server, console and clients.


It’s a best practice to have some exclusions for your antivirus/anti-malware software on the SCCM server. Here a list of exclusions from SCCM 2012, which is still valid for CB as far as we know.You could also consider disabling the AV prior to installing the update and re-enable it once completed.

Before installing, check if your site is ready for the update :
  • Open the SCCM console
  • Go to Administration \ Cloud Services \ Updates and Servicing
  • In the State column, ensure that the update is Available

SCCM 1710 Hotfix Rollup 2

  • If not already downloaded, hit Download
  • If it’s not available, right-click Updates and Servicing and select Check for Updates

SCCM 1710 Hotfix Rollup 2

  • The update state will change to Downloading
  • You can follow the download in Dmpdownloader.log

The update files are stored in the EasyPayload folder in your SCCM Installation directory

SCCM 1710 Update Rollup 2

SCCM 1710 Hotfix Rollup 2 Installation Guide

Step 1 | SCCM 1710 Hotfix Rollup Prerequisite Check

Before launching the update, we recommend to launch the prerequisite check:

  • Open the SCCM console
  • Go to Administration \ Cloud Services \ Updates and Servicing
  • Right-click the Configuration Manager 1710 Hotfix (KB4086143) update and select Run prerequisite check

SCCM 1710 Update Rollup 2

  • Nothing will happen, the prerequisite check runs in the background. All menu options will be grayed out during the check

SCCM 1710 Update Rollup 2

  • You can  monitor prerequisite check by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status
  • When completed the State column will show Prerequisite check passed

SCCM 1710 Update Rollup 2

Step 2 | Launching the SCCM 1710 Hotfix Rollup 2

We are now ready to launch the SCCM 1710 Hotfix Rollup. At this point, plan about 30 minutes for the update installation.

  • Right-click the Configuration Manager 1710 update and select Install Update Pack

SCCM 1710 Update Rollup 2

  • On the General tab, click Next

SCCM 1710 Update Rollup 2

  • In the Client Update Options, select the desired option for your client update
    • This new feature allows updating only clients member of a specific collection. Refer to our post here

SCCM 1706 Update Rollup 1

  • On the License Terms tab, accept the license terms and click Next

SCCM 1706 Update Rollup 1

  • On the Summary tab, review your choices and click Next

SCCM 1710 Update Rollup 2

  • On the Completion tab, close the wizard. The whole process took a minute but the installation is not over, it has been initiated

SCCM 1710 Update Rollup 2

  • During installation, the State column changes to Installing
  • You can  monitor installation by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status

SCCM 1710 Update Rollup 2

  • … or you can follow detailed installation progress in SCCM Installation Directory\Logs\CMUpdate.log

SCCM 1710 Update Rollup 2


We’ve done numerous SCCM  installation/upgrade. Some installation start a couple of minutes after you complete the wizard but we’ve seen some installation starts after a 10 minutes delay. Do not reboot or restart any services during this period or your update could be stuck in “Prerequisite check passed” status and all other options grayed out. There’s actually no officially documented methods by Microsoft to fix that. Patience is the key!
  • When completed, you’ll notice the message There are no pending update package to be processed in the log file
  • Refresh the Updates and Servicing node, the State column will be Installed

Updating the consoles

Since 1602, the console has an auto-update feature. At console opening, if you are not running the latest version, you will receive a warning and the update will start automatically.

  • Since all updates operations were initiated from the console, we didn’t close it during the process. We received a warning message when clicking certain objects. You will have the same message when opening a new console

SCCM 1710 Update Rollup 2

  • Click OK,  console update will start automatically

SCCM 1706 Update Rollup 1

SCCM 1706 Update Rollup 1

SCCM 1706 Update Rollup 1

  • Wait for the process to complete. You can follow the progress in C:\ConfigMgrAdminUISetup.log and C:\ConfigMgrAdminUISetupVerbose.log. Once completed, the console will open and you’ll be running the latest version



After setup is completed, verify the build number of the console. If the console upgrade was successful, the build number will be 5.0.8577.1115. Note that the Site Version is not changed to the Hotfix Rollup version. This is normal.

SCCM 1710 Update Rollup 2


The client version will be updated to 5.00.8577.1115 (after updating, see section below)

SCCM 1710 Update Rollup 2

SCCM 1710 Hotfix Rollup 2 Client Package distribution

You’ll see that the 2 client packages are updated:

  • Navigate to Software Library \ Application Management \ Packages

SCCM 1706 Update Rollup 1

  • Check if both packages were updated, if not, select both packages and initiate a Distribute Content to your distribution points

Updating the Clients

Our preferred way to update our clients is by using the Client Upgrade (You can refer to our complete post documenting this feature) feature:

  • Open the SCCM Console
  • Go to Administration / Site Configuration / Sites
  • Click the Hierarchy Settings in the top ribbon
  • Select Client Upgrade tab
  • The Upgrade client automatically when the new client update are available checkbox has been enabled
  • Review your time frame and adjust it to your needs

SCCM 1710 Update Rollup 2

Monitor SCCM Client Version Number

You can see our SCCM Client version reports to give detailed information about every client’s versions in your environment. It’s the easiest way to track your client updates.Collections

You can also create a collection that targets clients without the latest client version. I use it to monitor which client hasn’t been updated yet.

SCCM 2012 - System Health Configuration Manager SS


Here’s the query to achieve this: (You can also refer to our Set of Operational Collection Powershell Script which contains this collection)

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ClientVersion != '5.00.8577.1115'
Comments (15)


08.22.2018 AT 12:44 AM
Great describe bro.

Senthil Kumar

06.21.2018 AT 04:58 AM
Hi, I am getting the XML error while running my reports. some of the reports running in Console. SCCM Version : 1710 Console version : 5.00.8577.1000 Site Version : 5.00.8577.1000 When i tried to open with browser all the reports are getting generated. I believe need to install the hotfix. Let me know the best. Regards Senthil


06.11.2018 AT 04:02 PM
Hello, I did and several reboots but nothing changed still the error !!! Thanks, Dom


06.11.2018 AT 03:58 PM
Hello, I am getting MSI (s) (B4:C4) [13:42:16:348]: Product: Configuration Manager Client - Update 'ConfigMgr1710-client-KB4086143-x64' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\ccmsetup\Logs\client.msi.log. on several clients...the client has been rebooted several times but nothing changed. Thanks, Dom


03.21.2018 AT 01:10 PM
Update to 1710 this morning. Client update was deployed to pre-production. The clients on those systems updating fast and successfully. I then ran the current hotfix and deployed the client to the same pre-production collection. Those same clients have not updated to the hotfix version of the client (5.00.8577.1115). Any ideas?


03.21.2018 AT 12:21 PM
Not sure what occurred but mine is stuck. There was no reboot or lack of patience, just came in one morning, it showed as available, but it has been stuck since Mar. 7. Leave it to Microsoft to not have a fix for one of their products.


03.21.2018 AT 05:57 AM
Looks that UR available only for fast ring how can I enable it in my envirnoment?


03.15.2018 AT 10:10 AM
Does anyone have issues with the Alerts for Malware detection being canceled after upgrade to 1710?


03.12.2018 AT 03:31 PM
With Serial Console Access, users need only run one command passed to the user below, to access their server via another shell terminal, providing full access to the instance, along with the ability to copy and paste content. How to Connect Navigate to your instance you are wishing to connect to, and select Actions -> Get Serial Console. As this is a new ability, users who have not recently rebooted their instance, will be prompted with a message indicating in order to utilize the serial console they will need to reboot their server. Once this has been completed, they will be able to proceed with the instructions below for serial console access. After pressing the Get Serial Console option mentioned above, you will be presented with a new pop-up window displaying your direct web socket link at the top of the pane. custom writing


03.12.2018 AT 07:37 AM
I had a issue with PXE not working after I ran this update. I was going from 1710 no rollup to rollup 2. After hours of trying things I found on Google I stumbled upon this link that helped me out. Basically it appears the WDS role on the server blows up and has to be manually removed and reinstalled by SCCM. After that everything seems to be working fine. This makes me wonder what else I will find that is broke. UGH!


03.09.2018 AT 10:01 PM
Awesome informationmuch appreciated.Keep posting updated info about SCCM. Unfortunately Virtual Labs are not available from Microsoft for practice it is removed from link. We eagerly waiting for Virtual Labs because it is very helpful when we have time in Office or Home then its very easy to just go to that particular link and practice each session 2 hours from basic. If its possible from your side just create and share link.


03.09.2018 AT 09:27 AM
@paul Look for errors in ConfigMgrPrereq.log


03.08.2018 AT 11:21 AM
The pre-requisite check is failing for me. I'm on v1710 5.00.8577.1108. How can I resolve this?

Steven N

03.07.2018 AT 11:41 AM
Hello, I publish my SCCM consoles to a Citrix farm with no internet connection... (sounds weird I know) but it's policy and that's just how it goes. How can I manually or script a console update? Thanks Steve