◄ page 1If your PC is still on the Windows 10 Creators Update, or version 1703, you'll see
KB4457141, and that brings the build number to 15063.1358. You can
manually download it here, and it contains the following fixes:
■ Addresses an issue that causes Internet Explorer security and certificate dialogs to display prompts in the background instead of the foreground in certain circumstances.
■ Addresses an issue that may cause the system to become unresponsive when applications call the EnableEUDC API.
■ Addresses an issue in which the “EnterpriseAssignedAccess” policy on mobile devices cannot configure some Settings pages, including Language, Region, Keyboard, and Airplane Mode.
■ Addresses an issue with the diagnostic pipeline for devices enrolled in Windows Analytics when the CommercialID registry key, "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" is present.
■ Addresses an issue that prevents the App-V client’s scheduled task from synching if the Device Guard lockdown policy is enabled.
■ Addresses an issue that occurs when using encrypted email. If the customer selects Cancel when first prompted for a PIN, multiple PIN prompts appear before the prompt finally goes away.
■ Addresses an issue that causes logon to fail when using a smart card to log in to a Remote Desktop Server. The error is “STATUS_LOGON_FAILURE”.
■ Addresses an issue that causes a Direct Access connection to fail when the client authentication certificate is stored in the TPM device.
■ Addresses an issue that causes a third-party VPN provider's user interface to stop working after dynamically unloading Cryptui.dll.
■ Addresses an issue that causes the system to log negative events for drivers that are valid and should be trusted. The issue occurs when running Windows Defender Application Control (Device Guard) in audit mode.
■ Addresses an issue that may cause the Local Security Authority Subsystem Service (LSASS) process to stop working when attempting to process a malformed security identifier (SID).
■ Addresses an issue that causes logging on to a Remote Desktop Session Host Server to occasionally stop responding.
■ Addresses an issue that may cause Service Control Manager (SCM) and Netlogon to stop working when one or more services are configured to run with domain credentials (service accounts).
■ Addresses an issue that causes the OS to stop responding during startup under certain circumstances.
■ Addresses an issue that occurs when using the “X509HintsNeeded” group policy to prepopulate the Username hint field. The Username hintfield is unexpectedly empty when unlocking a machine after a successful logon. Username hint caching is expected to only work for lock and unlock scenarios and is not designed for logoff and logon scenarios.
■ Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
■ Addresses an issue in which all Guest Virtual Machines running Unicast dual NIC NLB fail to respond to NLB requests after the Virtual Machines restart.
Finally, those on the Windows 10 Anniversary Update, or version 1607, will get
KB4457127, and that will bring the build number to 14393.2517. You can
manually download it here, and it contains the following fixes:
■ Addresses an issue that causes Internet Explorer security and certificate dialogs to display prompts in the background instead of the foreground in certain circumstances.
■ Makes the visibility Group Policy for the Settings Page available under User Configuration and Computer Configuration. The GPOs are at the following paths:
○ User Configuration/Administrative Template/Control Panel/Settings Page
Visibility
○ Computer Configuration/Administrative Template/Control Panel/Settings Page
Visibility
■ Addresses an issue with showing the correct changes to folder contents on some Network Attached Storage (NAS) configurations.
■ Addresses an issue with the diagnostic pipeline for devices enrolled in Windows Analytics when the CommercialID registry key, "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" is present.
■ Addresses an issue that prevents the App-V client’s scheduled task from syncing if the Device Guard lockdown policy is enabled.
■ Addresses an issue that causes login to fail when using a smart card to log in to a Remote Desktop Server. The error is “STATUS_LOGON_FAILURE”.
■ Addresses an issue that sometimes causes event log entries to appear corrupted for the following:
○ Microsoft-Windows-Kerberos-Key-Distribution-Center source.
○ Event IDs 4933, 4928, and 4937.
■ Addresses an issue that occurs when using encrypted email. If the customer selects Cancel when first prompted for a PIN, multiple PIN prompts appear before the prompt finally goes away.
■ Addresses an issue that causes a Direct Access connection to fail when the client authentication certificate is stored in the TPM device.
■ Addresses an issue that causes the system to log negative events for drivers that are valid and should be trusted. The issue occurs when running Windows Defender Application Control (Device Guard) in audit mode.
■ Addresses an issue that causes a Remote Desktop Session Host server to occasionally stop responding during login.
■ Addresses an issue that may cause the Local Security Authority Subsystem Service (LSASS) process to stop working when attempting to process a malformed security identifier (SID).
■ Addresses an issue that causes printing to an open or existing file to fail without displaying an error message. This issue occurs when using Microsoft Print to PDF or XPS Document Writer.
■ Addresses an issue that may cause a DNS server to return an error to a query when handling a large recursive response that requires truncation.
■ Addresses an issue that prevents running subsequent actions when you create multiple actions in a task using Task Scheduler and the task is scheduled under the Stop the existing instance rule.
■ Addresses an issue with a task that has a repetition setting. The task isn't scheduled and doesn't start after disabling and re-enabling the it. The Next Run Time in Task Scheduler shows the correct time, but the task doesn't start at that time.
■ Addresses an issue with a scheduled task that has an indefinite duration. The task starts immediately after it's created instead of at the time set on the Triggers tab.
■ Addresses an issue where a daily, repetitive task starts unexpectedly when the task is first created or starts when the task is updated.
■ Addresses an issue that occurs when a guest Service Host (svchost) stops working in Windows Server 2016. The Hyper-V time synchronization service (vmictimesync) in the guest may stop working, and a time sync issue may occur. The guest would then be vulnerable to time drift because of inaccurate hardware or incorrect Network Time Protocol (NTP) samples.
■ Addresses an issue that prevents the lastLogonTimestamp attribute of new Active Directory users from updating. This issue occurs when performing LDAP simple binds against a Windows Server 2016 domain controller.
■ Addresses an Active Directory Certificate Services (AD CS) issue that causes certificate enrollment requests from some enterprise routers to the MSCEP/NDES server to fail. The requests fail with the error "The Network Device Enrollment Service cannot convert encoded portions of the client's http message (or request body for POSTPKIOperation), or the converted message (or request body for POSTPKIOperation) is larger than 64K (%1). %2".
■ Addresses an Active Directory Domain Services (AD DS) Privileged Access Management issue that may cause a user to retain association with the configured shadow principal beyond the configured Time to Live (TTL). This issue occurs when a DC is promoted while the TTL is valid.
■ Addresses an issue where a DirSync client never finishes syncing when using a search filter that contains a linked attribute. For example, “memberOf=CN=Group1, OU=Accounts, DC=Contoso,DC=Com”.
■ Addresses an issue that causes Windows Server Backup to fail when backing up two volumes together in one location on NetApp.
■ Addresses an issue where Windows Server Backup fails to restore backups for Microsoft Exchange 2016.
■ Addresses an issue where creating a Client Access Point may take a long time when a firewall blocks access to child domain controllers.
■ Addresses memory leaks in the Cluster Health Service.
■ Addresses an issue that may cause an error when you attempt to access an NFS share.
■ Addresses an issue where opening Explorer view on a SharePoint server site using TMG proxy fails. This issue occurs when the server requires SSL and TLS client certificate authentication and sends trusted CA issuer lists.
■ Addresses an issue that may cause a system to stop working when you mount an NFS drive using the command line with the option -u -p. This issue occurs if the length of the password is different from the length of the domain name.
■ Addresses an issue that may cause setup to fail during OEM-OOBE implementation if French or Spanish language setting is selected on the Hyper-V host.
■ Addresses an issue that displays the report date as "Unknown" in the Remote Desktop License Manager.
■ Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
■ Addresses an issue in which all Guest Virtual Machines running Unicast dual NIC NLB fail to respond to NLB requests after the Virtual Machines restart.
You'll notice that some of the manual download links don't bring you directly to the updates as they would normally, and instead they bring you to the Update Catalog homepage. You can either search for the KB download, or we'll update this article when Microsoft updates its pages with a proper link.
source
