I work in an enterprise business. Currently we are transitioning hundreds of PCs from the server AD to Azure AD utilizing Windows Autopilot and Intune MDM, which requires Windows 10 v1909 or newer. Many devices are still running versions between 1607 and 1903, and it would seem all of them are failing to update to a newer version, presumably with the same error, "Cannot apply the security template for the new OS. Error: 0x800704B8"
Any assistance would be tremendously appreciated.
Hello @catgrep-6837
Initially I can recommend you the tool SetupDiag that can help determine what may be the cause of blocking the upgrade:
https://docs.microsoft.com/en-us/windows/deployment/upgrade/setupdiag
On the other hand, to workaround the version limitation you could set up a WSUS server and deploy the feature update for these computers up to 1909 and then let Autopilot/MDM do the reest. Here is a comprehensive guide to the WSUS Setup for this kind of purpose:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wsus
Hope this helps with your query,
--If the reply is helpful, please Upvote and Accept as answer--
Tried SetupDiag, even less useful than the setup logs...
setupdiagresults.log
14 people are following this question.
