MS26-06-W11-5094126 update failure

[Dmitri Gornev]

MS26-06-W11-5094126 security update (KB5094126) included in today's PMImport build 7.4.2060 may fail to install on Windows 11 24H2 and 25H2 computers.

Problem could be confirmed by "DeployEngineCoreStates.cpp:152 Checkpoint updates installation is not supported without deploy actions." line in the STDeployerCore.log file.

The content team is looking into this issue.

The following work around is available in the meantime:

1. Edit SWU policy created for MS26-06-W11-5094126 bulletin

2. Switch to Advanced tab and click on command line for windows11.0-kb5094126-x64.msu update

3. In Command-line Options dialog choose the Custom option and copy 

swuenv.bat && call "%InstallToolsPath_832C527C-B9C9-46FB-B1F1-2F35434FF90D%\AeXPatchDeployment.exe" -DeploymentId=00049867-0000-0000-0000-000000000000 -LanguageGroup=0

there (basically remove -CheckPoint parameter from the original command line)

4. Save SWU policy and ensure endpoints get updated client policy before retrying the updates installation

[J E]

Hi Dmitri,

really appreciate the quick update on this!
I tried your suggested workaround, unfortunately it did not work for me.
This is my custom command line:

I tried it on a client that did not see the old policy configuration before (it was offline earlier).
and I have the same result on a machine that had the old policy, but now has the new one.
There is no log like STDeployerCore.log, STDeploy.log or PatchPackager.log

the error code on the client is 1

[Dmitri Gornev]

Hi Johannes,

may you attach or send me log files from the C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{B9DD6C06-C015-54D0-D76A-993EF4EE65D2}\cache folder on problematic computers?

[Dmitri Gornev]

Appeared that the problem was caused by extra spaces in the command line - so you may want to double check before saving the change.

Thanks Johannes for your cooperation and prompt check!

[J E]

Hi, works!

thanks again for your fast response!

[Dmitri Gornev]

The original issue is now fixed in PMImport build 7.4.2062. You can now restore the original command line (so checkpoint update would be reinstalled if required during cumulative update installation) in SWU policy.