Windows 11 Update KB5046633: Security Boost & Known Issues Fix

As Windows users gear up for the holiday season, Microsoft has rolled out an important new update: KB5046633 for Windows 11 OS Builds 22621.4460 and 22631.4460. Released on November 12, 2024, this update isn't just a run-of-the-mill patch—it's a security-driven release designed to bolster the overall functionality and integrity of your operating system.

What’s New in KB5046633?​

This update specifically applies to Windows 11 Enterprise and Education editions in version 22H2, as well as all editions of version 23H2. The main highlights of KB5046633 include:

• Security Enhancements: This update addresses critical security vulnerabilities within the Windows operating system, which is essential for maintaining the safety of your data and devices.
• Quality Improvements: It builds upon the improvements made in the previous update, KB5044380 from October 22, 2024. While new features are not explicitly listed in this release, the focus on strengthening OS functionality cannot be overstated.

A Note About Upcoming Updates​

In an interesting twist for December, Microsoft has announced that there will not be a non-security preview release for this month due to the diminished operations surrounding the holiday season. Fear not! There will be a monthly security release, and regular updates will resume in January 2025. Mark your calendars and stay vigilant!

Details on the Update​

The safety net this update provides is crucial. Here’s how the machinery behind it operates:

• Servicing Stack Updates (SSUs): This update is paired with a servicing stack update (KB5044620), which ensures your Windows updates can be installed smoothly. Think of the servicing stack as the delivery truck for updates; without a reliable truck, your packages (updates) might not make it to your door.
• Addressing Known Issues: One notable known issue affecting users is related to the OpenSSH service. Post-installation of the October update, some users faced issues where the SSH connections would fail to initiate, complicating scenarios for enterprise and education customers. Microsoft is aware and investigating this issue. As a temporary fix, users can modify permissions on specific directories. A bit technical? Yes, but here's how you can do it:
  1. Open PowerShell as an Administrator.
  2. Execute commands to update permissions on C:\ProgramData\ssh and C:\ProgramData\ssh\logs for SYSTEM and Administrators.
  3. Ensure that you provide read access for Authenticated Users.

Here are the commands to run:

 $directoryPath = "C:\ProgramData\ssh" $acl = Get-Acl -Path $directoryPath $sddlString = "O:BAD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)" $securityDescriptor = New-Object System.Security.AccessControl.RawSecurityDescriptor $sddlString $acl.SetSecurityDescriptorSddlForm($securityDescriptor.GetSddlForm("All")) Set-Acl -Path $directoryPath -AclObject $acl

Repeat this for C:\ProgramData\ssh\logs.

Installation Process​

To get this essential update, Windows users have a few simple options:

• Automatic Update: Typically, your device will download and install this update automatically from Windows Update and Microsoft Update.
• Manual Installation: For those interested in the nitty-gritty, you can head over to the Microsoft Update Catalog website to find and download the standalone package.

Uninstalling the Update​

Should you need to remove this cumulative update, you can do so using the DISM command. However, keep in mind that uninstalling the servicing stack update will not be possible as it’s tightly integrated into the cumulative package.

Conclusion: Keep Your System Updated​

In today’s tech landscape, cybersecurity is paramount. Updates like KB5046633 remind us just how vital it is to maintain robust operating systems. With winter festivities approaching and the new year just around the corner, making sure your system is secure and functioning optimally is essential for enjoying a smooth digital experience.
So, what are you waiting for? Make sure your updates are installed, and don't hesitate to seek assistance if any issues arise. Your future self will thank you! As always, feel free to share your experiences and insights in the comments below. Happy computing!

---

Source: Microsoft Support November 12, 2024—KB5046633 (OS Builds 22621.4460 and 22631.4460) - Microsoft Support