October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
ConfigMgr hotfixes

SCCM 2103 Known Issues and Fixes: ConfigMgr Hotfix Guide

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configuration Manager 2103 (often called SCCM 2103) was released globally on April 19, 2021. It is now a legacy branch, so use this page as a historical troubleshooting index: identify the affected component, install the matching hotfix and prerequisites, then plan migration to a supported current branch. KB10036164 is the main 2103 rollup, but it is not the only relevant fix.

Microsoft’s fixed-issue lists are not exhaustive. The entries below separate defects included in the original release from early-ring updates, the main rollup, and later 2103-specific hotfixes.

Quick symptom-to-fix matrix

Symptom or area Component Fix Prerequisite or impact
Pre-2103 task sequences fail to import; System.NullReferenceException; empty Windows 10 servicing dashboard; New-CMBootableMedia cannot find the UI directory Console and PowerShell integration KB9833643 Requires 2103 and the documented early-ring prerequisite; no computer restart
OSD failure involving repeated package execution and exit code 3010; Import-CMQuery MOF error; task-sequence console termination; ACP download failure after a network change Site, console and client KB10036164 Main rollup, released June 11, 2021; includes KB9603111 and KB9833643
Excessive TPM/MBAM policies after BitLocker key escrow Policy processing and database KB10372804 Requires KB10036164; stops new policies but does not clean existing rows
Tenant-attach issue set documented by Microsoft Tenant attach KB10582136 Use only for the symptoms covered by its article
Endpoint Security policy download, coexistence detection, or repeated Entra registration failures Client KB10589155 Requires KB10036164; initiates a site reset; no computer restart

Identify your 2103 installation

Microsoft documentation calls the product Microsoft Endpoint Configuration Manager or Configuration Manager current branch; administrators still commonly say SCCM. Version 2103 denotes the March 2021 branch and was globally available April 19, 2021. It could be installed in-console on sites running version 1910 or later. See the 2103 overview.

  1. Open Administration > Updates and Servicing in the console.
  2. Inspect the update entry and add the Package GUID column if necessary. Documented 2103 GUIDs include 41F02C4C-BB4B-4B8D-9299-059860339DAB and ADADCCD5-B406-4752-91C1-C67F3024A8BD.
  3. After KB10036164, verify the documented major versions: console 5.2103.1059.3100 and client 5.0.9049.1035.

Do not install a KB merely because its download page is available. Confirm the branch, servicing-ring origin, prerequisites and affected component first.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
StarTech 1-Port USB 2.0 Network Print Server, 10/100Mbps, TAA (PM1115U2)
  • WIRED NETWORK USB PRINT SERVER: Connect a single USB 2.0 printer to a wired Ethernet LAN (RJ45); 10Base-T, 100Base-TX auto-sensing to ensure a reliable connection, letting you print from any network computer, across the office or over the Internet
  • MANUAL NETWORK SETUP REQUIRED: Configuration via web interface (static IP or DHCP) using LPR queue “LP1"; Not plug-and-play, requires intermediate network knowledge for installation; Access our online FAQs for additional helpful tips and instructions
  • USB PRINTER COMPATIBILITY: Works with most USB 2.0 printers using standard drivers; Not compatible with USB hubs, multi-function printers with proprietary drivers, or printers requiring full bi-directional communication
  • COMPATIBILITY: The USB to Ethernet print server is USB 2.0 compliant and works with macOS and Windows; It also supports LPR network printing and Bonjour Print Services for broad compatibility; Included software is compatible with Windows only
  • PRINT FROM ANYWHERE: Print from any computer connected to the Ethernet; This print server doesn’t require a wired connection to a computer, however it must be connected to your networking device (eg. router or switch) with the included RJ45 network cable

Fixes included in the original 2103 release

Microsoft’s original issue list is explicitly incomplete. Significant fixes included:

  • Preventing duplicate execution of an SMSTSPostAction command after restart.
  • Improving custom client-settings application after a failed task sequence left WMI policy instances behind.
  • Collection Evaluator performance improvements.
  • Correcting CMPivot’s unnecessary requirement for the default security scope.
  • Improving delivery of computer-variable policy affected by database replication timing.
  • Recognizing non-zero success codes such as 3010 when client-cache settings are configured.
  • Fixing cloud distribution-point downloads after a client authentication token expires.

See Microsoft’s 2103 issues-fixed article for the documented list and its limitations.

KB9603111: early update-ring fixes

KB9603111 was offered only to sites that opted into the early deployment ring. It addressed late-breaking issues, including a reported high-CPU condition affecting Microsoft Entra-joined clients that also used PKI certificates. It does not apply to sites that downloaded the globally available 2103 release on April 19, 2021 or later. Its absence from the console can therefore be expected.

KB9833643: console-specific problems

Install KB9833643 when an administrator console shows any of these symptoms:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Task sequences or steps created before 2103 fail to import.
  • The import wizard reports System.NullReferenceException or “One or more errors occurred result may be incomplete”.
  • The Windows 10 servicing dashboard shows no data.
  • New-CMBootableMedia returns Could not find the ConfigMgr UI installation directory.

Microsoft lists 2103 and KB9603111 as eligibility requirements. Download the package and use the Update Registration Tool to register it at the primary site. Existing secondary sites may need manual updating through Administration > Site Configuration > Sites > Recover Secondary Site.

KB10036164: the principal 2103 update rollup

KB10036164, initially released June 11, 2021, includes KB9603111 and KB9833643.

Rank #2
64GB Bootable USB Installer for Windows 11, 10 & 7 Home/Pro with WinPE Repair Tools
  • [Win OS Install or reinstall] — Boot from the USB to install or reinstall Win 11, 10, or 7 Home & Pro editions. Includes OS installations and reinstallations media plus WinPE Utility Suite.
  • [WinPE Repair & Recovery Tools] — Boot into the included WinPE utility suite to backup system and important files, troubleshoot startup problems, repair boot issues, recover data, recover Win User accounts password, and diagnose common PC problems.
  • [All-in-One PC Rescue USB] — Combines Win 11, 10, and 7 installation media with PC repair, recovery, and diagnostic tools on one bootable 64GB USB drive, helping you troubleshoot and restore a computer without needing multiple discs or downloads.
  • [Support] — Full instructions are included in packaging plus a printable copy of the instructions with troubleshooting information on the device. Also, a video “How to boot from a bootable USB drive.mp4” to help guide you through starting a PC from a USB drive. If you need help using the USB please contact us for assistance, we are here to help.
  • [Video] - If you are new to booting from a USB drive or need a refresher see our video "How to boot from USB drive" both in description and on USB device.

Operating-system deployment

It addresses standalone-media deployments where packages using Set Dynamic Variables are included in an Install Package step, the same program runs more than once, returns exit code 3010 (pending restart), and the computer restarts after the second execution. Check smsts.log and execmgr.log; do not change a legitimate 3010 to zero.

PowerShell and console

  • Import-CMQuery no longer fails with a MOF-compilation error after upgrading to 2103.
  • Selecting Task Sequences after the References tab in deployment details no longer terminates the console.

Alternate Content Provider downloads

Microsoft update content can now recover when an Alternate Content Provider is in use and the client changes networks during download. In ctm.log, the affected failure can show 0x80070057 and a non-retriable Content Transfer Manager job. Validate with DataTransferService.log and a controlled test before disabling an ACP.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

PowerShell help and module compatibility

Version 2103 changed the ConfigurationManager PowerShell module. Do not run Update-Help against a version 2010 site and expect the content to work correctly in a 2103 console. The 2103 module requires .NET Framework 4.7.2 or later.

Get-Module ConfigurationManager -ListAvailable
Get-Help Update-Help
Update-Help
Get-Help Get-CMDevice -Full

A successful download can still leave a version-2010 console showing only default help. Align the site, console and module versions before troubleshooting help.

Later 2103-specific hotfixes

KB10372804: MBAM BitLocker policy storm

When Invoke-MbamClientDeployment.ps1 or another MBAM Agent API method escrows recovery keys to a management point, excessive policies targeted at all devices can severely load SQL Server and management points. KB10372804 requires KB10036164 and was initially released July 26, 2021. It replaces KB10216365, which addressed moving the 2103 site database to a SQL Always On availability group.

SELECT PA.PolicyID, RPM.*
FROM PolicyAssignment PA
JOIN ResPolicyMap RPM ON PA.PADBID = RPM.PADBID
WHERE PA.PolicyID like 'TPM%'
  AND RPM.MachineID = 0
  AND RPM.IsTombstoned = 0

The query detects the condition. The hotfix prevents additional excessive policies; it does not remove policies already created. If it returns many rows, contact Microsoft Support and do not directly delete Configuration Manager database records.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Ralix Reinstall USB Compatible with Windows 10 All Versions 32/64 bit. Recover, Restore, Repair Boot USB, and Install to Factory Default Will Fix PC Easy!
  • Comprehensive Solution: This Windows 10 reinstall DVD provides a complete solution for resolving various system issues, including crashes, malware infections, boot failures, and performance slowdowns. Repair, Recover, Restore, and Reinstall any version of Windows.
  • USB will work on any type of computer (make or model). Creates a new copy of Windows! DOES NOT INCLUDE product key.
  • Windows not starting up? NT Loader missing? Repair Windows Boot Manager (BOOTMGR), NTLDR, and so much more with this DVD. Clean Installation: Allows you to perform a fresh installation of Windows 11 64-bit, effectively wiping the system and starting from a clean slate.
  • Step by Step instructions on how to fix Windows 10 issues. Whether it be broken, viruses, running slow, or corrupted our disc will serve you well
  • Please remember that this DVD does not come with a KEY CODE. You will need to obtain a Windows Key Code in order to use the reinstall option

KB10582136: tenant attach

KB10582136 is a later tenant-attach update released August 25, 2021. Apply it only when the tenant-attach symptoms in Microsoft’s article match your environment; it is not a general-purpose client rollup.

KB10589155: client tenant-attach and registration fixes

KB10589155 addresses clients that cannot download Tenant Attach Endpoint Security policy over HTTPS-only sites, are incorrectly classified as in coexistence mode after Intune enrollment fails, or repeatedly register when using Entra authentication without a PKI certificate. It requires KB10036164, initiates a site reset, needs no computer restart, and documents client version 5.00.9049.1043.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Install and verify a 2103 fix

  1. Confirm the site branch, early-ring status, affected feature and documented prerequisites.
  2. Back up the site database and schedule a change window, especially for a site-reset update.
  3. For in-console packages, use Administration > Updates and Servicing, select the update, choose Install Update Pack, review prerequisite warnings and monitor status.
  4. For KB9833643, download the package and register it with the Update Registration Tool before installation.
  5. Review hman.log, dmpdownloader.log and cmupdate.log for registration and installation failures.
  6. Update pre-existing secondary sites manually: Administration > Site Configuration > Sites, select the secondary site, then choose Recover Secondary Site.

To verify a secondary site, run the documented function in the appropriate site database:

SELECT dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')

A result of 1 indicates the secondary site has the parent fixes; 0 means it is missing one or more fixes and should be recovered.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the update does not appear

  • Wrong branch: verify the Package GUID and installed version instead of relying on the console title.
  • Missing prerequisite: KB10372804 and KB10589155 require KB10036164.
  • Early-ring mismatch: KB9603111 may never appear on a global-release installation.
  • Synchronization or registration delay: inspect the service connection point, refresh the console and review dmpdownloader.log and cmupdate.log.
  • Scope mismatch: updating the site does not automatically update every separately installed console, client or old secondary site.

Should you remain on 2103?

Treat 2103 as a legacy troubleshooting target, not a long-term baseline. Apply a matching hotfix when a production symptom requires immediate stabilization, but plan migration to a supported current branch. Microsoft’s 2107 documentation shows KB10036164 and KB10372804 carried forward, although later-branch inclusion must be verified for each specific fix.

Official Microsoft references

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Read next

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.