Configuration Manager update 2203 is the recently released update of Microsoft Endpoint Configuration Manager version. 2203 update is available as in-console update and will be also available as baseline version. Baseline media for version 2203 will only be available after global availability of in-console update.

Following are the benefit of in-console update:
In-console updates provides greater flexibility of upgrading the SCCM Current Branch by getting updates of SCCM within SCCM console only.

  • You just need to make sure that “Service connection point site system role” should be installed on SCCM to make sure synchronization schedule pull latest updates for SCCM.
  • Once you install in-console update on CAS site, updates will be automatically applied to Primary sites. For secondary sites, you need to initiate it manually.

Configuration Manager Supported Versions:

Configuration Manager 2103 and 2203 are the 2 supported Baseline versions when publishing this post. If you are doing fresh setup of SCCM, you can download and use this Baseline version  as baseline media for installation through Volume Licensing Service.

VersionAvailability dateSupport end dateBaselineIn-console update
2203 (5.00.90)8-Apr-226-Oct-23YesYes
2111 (5.00.9068)1-Dec-211-Jun-23NoYes
2107 (5.00.9058)2-Aug-212-Feb-22NoYes
2103 (5.00.9049)5-Apr-215-Oct-22YesYes

Servicing Support for Configuration Manager

Microsoft releases update for Configuration Manager current branch version 3 times a year. Each update is supported for a period of 18 months. For 18 months of lifecycle, initial 4 months are for Security & Critical Updates while next 14 months are for Security Updates only. Above mentioned table can be used to see the servicing life cycle for Configuration Manager updates (supported versions of Configuration Manager including both Baseline and In-console update)

Following link can be used as a reference for supported versions

Supported ADK version

Make sure to have supported Windows ADK version, following is the table showing support for existing ConfigMgr versions:

Windows ADK versionConfigMgr 2010ConfigMgr 2103ConfigMgr 2107ConfigMgr 2111  ConfigMgr 2203
Windows 11
(10.1.22000)
NoNoYesYes  Yes
Windows Server 2022
(10.1.20348)
NoNoYesYes    Yes
Windows 10, version 2004
(10.1.19041)
YesYesYesYes    Yes
Windows 10, version 1903
(10.1.18362)
Backward CompatibleNoNoNo    No

What’s new in SCCM 2203
For detailed list on what’s new in version 2203 of Configuration, you can follow this What’s new in version 2203

Following are the improvements and new features, important things to be noted down is:

  • Prefer cloud-based software update points
  • Visualize content distribution status
  • Improvements to Power BI Report Server integration
  • Exclude data warehouse reporting tables from synchronization
  • Improvements to management insights
  • Deployment Status client notification actions
  • Delete collection references
  • LEDBAT support for software update points
  • Pre-download content for available software updates
  • Customize maximum run time for other software update types
  • ADR scheduling improvements for deployments
  • Added folder support for nodes in the Software Library
  • Alerts for orchestration groups
  • Escrow BitLocker recovery password to the site during a task sequence
  • Custom icon support for task sequences and packages
  • Improvements to implicit uninstall
  • Delete a contribution you made to Community hub
  • Dark theme for the console

Following is the Checklist for installing update 2203 for Configuration Manager

Early update ring – Download opt-in script

As Configuration Manager version 2203 has released recently only, it is available for early update ring. We need to opt in for installation, ie we have to download the Version 2203 opt-in script

Once downloaded (EnableEarlyUpdateRing2203.exe), execute it to extract EnableEarlyUpdateRing2203.ps1

Open PowerShell as Administrator, and run following command:

.\enableearlyupdatering2203.ps1 -siteServer <SiteServername>

(Replace <SiteServerName> with your SCCM server)

Enableearlyupdatering2203.ps1

Configuration Manager 22203 will be made available immediately under Updates and Servicing.

Install Configuration Manager 2203 update

Login to SCCM server, open Configuration manager console and navigate to \Administration\Overview\Updates and Servicing, we can see new version available “Configuration Manager 2203” version 5.00.9078.1000.

configuration Manager 2203 Available to download

Downloading should start automatically, if not should Right click “Configuration Manager 2111” and click on download.

Configuration Manager 2203 Downloading

The status of the update will soon change from available to downloading. It will download the update in cab format (56db32ee-4377-460e-bb19-5095fbcfbe1d.cab) which can be monitored through dmpdownloader.log and the location of update will be:

EasySetupPayload

D:\Program Files\Microsoft Configuration Manager\EasySetupPayload

Following info you can see in the dmpdownloader.log:

Content for 56db32ee-4377-460e-bb19-5095fbcfbe1d does not exist locally. Download it from internet
The payload to be processed is at D:\Program Files\Microsoft Configuration Manager\EasySetupPayload\56db32ee-4377-460e-bb19-5095fbcfbe1d.cab
SCCM2203Stepbystep 05

Once downloaded, cab file will be extracted with in same folder and original cab will be deleted, you will be able to see following folder:

D:\Program Files\Microsoft Configuration Manager\EasySetupPayload\56db32ee-4377-460e-bb19-5095fbcfbe1d

SCCM2203Stepbystep 06

Once update is download, you will see the status as “Ready to Install” for “Configuration Manager 2203

SCCM2203Stepbystep 07



Run Prerequisite Check
Select “Configuration Manager 2203”, right click and select “Run Prerequisite Check”, the status will change to “Checking prerequisites”. Verify CMUpdate.log for process initiation and verify c:\ConfigMgrPrereq.log for success or failure.

SCCM2203Stepbystep 08

CMUpdate will show you multiple stages of Prerequisite check which can be seen as SubStageID such as 0xe0005.

Wait for last stage to get it completed.

You will see following in CMUpdate.log:

cmupdate.log
Content replication succeeded. Start extracting the package to run prereq check...
Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xd0005, IsComplete=1, Progress=1, Applicable=1)
Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xd0005, IsComplete=1, Progress=25, Applicable=1)
Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xd0005, IsComplete=2, Progress=100, Applicable=1)
Running prereq checking against Server [SCCM01.MANBAN.COM] ...


ConfigMgrprereq.log will show:

******* Prerequisite checking is completed. *******
Prerequisite checking is completed

We got the result “Prerequisite check passed with warnings”, we can continue with installation now, but in production environment make sure to get rid of any warnings that appears which can be checked through Updates and servicing status.

Initiate Install Update Pack
Open SCCM Console, click on Administration Tab, go to Overview > Updates and Servicing. On right Pane you will be able to see now “Configuration Manager 2203”, from the top ribbon select “Install Update Pack”.

Install Update Pack

This will launch Configuration Manager Update Wizard, under General page check the box Ignore any prerequisite check warnings and install this update regardless of missing requirements. Once again, don’t do it in production environment. Click Next.

SCCM2203Stepbystep 12

Under Features included in update pack page, select the options you want to enable or leave it as default. You can enable this at later stage as well. Click Next

SCCM2203Stepbystep 13

Under Client Update Settings page, select Validate in pre-production collection and select the collection used for this so that you can test new client agent on few systems before rolling out in production. Click Next.

validate in pre-production collection

Under License Terms page, check the box “I accept these License Terms and Privacy Statement”. Click Next.

SCCM2203Stepbystep 15

You will get completion status, click on Close to exit.

SCCM2203Stepbystep 16

Under SCCM Console, you will see the installation status showing as Installing.

You can monitor the installation through Monitoring \ Overview \ Updates and Servicing Status and through CMUpdate.log.

Navigate to \Monitoring\Overview\Updates and Servicing Status, select Configuration Manager 2203, right click and select Show Status.

Update Pack Installation Status will show the installation progress.

SCCM2203Stepbystep 18

One important update I saw in monitoring ie.:

[Completed]:The support lifecycle for SQL Server 2012 ends on July 12, 2022. Plan to upgrade database servers in your environment, including SQL Server Express at secondary sites. For more information, see https://go.microsoft.com/fwlink/?linkid=2163704.

Organizations should plan upgrading there database to the latest version as SQL Server 2012 is nearing and of its life.

SCCM2203Stepbystep 19

After waiting for some time, Update Pack installation status will show success in cmupdate.log with message:

Content replication succeeded. Start extracting the package to run prereq check...

Update pack install status will show the upgrade has been completed.

Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xe0005, IsComplete=2, Progress=100, Applicable=1)
Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xe0006, IsComplete=1, Progress=1, Applicable=1)
MonitorDrsReplication waiting for server to be in replication active state for maximum 1800 second .
check current replication details
successfully detected the site server is in ReplicationInactive state.
Successfully reported ConfigMgr update status (SiteCode=MAN, SubStageID=0xe0006, IsComplete=2, Progress=100, Applicable=1)
CMUpdate.log

Once installation is done, and you try to open the SCCM console, this will ask you to update your console with version 5.2203.1063.1400. Click on Ok to initiate download and install.

5.2203.1063.1400

Download of Adminconsole.msi will happen at following location:

C:\Program Files (x86)\ConfigMgr10\AdminconsoleSetup\469A3000-14DA-425E-B288-4B0E16DB87C4

Adminconsole.msi will be visible which will be executed automatically.

Updating Extensions

Downloading & installation of console can be verified through log file:

c:\ConfigMgrAdminUISetup.log
c:\ConfigMgrAdminUISetupVerbose.log

Once completed you can verify the site version and control version (by clicking on top left of the SCCM ribbon and selection option “About Configuration Manager”.

Configuration Manager console

Version 2203
Console Version: 5.2203.1063.1400
Site Version: 5.0.9078.1000

Client Update

We can see the Production client version is 5.00.9068.1012 and Pre-production client version is 5.00.9078.1006 under \Administration\Overview\Site Configuration\Sites.

Updated client version (5.00.9078.1006) is currently Pre-production client version which is targeted on collection “Pilot Client” as we selected during installation Phase. Under Hierarchy Settings Properties, we must make sure to check the box “Upgrade all clients in the hierarchy using production client”

Production client Upgrade

Source of this client version is created in StagingClient under Microsoft Configuration Manager Folder:

StagingClient

Promote Pre-production Client

If you want to promote the Pre-production client in production environment, then navigate to \Monitoring\Overview\Client Status. Right click Pre-production Client Deployment and select Promote Pre-production Client.

Pre-production Client Deployment

Promote Pre-production Client window will appear, click on Promote to replicate the changes in the environment using new SCCM client package.

SCCM2203Stepbystep 27

Update Boot image

For better support with your boot images, it is recommended to update the client version in boot image as well, though old one will also work fine. Benefit of having latest client version in boot image is better support and compatibility.

Navigate to \Software Library\Overview\Operating Systems\Boot Images, select the boot image and click Update Distribution Points. You will be represented with current Windows ADK version and current client version and showing the old client version as well. The current client version with 1st Boot image is showing as 5.00.9068.1012

SCCM2203Stepbystep 28

You don’t require to select “Reload this boot image with the current Windows PE version from the Windows ADK”, this option is only required when you have updated the ADK.

SCCM2203Stepbystep 29

The consequences of reloading the boot image is the you are going to loose all kind of customization done (if any) within the boot image such as injecting MsDart binaries, increasing smsts.log file size using smsts.ini etc, everything will be lost. For more info on find the link on Customize boot image

SCCM2203Stepbystep 30

Once boot image is updated, we can see Client Version showing the latest version 5.00.9078.1006. Do the same for all boot images you are using.

Important Links

Checklist for 2203 – Configuration Manager | Microsoft Docs

Updates and servicing – Configuration Manager | Microsoft Docs

Support for the Windows ADK – Configuration Manager | Microsoft Docs