Caution: Upgrading Windows breaks Intune - and potentially other things.

[psydii]

Upgrading Windows 10 in certain scenarios causes the MDM certificate to be lost, breaking Intune based management. These scenarios strike me as being quite common in education, if you are building out from a legacy environment.

 

Its not clear whether other certificates are impacted - I suspect they may be - so watch out if you have code-signing or 802.1x certificate based authentication.

 

 

"Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated. "

 

My reading of this is if you have (for example):

 

A fleet of Windows 10 1909 (or earlier) fully up to date as of October 2020,

a pilot deployment from SCCM/MECM which you have been running since the summer made from a more recent release

and then you widen the scope for that deployment to your existing machines in production

 

you will hit this bug.

 

If you were instead to refresh/re-download the later version before widely deploying, you will be safe.

 

https://docs.microsoft.com/en-gb/windows/release-information/status-windows-10-2004#1513msgdesc

https://admin.microsoft.com/AdminPortal/Home?ref=MessageCenter&id=MC228536