How can I upgrade to System Center Configuration Manager (Current Branch) version 1706

[anyweb]

In a previous post you used PowerShell scripts to quickly install System Center Configuration Manager (Current Branch) version 1702. As of today (2017/7/29) System Center Configuration Manager (Current Branch) version 1702 is still the current baseline for the Current Branch releases. This post will focus on upgrading from one baseline version to the new release.

Making sense of the different releases

There are two main branches (of Configuration Manager) available, Current Branch and Technical Preview:

• System Center Configuration Manager (Current Branch)
• System Center Configuration Manager (Technical Preview)

System Center Configuration Manager (Current Branch) is designed for use in production environments, for managing anything from small to very large Enterprises, whereas System Center Configuration Manager (Technical Preview) is for lab testing environments only and is limited to 10 clients.

The Technical Preview releases are released monthly, and contain the latest and greatest features being trialed in the product, and usually these new features are the result of feedback from uservoice. Current Branch releases on the other hand are released only a few times per year and contain stable, tested features that are mature enough to release into production environments.

Note: You cannot upgrade from a Current Branch to Technical Preview or vice versa, they are two distinct different branches.

Microsoft have released the latest Current Branch offering known as System Center Configuration Manager (Current Branch) version 1706 so it's time to upgrade again. This release offers many new features, some of which are listed below.

Windows 10 and Office 365

• Manage Microsoft Surface driver updates – You can now use Configuration Manager to manage Microsoft Surface driver updates.
• Windows Analytics Commercial ID and Windows telemetry levels – You can now specify the Windows Analytics Commercial ID and configure telemetry, commercial data, and Internet Explorer data collection settings in Client Settings for use with Upgrade Readiness.
• Improved user experience for Office 365 updates – Improvements have been made to leverage the Office Click-to-Run user experience when a client installs an Office 365 update. This includes pop-up and in-app notifications, and a countdown experience.

Windows 10 Security

• SecureBoot and TPM inventory data – Hardware inventory can now determine whether the device has SecureBoot enabled and various properties of the TPM (enabled by default).
• Windows Defender Device Guard – You can now include trust for specific files and folder paths in Device Guard policies.

Modern Management

• Azure AD-enabled Cloud Management – You can now onboard the site to Azure AD via Cloud Services.  Additionally, you can install the client on the Internet.
• Windows Update for Business enhancements – There is a new dedicated experience to configure and deploy deferral settings for easy discoverability.

Streamlined Infrastructure

• Cloud services consolidation – There is now common experience for OMS Connector, Upgrade Readiness, Windows Store for Business, and Cloud Management.
• Reload boot images with latest WinPE version – During the “Update Distribution Points” wizard on a boot image, you can now reload the version of Windows PE in the selected boot image.
• Boundary Group improvements – Boundary groups now support configuring the time for fallback for software update points.
• Configuration Manager Update Reset Tool – We have added new tool to reset and restart in-console updates when they have problems downloading or replicating.
• Accessibility – Screen reader improvements and improved keyboard navigation in and out of the ribbon in the Configuration Manager console.

Configuration Manager connected with Microsoft Intune

• Entrust as certificate authority for PFX Certificates – Entrust can now be used as the certificate authority for PFX certificates.
• Additional Android for Work features – You can now configure app configuration policies for Android for Work and support for available apps.
• Additional Compliance Policy settings – We added additional compliance policy settings that were previously available only in Intune standalone.
• Enrollment restriction conditions – Admin can now prevent enrollment for iOS or Android devices marked as personal.
• Cisco IPSec VPN support for iOS – Cisco IPsec will be a new connection type option for VPN profiles for iOS.
• Windows Edition Upgrade policy – This policy allows admins to set a policy to upgrade Windows 10 to Enterprise editions.
• Additional MAM settings – We added new settings such as block screen capture (Android only), disable contact sync, and disable printing.
• Windows configuration settings – We added new Windows configuration item settings that were previously only available in Intune standalone.

Customer Feedback

• Create and run PowerShell scripts – You can now create and run scripts with parameters to devices and collections.
• Task Sequence improvements – You can now easily toggle when the task sequence progress is or is not displayed to the end user, on a granular step-by-step basis.  Additionally, groups in the task sequence editor can be collapsed or expanded.
• Share an application from Software Center – You can copy a direct link to an application in Software Center using the new Share button in the Application Details view.

Upgrading to 1706

Note: Before updating, please review the following checklist to verify you are ready for the update.

When new Current Branch releases are made public, you have the choice of getting it immediately using a fast ring PowerShell script, or to wait a couple of weeks after which it is made available to the slow ring (and then show up in the ConfigMgr console).

To use the fast ring PowerShell script, download it, and run it to self-extract to C:\FastRingScript_1706. Once extracted, start an administrative PowerShell cmd prompt in that folder and from there use the following command (where CM01 is the <SiteServer_Name | SiteServer_IP> of your CAS or standalone Primary site server).

.\EnableFastUpdateRing1706_All.ps1 cm01

As per this screenshot

To start the upgrade open the ConfigMgr console and find the Updates and servicing node as shown here. Click on Check for Updates in the ribbon, after a few moments you should see that Configuration Manager 1706 is available for download.

Note: In the screenshot above you'll see that the Downloading arrow is greyed out, if you find yourself in this state you can do two things, wait until it automatically starts downloading, or click on the Check for Updates button again which will kick off the download.

And the download starts...

at which point you can open the dmpdownloader.log using Cmtrace to keep track of things.

Once it has completed downloading it will be listed as a state of Ready to Install You need to click refresh in the ConfigMgr console to update the view.

 

Installing the Update

Right click on the update and choose Install Update Pack.

when the Wizard appears, make your choice for pre-reqs and click next.

review the features included in this update pack , and make selections if you wish, you can always add them later in the Console.

Note: You'll also notice lots of Pre-Release features that are greyed out, to turn them on see the steps after upgrading the console the bottom of this guide.

Before clicking next at the Client update settings please see this post

accept the EULA and configure the software assurance expiration date

and click through to the summary

and then the wizard is complete.

Monitor the update

In the console, the state will change to Installing. You can click on Show Status to get status of what part of the upgrade it is doing.

 

Which brings up this detailed pane that you can click through to get more information.

In addition, I'd recommend you open the CMUpdate.log to review what's happening in real time.

After the update is complete, click refresh in the console and you'll be reminded to update the ConfigMgr Console via a popup, the new version is 5.00.8498.1700. Make sure to update your console as you cannot use the new features until you do.

Click OK to upgrade your ConfigMgr console, and after all is done you’ll see the 1706 version listed in the console.

After upgrading the site

Tip: If you want to gain access to the Pre-Release features, then select Site Configuration, Sites, Hierarchy Settings, and place a check mark in Consent to use Pre-Release features.

And you can then turn on (or off) many of the pre-release features released in the 1706 update.

Summary

This is a huge release packed with features and new functionality and goes to prove the SCCM as a Service is working, David James and Team have done an exceptional job ! Here's to the continued development and refinement from the Engineering team @ Microsoft so that hopefully in 5 years time, we'll see SCCM 2206 Current Branch

Recommended reading

• Checklist for updating to System Center Configuration Manager (Current Branch) 1706 - https://docs.microsoft.com/en-us/sccm/core/servers/manage/checklist-for-installing-update-1706
• What's new In System Center Configuration Manager (Current Branch) 1706 - https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1706
• Hybrid features in 1706 - https://ems.world/2017/07/29/new-hybrid-features-in-configuration-manager-1706/
• Create and run PowerShell scripts from the configuration manager console - https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-deploy-scripts