KB36949461: Configuration Manager 2509 update rollup (superseded)

This Configuration Manager 2509 rollup fixes Windows 11 image deployment, ARM64 client upgrades, Software Center compliance and Intune Endpoint Protection transitions; KB37864969 replaces it.

What changed

Client version 5.0.9141.1030 includes NAA hardening and Software Center compliance changes. Microsoft explicitly states that the scan-source and offline-feedback fixes are absent from this rollup.

Technical details

Windows 11 24H2 Build and Capture restart-dialog fix
OS requirement-policy HTTP 404 fix during OSD
ARM64 client-upgrade error 0x80070643 fix
Intune Endpoint Protection and tenant-attach EDR corrections
NAA access hardening and Software Center compliance fix

Why it matters

These changes affect managed-client reliability, update-source ownership and site security. Match the applicable release and replacement chain before deployment.

Known limitations

Superseded by KB37864969.
Does not include KB36419072 or KB36495448 fixes.
No computer restart is required, but installation initiates a site reset.

Now check

Prefer superseding KB37864969 for a 2509 site; confirm the update offered in Updates and Servicing.
For historical deployments, verify client 5.0.9141.1030 and manually recover existing secondary sites.
Test ARM64 upgrades, OSD app requirements and Defender workload ownership; do not assume the co-management scan-source fix is included.