OOBE returns with 20H2 upgrade?

[Hammer, Erich F]

I have an SCCM task sequence for installing/reconfiguring 20H2 (Enterprise) our standard setup on new/repurposed machines, and it works great. Kick of the TS, walk away, and a little while later the machine is ready for any user to log in and get to work.

I'm testing a task sequence for upgrading our 1809 systems (which were originally built using nearly the same TS as above) to 20H2, and generally everything works except when the (existing) user logs in for the first time, it goes to the "Choose privacy settings for your device" screen but with half the items already set (different from the default). Setting/accepting those, it then opens a UAC prompt to allow the "User OOBE Create Elevated Object Server" to make changes. If you don't agree/authenticate to the prompt, it just loops and won't let you get to the desktop. Once logged in, everything appears to be working properly, and new users don't appear to encounter the problem. (I haven't attempted a new user login as the first action followed by an existing profile.)

Both new/repurposed machines and the upgrading machines are in the same OUs with the same GPOs.

I can't seem to fix this or find useful information about what is going on. Does anyone have any suggestions?

Thanks.



--
Erich Hammer Head of Library Systems
er...@albany.edu University Libraries
518-442-3891 University @ Albany

"There can be but little liberty on earth while men
worship a tyrant in heaven." -- Robert Ingersoll