Windows 10 Windows 10 cumulative update history

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addressed a script-related issue that caused Internet Explorer to stop working in some cases.
• Addressed issue with the Input Method Editor’s (IME) text input window for Internet Explorer.
• Addressed issue with rendering a graphics element in Internet Explorer.
• Addressed issue with form submissions in Internet Explorer.
• Addressed issue where the Location-hash is lost when navigating back if you previously navigated to an invalid URL.
• Addressed issue where applications may stop responding for customers who have internet or web proxies enabled using PAC script configurations. This is a result of a reentrancy deadlock in WinHTTP.dll. This can result in the following:
  • Microsoft Outlook cannot connect to Microsoft Office365.
  • Internet Explorer and Microsoft Edge cannot successfully render any content (including local computer content, local network content, or web content).
  • Cisco Jabber stops responding, which blocks messaging and telephony features.
  • Any application or service that relies on WinHTTP is impacted.
• Addressed a performance regression when users run full-screen Microsoft DirectX 9 games and applications.
• Addressed issue that prevents Forza Motorsport 7 and Forza Horizon 3 from running on some high-end gaming laptop configurations.
• Addressed issue where user selections for Feedback Frequency in Settings > Privacy > Feedback & diagnostics aren't saved.
• Addressed issue where RNDIS5 networking devices don't get a valid IP address or don't show network connectivity. If the issue continues after installing the update, you may need to uninstall and reinstall your Remote NDIS network adapter using Device Manager.
• Addressed issue where if a user manually changes the system's time zone and doesn't log off or restart, the new time doesn't display on the Lockscreen clock.
• Addressed issue that impacted some Epson SIDM (Dot Matrix) and TM (POS) printers, which were failing to print on x86 and x64-based systems. This issue affects KB4048955.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Symptom
After installing this KB, Internet Explorer 11 users who use SQL Server Reporting Services (SSRS) may not be able to scroll through a drop-down menu using the scroll bar.
Workaround
Using the scroll wheel on a mouse works as expected. This issue only applies to document mode 11, so attempting to load the page with document mode 10 may work around the issue.
To change the document mode in Internet Explorer 11:

1. Select F12.
2. Select the Emulation tab.
3. In the Document mode drop-down menu, select 10. The page will reload in the new document mode.

Microsoft is working on a resolution and will provide an update in an upcoming release.

Click to expand...

Applies to: Windows 10, Windows 10 version 1709
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Updates Internet Explorer’s default visibility for the button that launches Microsoft Edge.
• Addresses issue where Windows Defender Device Guard and Application Control block some applications from running, even in Audit-Only Enforcement Mode.
• Addresses issue to reset PLC bit on U0/U3 transitions.
• Addresses issue with personalized Bluetooth devices that don't support bonding.
• Addresses issue where the touch keyboard doesn’t support the standard layout for 88 languages.
• Addresses issue where the touch keyboard for a third-party Input Method Editor (IME) has no IME ON/OFF key.
• Addresses additional issues with updated time zone information.
• Addresses issue where, when using System Center Virtual Machine Manager (VMM), the user can't copy or clone virtual machines (VM). The error message is "0x80070057- Invalid parameter". This issue affects the VMM UI and PowerShell scripts used for VM cloning and copying.
• Security updates to the Microsoft Scripting Engine, Microsoft Edge, and Windows Server.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.
Known issues in this update
Microsoft is not currently aware of any issues with this update.
How to get this update
This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.
File information
For a list of the files that are provided in this update, download the file information for cumulative update 4054517.

Click to expand...

Summary
This update makes reliability improvements to Microsoft Store and fixes an issue that could cause app update failures and cause Microsoft Store to generate unnecessary network requests.

How to get this update
Windows Update
This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Click to expand...

Applies to: Windows 10 version 1709
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses issue where event logs stop receiving events when a maximum file size policy is applied to the channel.
• Addresses issue where printing an Office Online document in Microsoft Edge fails.
• Addresses issue where the touch keyboard doesn’t support the standard layout for 109 keyboards.
• Addresses video playback issues in applications such as Microsoft Edge that affect some devices when playing back video on a monitor and a secondary, duplicated display.
• Addresses issue where Microsoft Edge stops responding for up to 3 seconds while displaying content from a software rendering path.
• Addresses issue where only 4 TB of memory is shown as available in Task Manager in Windows Server version 1709 when more memory is actually installed, configured, and available.
• Addresses issue where update installation may stop at 99% and may show elevated CPU or disk utilization. This occurs if a device was reset using the Reset this PC functionality after installing KB4054022.
• Security updates to Windows SMB Server, the Windows Subsystem for Linux, Windows Kernel, Windows Datacenter Networking, Windows Graphics, Microsoft Edge, Internet Explorer, and the Microsoft Scripting Engine.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709
Summary
An update is available to fix the following issue that occurs after you install January 3, 2018—KB4056892 (OS Build 16299.192):
AMD devices fall into an unbootable state.
How to get this update
Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
More information
Known issues in this update
Microsoft is not aware of any issues that affect this update currently.

Prerequisites
To install this update, you must have Windows 10 Version 1709 installed.


Registry information
To apply this update, you don't have to make any changes to the registry.


Restart requirement
You may have to restart the computer after you apply this update.


Update replacement information
This update does not replace a previously released update.

Click to expand...

kemical said:

Microsoft has released Windows 10 Cumulative Updates, available via Windows Update.
OS Build 16299.214
I cannot post a changelog due issues with the forum.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses issue where child accounts are able to access InPrivate mode on ARM devices even though their browsing and search history is sent to their parents. This occurs only on Microsoft accounts belonging to children that are managed using the Microsoft Family service and for which parents have enabled activity reporting. This applies to Microsoft Edge and Internet Explorer.
• Addresses issue with docking and undocking Internet Explorer windows.
• Addresses issue in Internet Explorer where pressing the delete key inserted a new line in input boxes in an application.
• Addresses issue in Internet Explorer where selected elements wouldn't update under certain circumstances.
• Addresses issue where some users may have experienced issues logging into some websites when using third-party account credentials in Microsoft Edge.
• Updates time zone information.
• Addresses issue with browser Compatibility View settings that occurs during updates.
• Addresses issue where, in certain hardware configurations, the frame rates of DirectX Games were unintentionally limited to a factor of the display's vertical synchronization.
• Addresses issue that causes delays when switching keyboard languages using Alt+Shift.
• Addresses issue where surround sound audio endpoints reverted to stereo after restarting.
• Improves and reduces conditions where certain Bluetooth keyboards drop keys during reconnection scenarios.
• Corrects mouse delays for devices that incorrectly report the battery level status.
• Addresses issue where MMC application snap-ins—such as Services, Local Policy Admin, and Printer Management—fail to run when Windows Defender Application Control (Device Guard) is turned on. The error is "Object doesn't support this property or method".
• Prevents use of the Pre-production Onesettings endpoint for Windows Setup when test signing is enabled.
• Addresses issue where installations of Windows Server, version 1709 are not automatically activated using the Automated Virtual Machine Activation (AVMA) feature on Hyper-V hosts that have been activated.
• Addresses issue with the Auto-register Inbox templates feature for UEV where the Scheduled Task didn't have the proper trigger.
• Addresses issue where the App-V client didn't read the policy for SyncOnBatteriesEnabled when the policy was set using a Group Policy Object (GPO).
• Addresses issue where the Supported On field for the Enable App-V Client policy is blank in the Group Policy editor.
• Addresses issue where the user’s hive data in the registry is not maintained correctly when some App-V packages belong to the connection group.
• Provides additional logging for administrators to take action, such as picking a proper configuration for their App-V package, when there are multiple configuration files for a single package.
• Addresses issue with App-V packages that aren't compatible with registry virtualization using kernel containers. To address the issue, we changed the registry virtualization to use the earlier (non-container) method by default. Customers who would like to use the new (kernel container) method for registry virtualization can still switch to it by setting the following registry value to 1:
  • Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\Compatibility
  • Setting: ContainerRegistryEnabled
  • DataType: DWORD
• Security updates to Microsoft Scripting Engine, Microsoft Edge, Internet Explorer, Microsoft Windows Search component, Windows Kernel, Windows Authentication, Device Guard, Common Log File System driver, and the Windows storage and file systems.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Significant changes include the following:

• Addresses an issue in which some USB devices and onboard devices, such as a built-in laptop camera, keyboard, or mouse, stop working. This may occur when the Windows Update servicing stack incorrectly skips installing the newer version of some critical drivers in the cumulative update and uninstalls the currently active drivers during maintenance.

If you installed earlier updates, only the new fixes that are contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Addresses issue with printing XML documents with Internet Explorer and Microsoft Edge.
• Updates legacy Document Mode cell visibility in Internet Explorer.
• Addresses issue with pinch and zoom gestures on some hardware in Internet Explorer.
• Addresses issue where Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
• Addresses issue to prevent media and other applications from becoming unresponsive or failing when upgrading graphics drivers.
• Addresses issue where customers receive "Check your account, you don't own this content” errors when attempting to play or install owned content. This issue can also result in customers getting kicked out of a game in the middle of play.
• Addresses issue where, after installing KB4056892,KB4073291, KB4058258, KB4077675, or KB4074588 on a server, you may not be able to access SMB shared files in directory junction points or volume mount points hosted on that server. The error is "ERROR_INVALID_REPARSE_DATA”. As a result, editing some group policies using GPMC or AGPM 4.0 may fail with the error "The data present in the reparse point buffer is invalid. (Exception from HRESULT: 0x80071128)".
• Addresses issue where an AD FS server issue causes the WID AD FS database to become unusable after a restart. This might prevent the AD FS service from starting.
• Addresses issue where, after installing KB4090913, the Mixed Reality Portal may fail to initialize. This results in an “SXXXXXXX-X” error or a “We couldn’t download the Windows Mixed Reality Software” message may appear after the software is successfully downloaded.
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Windows Desktop Bridge, Windows Kernel, Windows Shell, Windows MSXML, Device Guard, Windows Hyper-V, Windows Installer, and the Microsoft Scripting Engine.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.
Known issues in this update
Symptom
Windows Update History reports that KB4054517 failed to install because of error 0x80070643.

Workaround
Even though the update was successfully installed, Windows Update incorrectly reports that the update failed to install. Select Check for Updates to confirm that there are no additional updates available.
You can also type About your PC in the search box on the taskbar to confirm that your device is using the expected OS build.
Microsoft is working on a resolution and will provide an update in an upcoming release.
How to get this update
This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.
File information
For a list of the files that are provided in this update, download the file information for cumulative update 4088776.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses issue with a GDI handle leak in the Windows Ribbon control.
• Addresses issue where users can't select OK after entering credentials in command line on Windows Server version 1709.
• Addresses issues where Bluetooth devices fail to receive data after a restart.
• Addresses issue where, during BitLocker decryption or encryption of a drive, files protected with the Encrypting File System (EFS) may become corrupted.
• Addresses issue where the server may occasionally encounter an error during file transfer. The error is “Stop D1 in tcpip!TcpSegmentTcbSend”.
• Addresses issue where an iSCSI RESET might trigger a cluster failover.
• Addresses issue in MPIO where pass-through SCSI requests might lead to a stop error if the disk is pending removal.
• Addresses issue where processing of group policies may fail, and policies may be removed as a result. This occurs if the length of the Windows Defender Firewall policy rule exceeds 260 characters.
• Addresses issue caused by a new privilege in Windows Server 2016 and Windows 10 version 1709 named "Obtain an impersonation token for another user in the same session”. When applied using Group Policy to those computers, gpresult /h fails to generate reporting data for any setting configured by the Security Configuration Engine (SCE) extension. The error message is “Requested value ‘SeDelegateSessionUserImpersonatePrivilege’ was not found”. The Group Policy Management Console fails to show the privilege in the Settings tab for a GPO where the setting has been configured.
• Addresses issue where errors may occur when accessing WebDAV files or folders on a SharePoint site if the file or folder name contains multibyte characters.
• Addresses issue where the Remote Desktop License report gets corrupted when it exceeds the 4 KB size limit.
• Addresses issue where an Azure point-to-site VPN connection that uses IKEv2 may fail when the user's device contains a large number of trusted root certificates.
• Addresses rendering issue in Microsoft Edge for PDF documents with backgrounds created using various third-party publishing tools.
• Addresses issue where a media platform stops responding when changing cameras rapidly on a device.
• Addresses issue where a media platform stops responding, which affects media playback in Microsoft Edge, Internet Explorer, and Microsoft PowerPoint.
• Addresses issue with spatial audio when used in connection to Dolby Atmos for Headphones.
• Addresses issue where a credential prompt that requires administrative privileges appears when a standard user account performs the first logon to a Windows 10 device that has been deployed using Windows Autopilot.
• Addresses issue where tiles in the Start menu aren't preserved when upgrading from Windows 10 version 1607 to Windows 10 version 1709.
• Addresses issue with Spell Check and custom dictionaries.
• Addresses issue with the press and hold feature when using a pen in Tablet mode.
• Addresses issue with editing web password fields using a touch keyboard.
• Addresses issue where some Bluetooth card readers don't work after a restart.
• Addresses issue that decreases the Universal CRT’s performance in the _gcvt and _gcvt_s functions.
• Addresses issue in which the output to a file or pipe was fully buffered in the Universal CRT for the standard error (STDERR) stream.
• Addresses issue in the Universal CRT by adding the "x" access mode flag to support the fopen()function.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update
Symptom:

Windows Update History reports that KB4054517 failed to install because of error 0x80070643.

Work around:

Even though the update was successfully installed, Windows Update incorrectly reports that the update failed to install. To verify the installation, select Check for Updates to confirm that there are no additional updates available.

You can also type About your PC in the Search box on your taskbar to confirm that your device is using the expected OS build.

Microsoft is working on a resolution and will provide an update in an upcoming release.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Provides support to control usage of Indirect Branch Prediction Barrier (IBPB) within some AMD processors (CPUs) for mitigating CVE-2017-5715, Spectre Variant 2 when switching from user context to kernel context (See AMD Architecture Guidelines around Indirect Branch Control and AMD Security Updates for more details). Follow instructions outlined in KB4073119 for Windows Client (IT Pro) guidance to enable usage of IBPB within some AMD processors (CPUs) for mitigating Spectre Variant 2 when switching from user context to kernel context.
• Addresses an issue that causes an access violation in Internet Explorer when it runs on the Microsoft Application Virtualization platform.
• Addresses an issue in Enterprise Mode related to redirects in Internet Explorer and Microsoft Edge.
• Addresses an issue that generates an access violation on certain pages in Internet Explorer when it renders SVGs under a high load.
• Addresses additional issues with updated time zone information.
• Addresses an issue that might cause the App-V service to stop working on an RDS server that hosts many users.
• Addresses an issue where user accounts are locked when applications are moved to a shared platform using App-V (e.g., XenApp 7.15+ with Windows Server 2016, where Kerberos authentication isn't available).
• Addresses an issue with printing content generated by ActiveX in Internet Explorer.
• Addresses an issue that causes document.execCommand("copy") to always return False in Internet Explorer.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Microsoft Edge, Windows kpp platform and frameworks, Microsoft scripting engine, Windows graphics, Windows Server, Windows kernel, Windows datacenter networking, Windows wireless networking, Windows virtualization and Kernel, and Windows Hyper-V.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Provides support to control usage of Indirect Branch Prediction Barrier (IBPB) within some AMD processors (CPUs) for mitigating CVE-2017-5715, Spectre Variant 2 when switching from user context to kernel context (See AMD Architecture Guidelines around Indirect Branch Control and AMD Security Updates for more details). Follow instructions outlined in KB4073119 for Windows Client (IT Pro) guidance to enable usage of IBPB within some AMD processors (CPUs) for mitigating Spectre Variant 2 when switching from user context to kernel context.
• Addresses an issue that causes an access violation in Internet Explorer when it runs on the Microsoft Application Virtualization platform.
• Addresses an issue in Enterprise Mode related to redirects in Internet Explorer and Microsoft Edge.
• Addresses an issue that generates an access violation on certain pages in Internet Explorer when it renders SVGs under a high load.
• Addresses additional issues with updated time zone information.
• Addresses an issue that might cause the App-V service to stop working on an RDS server that hosts many users.
• Addresses an issue where user accounts are locked when applications are moved to a shared platform using App-V (e.g., XenApp 7.15+ with Windows Server 2016, where Kerberos authentication isn't available).
• Addresses an issue with printing content generated by ActiveX in Internet Explorer.
• Addresses an issue that causes document.execCommand("copy") to always return False in Internet Explorer.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Microsoft Edge, Windows kpp platform and frameworks, Microsoft scripting engine, Windows graphics, Windows Server, Windows kernel, Windows datacenter networking, Windows wireless networking, Windows virtualization and Kernel, and Windows Hyper-V.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes modern applications to reappear after upgrading the OS version even though those applications have been deprovisioned using remove-AppXProvisionedPackages-Online.
• Addresses an issue in which running an application as an administrator causes the application to stop working when pasting the user name or password into the user elevation prompt (LUA).
• Addresses an issue that causes Skype and Xbox to stop working.
• Addresses an issue that prevents Autodiscover in Microsoft Outlook 2013 from being used to set up email accounts when UE-V is enabled.
• Addresses an issue where AppLocker publisher rules applied to MSI files don’t match the files correctly.
• Addresses an issue that prevents Windows Hello from generating good keys when it detects weak cryptographic keys because of TPM firmware issues. This issue only occurs if the policy to require the TPM is configured.
• Addresses an issue that prevents users from unlocking their session and sometimes displays incorrect user-name@domain-name information on the logon screen when multiple users log on to a machine using fast user switching. This specifically happens when users are logging on from several different domains, are using the UPN format for their domain credentials (user-name@domain-name), and are switching between users using fast user switching.
• Addresses an issue that causes the browser to prompt for credentials often instead of only once when using the Office Chrome extension.
• Addresses an issue related to smart cards that allow PINs or biometric entry. If the user enters an incorrect PIN or biometric input (e.g., a fingerprint), an error appears, and the user must wait up to 30 seconds. With this change, the 30-second delay is no longer required.
• Increases the minimum password length in Group Policy to 20 characters.
• Addresses an issue that displays name-constraint information incorrectly when displaying certificate properties. Instead of presenting properly formatted data, the information is presented in hexadecimal format.
• Addresses an issue that blocks failed NTLM authentications instead of only logging them when using an authentication policy with audit mode turned on. Netlogon.log may show the following:

SamLogon: Transitive Network logon of <domain>\<user> from <machine2> (via <machine1>) Entered

NlpVerifyAllowedToAuthenticate: AuthzAccessCheck failed for A2ATo 0x5. This can be due to the lack of claims and compound support in NTLM

SamLogon: Transitive Network logon of <domain>\<user> from <machine2> (via <machine1>) Returns 0xC0000413

• Addresses an issue that generates a certificate validation error 0x800B0109 (CERT_E_UNTRUSTEDROOT) from http.sys.
• Addresses an issue in which resetting the Windows Hello PIN at the logon prompt puts the system in a state that makes resetting the PIN again impossible.
• Addresses an issue where the right-click context menu for encrypting and decrypting files using Windows Explorer is missing.
• Addresses an issue that suspends BitLocker or Device Encryption during device unenrollment instead of keeping the drive protected.
• Addresses an issue that causes Microsoft Edge to stop working after a few seconds when running a software restriction policy.
• Addresses an issue that may cause a file system mini-filter to fail to unload because of a leak in Filter Manager, which requires a restart.
• Addresses an issue that causes the connection bar to be missing in Virtual Machine Connection (VMConnect) when using full-screen mode on multiple monitors.
• Addresses an issue that prevents certain devices from working on Windows 10, version 1709, machines when the “Disable new DMA devices when this computer is locked” Group Policy is active. The non-working devices are internal, PCI-based peripherals (wireless network drivers and input and audio peripherals). These peripherals can fail on systems whose firmware blocks the peripherals from performing Direct Memory Access (DMA) at boot.
• Addresses an issue that might cause Windows Server 2016 Domain Controllers to log Microsoft Windows Security audit events ID 4625 and ID 4776. The username and domain name in the events may appear truncated, only showing the first character for logons coming from client applications using wldap32.dll.
• Addresses an issue in which users may exist in a domain that is trusted using transitive trust, but are unable to locate a PDC or DC for the Extranet Lockout feature. The following exception occurs: “Microsoft.IdentityServer.Service.AccountPolicy.ADAccountLookupException: MSIS6080: A bind attempt to domain 'globalivewireless.local' failed with error code '1722'”.
  
  Also, the following message appears on the IDP page: "Incorrect user ID or password. Type the correct user ID and password, and try again."
• Addresses an issue that prevents you from modifying or restoring Active Directory objects that have invalid backlink attributes populated in their class. The error you receive is “Error 0x207D An attempt was made to modify an object to include an attribute that is not legal for its class.”
• Addresses an issue that prevents the AdminSDHolder task from running when a protected group contains a member attribute that points to a deleted object. Additionally, Event 1126 is logged as “Active Directory Domain Services was unable to establish a connection with the global catalog. Error value: 8430. The directory service encountered an internal failure. Internal ID: 320130e.”
• Addresses an issue that occurs when Volume Shadow Copy is enabled on a volume that hosts a file share. If the client accesses the UNC path to view the properties in the Previous Version tab, the Date Modified field is empty.
• Addresses an issue that occurs when a user with a roaming user profile first logs on to a machine running Windows 10, version 1607, and then logs off. Later, if the user tries to log on to a machine running Windows 10, version 1703, and opens Microsoft Edge, Microsoft Edge will stop working.
• Addresses an issue that makes a Japanese keyboard unusable in remote assistance sessions.
• Addresses an issue that causes the cursor to unexpectedly move to center of the screen when changing the display mode.
• Addresses a potential leak caused by opening and closing a new web browser control.
• Addresses an issue that causes the ContentIndexter.AddAsync API to throw an unnecessary exception.
• Addresses an issue with the first launch performance of UWP Desktop Bride apps.
• Addresses an issue with the Search tab of Microsoft Outlook 2016 during the upgrade from Windows 10, version 1703, to Windows 10, version 1709.
• Addresses an issue that causes updates for large game apps to fail.
• Addresses an issue that removes user-pinned folders or tiles from the Start menu in some cases
• Addresses an issue that causes invisible apps to appear in the Start menu.
• Addresses an issue that might cause some users to experience unexpected panning or scrolling in certain apps while using the pen.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1709, 1803

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue in Internet Explorer that might cause communication between web workers to fail in certain asynchronous scenarios that involve multiple visits to a web page.
• Updates Internet Explorer and Microsoft Edge to respect the video preload flag in certain scenarios.
• Addresses an issue on AMD platforms that causes intermittent loss of USB port functionality after resuming from Hibernate (S4).
• Increases the user account minimum password length in Group Policy from 14 to 20 characters.
• Addresses an issue with the April 2018 Windows Servicing update that causes App-V Scripts (User Scripts) to stop working.
• Addresses an issue that prevents customers from typing Hangul correctly with Microsoft's Korean IME in Microsoft Word Online.
• Addresses an issue that prevents customers from selecting a Microsoft add-in on a second monitor.
• Addresses a known issue in KB4093105 that may cause the message “We couldn't download Windows Mixed Reality software” to appear on some Windows 10 Mixed Reality devices.
• Addresses an issue that may cause an error when connecting to a Remote Desktop server. For more information, see CredSSP updates for CVE-2018-0886.
• Security updates to Microsoft Edge, Internet Explorer, Microsoft scripting engine, Windows app platform and frameworks, Device Guard, Windows kernel, Microsoft Graphics Component, Windows storage and filesystems, Windows Hyper-V, Windows virtualization and kernel, HTML help, and Windows Server.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10 version 1803

Summary
This update addresses an issue where the 2017 and 2018 versions of Intuit QuickBooks Desktop can't run in multi-user mode on Windows 10, version 1803 devices. The QuickBooks multi-user mode service fails to start with error “Windows could not start the QuickBooksDBXX service on Local Computer." and “Error 193: 0xc1”.
Known issues
Microsoft is not aware of any issues that affect this update currently.
How to get this update
To get the standalone package for this update, go to the Microsoft Update Catalog website.

Click to expand...

Applies to: Windows 10 version 1803

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Provides protections from an additional subclass of speculative execution side channel vulnerability known as Speculative Store Bypass (CVE-2018-3639). These protections aren't enabled by default. For Windows client (IT pro) guidance, follow the instructions in KB4073119. For Windows Server guidance, follow the instructions in KB4072698. Use this guidance document to enable mitigations for Speculative Store Bypass (CVE-2018-3639) in addition to the mitigations that have already been released for Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754).
• Addresses an issue in which the 2017 and 2018 versions of Intuit QuickBooks can't run in multi-user mode on Windows 10 1803 devices. Users will now be offered Windows 10, version 1803.
• Adds support for the SameSite cookie web standard to Microsoft Edge and Internet Explorer.
• Addresses an issue with Internet Explorer that prevents it from using an updated version of location services.
• Addresses an issue that causes certain games to fail to show dialogs when connected to monitors that support interlaced display formats.
• Addresses an issue with the brightness controls on some laptops after updating to the Windows 10 April 2018 Update.
• Addresses a reliability issue in which the GameBar may fail to launch.
• Addresses an issue where firmware updates cause devices to go into BitLocker recovery mode when BitLocker is enabled, but Secure Boot is disabled or not present. This update prevents firmware installation on devices in this state. Administrators can install firmware updates by:
  1. Temporarily suspending BitLocker.
  2. Immediately installing firmware updates before the next OS startup.
  3. Immediately restarting the device so that BitLocker doesn’t remain in the suspended state.
• Addresses an issue that caused the system to start up to a black screen. This issue occurs because previous updates to the Spring Creators Update were incompatible with specific versions of PC tune-up utilities after installation.
• Addresses an issue in which customers with a combination of specific Windows display languages and user preferred language list (UPLL) entries receive an extraneous UPLL entry and input language selector entry. This issue occurs after upgrading to Windows 10 version 1803 and, as a result, customers cannot remove this language entry or its keyboard.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft scripting engine, Windows Desktop Bridge, Windows apps, Windows shell, Windows kernel, Windows Server, Windows storage and filesystems, Windows wireless networking, remote code execution, and Windows virtualization and kernel.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10, version 1803

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes the Video Settings HDR streaming calibration slider to stop working. This is caused by a conflict with the panel brightness intensity settings configured by certain OEMs.
• Addresses streaming compatibility issues with certain live TV streaming content providers.
• Addresses an issue where media content previously generated by Media Center doesn't play after installing the Windows 10 April 2018 update.
• Addresses an issue in which SmartHeap didn't work with UCRT.
• Addresses performance regression in App-V, which slows many actions in Windows 10.
• Addresses an issue that causes Appmonitor to stop working at logoff if the Settingstoragepath is set incorrectly.
• Addresses an issue that causes Appmonitor to stop working at logoff, and user settings are not saved.
• Addresses an issue where client applications running in a container image don't conform to the dynamic port range.
• Addresses an issue where the DNS server might stop working when using DNS Query Resolution Policies with a "Not Equal" (NE) condition.
• Addresses an issue with T1 and T2 custom values after configuring DHCP failover.
• Addresses an issue that causes the latest versions of Google Chrome (67.0.3396.79+) to stop working on some devices.
• Addresses issues with the Remote Desktop client in which pop-up windows and drop-down menus don't appear and right-clicking doesn't work properly. These issues occur when using remote applications.
• Addresses an issue that causes a connection failure when a Remote Desktop connection doesn’t read the bypass list for a proxy that has multiple entries.
• Addresses an issue that may cause Microsoft Edge to stop working when it initializes the download of a font from a malformed (not RFC compliant) URL.
• Addresses an issue where some users may receive an error when accessing files or running programs from a shared folder using the SMBv1 protocol. The error is "An invalid argument was supplied".
• Addresses an issue that causes Task Scheduler tasks configured with an S4U logon to fail with the error "ERROR_NO_SUCH_LOGON_SESSION/STATUS_NO_TRUST_SAM_ACCOUNT".
• Addresses a performance issue with Windows Mixed Reality on some laptops with hybrid graphics adapters, such as Surface Book 2.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

Click to expand...

Applies to: Windows 10, version 1803

Note This release also contains updates for Microsoft HoloLens (OS Build 17134.165) released July 10, 2018.
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Improves the ability of the Universal CRT Ctype family of functions to correctly handle EOF as valid input.
• Enables debugging of WebView content in UWP apps using the Microsoft Edge DevTools Preview app that’s available in the Microsoft Store.
• Addresses an issue that may cause the Mitigation Options Group Policy client-side extension to fail during GPO processing. The error message is “Windows failed to apply the MitigationOptions settings. MitigationOptions settings might have its own log file” or “ProcessGPOList: Extension MitigationOptions returned 0xea.” This issue occurs when Mitigation Options has been defined either manually or by Group Policy on a machine using Windows Defender Security Center or the PowerShell Set-ProcessMitigation cmdlet.
• Evaluates the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Security updates to Internet Explorer, Windows apps, Windows graphics, Windows datacenter networking, Windows wireless networking, Windows virtualization, Windows kernel, and Windows Server.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Click to expand...

Applies to: Windows 10, version 1803

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that may cause some devices running network monitoring workloads to receive the 0xD1 Stop error because of a race condition after installing the July update.
• Addresses an issue with the DHCP Failover server that may cause enterprise clients to receive an invalid configuration when requesting a new IP address. This results in a loss of connectivity.
• Addresses an issue that may cause the restart of the SQL Server service to fail occasionally with the error, “Tcp port is already in use”.
• Addresses an issue that occurs when an administrator tries to stop the World Wide Web Publishing Service (W3SVC). The W3SVC remains in a "stopping" state, but cannot fully stop or it cannot be restarted.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...