Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
SCCM Patch Deployment Issue with Windows Cumulative Updates ConfigMgr

SCCM Patch Deployment Issue with Windows Cumulative Updates ConfigMgr

Written By Anoop C Nair
Last Updated September 5, 2024
Posted In SCCM
SHARE

Let’s fix the SCCM Patch Deployment issue with Windows Cumulative Updates and discuss it with Windows 10 or 11 Cumulative Updates. The July cumulative update KB5004245 for Windows 10 1909 might also have similar ConfigMgr (a.k.a SCCM) patching issues.

In the last two months, Microsoft has started deviating from the standard they introduced a while back to combine Windows SSUs and LCUs.

We can notice this with June and July cumulative updates for Windows 10. This is causing problems and confusion for IT admins.

SCCM admins also faced a similar issue with last month’s cumulative update KB5003637. The scenario becomes more critical when configuring the Decline superseded updates immediately policy. We have a post discussing the issue with June CU for Windows 10.

Patch My PC

Update: SCCM Patch Software Update Deployment Process Guide.

SCCM Patch Deployment Issue with Windows Cumulative Updates ConfigMgr

Let’s check the prerequisite for deploying Windows 10 July CU KB5004237. This prerequisite is only applicable to WSUS/SCCM patch deployment scenarios. Don’t worry about this if you use WUfB/Intune to deploy patches.

NOTE: The July CU KB5004237 applies to Windows 10 2004, 20H2, and 21H1.

SCCM Patch Deployment issue with Windows Cumulative Updates ConfigMgr - Fig.1
SCCM Patch Deployment issue with Windows Cumulative Updates ConfigMgr – Fig.1

As mentioned above, your operating system’s latest servicing stack update (SSU) should be part of the latest cumulative update (LCU). You don’t need to install it separately. However, this is not true with June and July 2021 cumulative updates.

Issue: The prerequisite for WSUS/SCCM patch deployment is installing the May 11, 2021, update (KB5003173) before installing the latest cumulative update, KB5004237.

If you have not installed KB5003173, the July CU patch deployment might fail or give inconsistent reports like “this patch is not applicable for “this” Windows version. You need to ensure that all the devices are already installed with KB5003173 before installing the July CU update (KB5004237) for Windows 10 2004, 20H2, and 21H1.

Fix the SCCM Patch Deployment issue with Cumulative Updates

The latest cumulative update for Windows 10 1909 version kb5004245(July CU) and this patch depend on previous cumulative patches and SSU. The prerequisite for Windows 10 1909 July CU (kb5004245) is a bit more complex than the previous releases.

You must install the following before installing the July cumulative update (LCU) for 1909. Otherwise, the SCCM patch installation will fail, or the reports will show the LCU for July is not applicable, etc.

  • Servicing stack update (SSU) (KB5001406)
  • Latest SSU (KB5004748)
SCCM Patch Deployment issue with Windows Cumulative Updates ConfigMgr - Fig.2
SCCM Patch Deployment issue with Windows Cumulative Updates ConfigMgr – Fig.2

Recover Expired Updates from SCCM/WSUS

Let’s learn how to recover Expired Updates from the ConfigMgr console. SCCM patch management is not very easy if you are new to this process. I have a blog post that discusses an end-to-end process for recovering expired updates.

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 2 comments

  1. the new update KB5004237 does not install on my laptop and give an error saying some files may be missing and the code is 0x8007000d. how do i sort this out. please help

    Reply

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws

Key Takeaways 2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws! The June 2026 Windows 11 Patch Tuesday update brings several improvements to File Explorer. It adds support for additional archive formats, including UU, CPIO, XAR, and NuGet Packages (NUPKG). The update also preserves View and Sort preferences in […]

AC Anoop C Nair 10 min read
Intune

2026 May KB5089549 KB5087420 Windows 11 Patch | 0 Zero Day Vulnerabilities and 120 Flaws

Key Takeaways The Windows 11 May 2026 Patch KB5089549 KB5087420 Update brings important security fixes, performance improvements, and reliability enhancements across the operating system. The update introduces new features such as Xbox Mode for gaming, File Explorer improvements, enhanced input and sharing experiences, better taskbar and Windows Hello reliability, and additional enterprise management capabilities for […]

AC Anoop C Nair 8 min read
SCCM

ConfigMgr 2603 Introduces New Early Update Enrollment Process

Key Takeaways In this post we are discussing the ConfigMgr 2603 Introduces New Early Update Enrollment Process. Microsoft has officially released Configuration Manager version 2603 to the Early Update Ring, giving organizations an opportunity to test upcoming improvements before the global production rollout. The release is targeted at enterprises running ConfigMgr version 2409 or later […]

AC Anoop C Nair 3 min read