We have seen reports that after updating to 20H2, if you try to edit a user’s permissions using Computer Management as soon as you click on “user” to choose the user to edit, the cursor shows “working” and shortly after the system will request to restart.  This is due to a reported bug in the lsass.exe program which Third Wall uses with two policies:

Rename Local Administrator Name

Set Local Administrator Password

Both policies are under the Local Built-In Account Management group.

Customers which are using either of these two policies should hold off in updating their customers' Windows 10 environments until this bug has been corrected.  If delaying deployment is not an option you will want to prepare the environments so that these two Third Wall policies are not running and to set the remote computers back to their default Administrator name to 'Administrator'.

We have created two Automate scripts to make this process easier.  In the linked zip file you will find two .xml files.  These are intended to be imported into your Automate server.

TW - Prep Policies for 20H2.xml

TW - Prep Remote Computers for 20H2.xml

Instructions on importing these scripts are below.

Start with the script TW - Prep Policies for 20H2.  This script will turn off the two listed policies for all locations.  When the script is complete, you should not see the Rename Local Administrator Name policy or the Set Local Administrator Password policy enabled on any Location.

This script only needs to be run on any one computer once.  If you have the ability to run it on your Automate server, that is the best option.  If not, execute it on any computer in your office.  There's no harm in running it more than once but subsequent runs will have no impact.

Once this script is complete, right-click the Agent Types.Windows Desktops group and select Commands -> Inventory -> Update Configs.  This will disable the policy on the remote computers.

This script only handles the server side, we now need to revert the workstations' Administrator name to default.  Right-click the Agent Types.Windows Desktop group and run the TW - Prep Remote Computer for 20H2 script on it.

Importing a Script

Use the Control Center to select System -> General -> Import -> XML Expansion to import these scripts into your Automate system.  Once clicked you will be presented with a file-dialogue box.  Use that window to input the two scripts downloaded in the link above.