Windows 10 Updates KB4559004, KB4559003 (21. Juli 2020)

[English]Zum 21. Juli 2020 (3. Dienstag im Monat) hat Microsoft verschiedene optionale, kumulative Updates für Windows 10 sowie die Windows Server-Pendants freigegeben. Hier ein Überblick über die betreffenden Pakete.

Vorbemerkungen zu den Windows 10 Updates

Die Informationen finden sich in der Windows 10 Update-History-Seite. Zu beachten ist, dass der Support für ältere Windows 10 Versionen ausgelaufen ist. Windows 10 Home und Windows 10 Pro erhalten dann keine Update mehr.

Funktionsupdates müssen angestoßen werden

Beginnend mit den Updates vom 21. Mai 2019 (z.B. Update KB4497934) ändert Microsoft den Ablauf beim Upgrade auf neue Windows 10-Versionen. Benutzer können entscheiden, wann sie Feature-Update installieren möchten. Ich hatte darüber im Blog-Beitrag Windows 10 Mai 2019 Update mit Update-Kontrolle berichtet.

Wichtig: Ab Juli 2020 deaktivieren alle Windows Updates die RemoteFX vGPU-Funktion aufgrund der Sicherheitslücke CVE-2020-1036 (siehe auch KB4570006). Nach der Installation dieses Updates schlagen Versuche, virtuelle Maschinen (VM) zu starten, bei denen RemoteFX vGPU aktiviert ist, fehl. Mehr Informationen finden sich in den nachfolgend verlinkten KB-Artikeln.

Update KB4559004 für Windows 10 V1903/1909

Das kumulative Update KB4559004 für Windows 10 V1903/1909 und die Windows Server Pendants hebt die Build auf 17763.997 an. Das Update beinhaltet Qualitätsverbesserungen, aber keinen neuen Betriebssystemfunktionen. Hier die Liste der als Highlights bezeichneten Änderungen:

• Updates an issue that might cause the Magnifier to stop working in Microsoft Excel in certain scenarios. As a result, Microsoft Excel might also stop working.
• Updates File Explorer to allow you to delete previous terms from the search box.
• Updates an issue that causes File Explorer to stop working when you browse directories of raw images and other file types.
• Updates an issue that prevents the system from recognizing the Windows Hello face camera.
• Updates an issue that might prevent a Windows 10 device from reaching the internet when using a wireless wide area network (WWAN) LTE modem.
• Updates an issue that prevents family safety features, such as time limits and activity reporting, from working on ARM64 devices.

Unter anderem ist der LTS-Bug, der schon einige Monate in Windows 10 auftreten konnte, behoben worden. Hier die Liste aller Änderungen:

• Addresses an issue that prevents you from using sharing functionality in Microsoft Office. This occurs when Conditional Access is enabled.
• Addresses an issue in Microsoft Edge IE mode that occurs when you open multiple documents from a SharePoint site.
• Addresses an issue in Microsoft Edge IE mode that occurs when you browse using anchor links.
• Addresses an issue that causes provisioning for the Universal Windows Platform (UWP) to fail in certain scenarios when using Deployment Image Servicing and Management (DISM).
• Addresses an issue that prevents you from opening documents in SharePoint in certain scenarios.
• Addresses an issue that might cause the Magnifier to stop working in Microsoft Excel in certain scenarios. As a result, Microsoft Excel might also stop working.
• Addresses an issue with Start menu apps and tiles in virtual desktop infrastructure (VDI) environments. The occurs after you sign in a second time and are using a Remote Desktop User profile Disk in a non-persistent virtual desktop pool.
• Addresses an issue that prevents you from installing some .msi apps. This occurs when a device is managed by a Group Policy that redirects the AppData folder to a network folder.
• Addresses an issue that might cause apps that use the custom text wrapping function to stop working in certain scenarios.
• Addresses an issue that might increase the number of handles when using Microsoft Outlook.
• Addresses an issue that causes new child windows to flicker and appear as white squares on server devices that are configured for stark visual contrast.
• Addresses an issue that incorrectly calculates long path addresses that have Unicode characters outside of the current system.
• Updates File Explorer to allow you to delete previous terms from the search box.
• Addresses an issue that causes File Explorer to stop working when you browse directories of raw images and other file types.
• Addresses an issue that prevents the migration of the Windows Remote Management (WinRM) service startup type.
• Addresses an issue that prevents internet of things (IoT) devices from activating after installing an earlier cumulative update.
• Addresses an issue that prevents family safety features, such as time limits and activity reporting, from working on ARM64 devices.
• Addresses an issue that continues to display the previous username hint in the smart card sign in box after a different user has used the machine with domain credentials.
• Addresses an issue that causes an upgrade from Windows 10, version 1903 or Windows 10, version 1909 to fail. This occurs when a system is joined to Azure Active Directory and BitLocker is configured for a PIN protector.
• Addresses an issue that causes lsass.exe to stop working on a terminal server when you enable Remote Credential Guard. The exception code is 0xc0000374.
• Addresses an issue that prevents the system from recognizing the Windows Hello face camera.
• Addresses an issue that prevents Microsoft Defender Advanced Threat Protection (ATP) from applying file exclusions in some cases, which leads to application compatibility issues.
• Addresses an issue that causes automatic investigations to fail in Microsoft Defender ATP.
• Improves Microsoft Defender ATP's ability to identify malicious code injection activities.
• Addresses an issue that displays strange characters before the day, month, and year fields in the output from console commands.
• Updates dcpromo.exe to remove the "Network access: Restrict clients allowed to make remote calls to SAM" policy from member servers when they are promoted to domain controllers. This allows clients to make Security Accounts Manager (SAM) connections to these domain controllers.
• Addresses an issue that might cause Windows 10 devices that enable Credential Guard to fail authentication requests when they use the machine certificate.
• Addresses an issue that incorrectly reports Lightweight Directory Access Protocol (LDAP) sessions as unsecure sessions in Event ID 2889. This occurs when the LDAP session is authenticated and sealed with a Simple Authentication and Security Layer (SASL) method.
• Addresses an issue that might cause stop error 7E in nfssvr.sys on servers running the Network File System (NFS) service.
• Addresses an issue that causes built-in modern applications to stop working on devices configured to use mandatory or roaming user profiles. The error is 802b000a (E_XAMLPARSEFAILED).
• Addresses an issue that logs a Distributed Component Object Model (DCOM) error in the System event log when the Distributed File System (DFS) Replication service is started.
• Addresses an issue that might prevent a Windows 10 device from reaching the internet when using a wireless wide area network (WWAN) LTE modem. However, the Network Connectivity Status Indicator (NCSI) in the notification area might still indicate that you are connected to the internet.
• Addresses an issue that might cause the Microsoft Remote Assistance process (msra.exe) to stop working when a user is receiving assistance during a computer session. The error is 0xc0000005 or 0xc0000409.
• Addresses an issue that causes Server Message Block (SMB) to incorrectly use the original, cached non-Continuous Available handle to a file, which becomes invalid after a network error or storage failover. As a result, applications to fail with errors such as STATUS_UNEXPECTED_NETWORK_ERROR.

Das Update ist optional und wird nur angeboten, wenn der Nutzer explizit in der Einstellungen-Seite nach Updates suchen lässt. Das Update lässt sich auch aus dem Microsoft Update Catalog herunterladen und installieren. Es ist aber darauf zu achten, dass das neueste Servicing Stack Update (SSU) installiert ist. Microsoft listet kein bekannten Problemen mit diesem Update auf.

Zudem hat Microsoft für Windows 10 V1903/1909 direkte Verbesserungen am Update Client vorgenommen, um dessen Zuverlässigkeit zu verbessern.

Update KB4559003 für Windows 10 V1809

Das kumulative Update KB4559003 für Windows 10 V1809 und die Server Pendants hebt die Build auf 17134.1369 an. Das Update beinhaltet Qualitätsverbesserungen, aber keinen neuen Betriebssystemfunktionen. Hier die Liste der Änderungen:

• Addresses an issue in Microsoft Edge IE mode that occurs when you open multiple documents from a SharePoint site.
• Addresses an issue in Microsoft Edge IE mode that occurs when you browse using anchor links.
• Addresses an issue that might cause the Magnifier to stop working in Microsoft Excel in certain scenarios. As a result, Microsoft Excel might also stop working.
• Addresses an issue that might cause apps that use the custom text wrapping function to stop working in certain scenarios.
• Addresses an issue that prevents you from opening documents in SharePoint in certain scenarios.
• Addresses a reliability issue in dxgkrnl.sys that might cause stop error 0x50 PAGE_FAULT_IN_NONPAGED_AREA.
• Addresses an issue that might increase the number of handles when using Microsoft Outlook.
• Addresses an issue that causes an application to flicker or stop responding when sharing the application using Microsoft Teams.
• Addresses an issue that incorrectly calculates long path addresses that have Unicode characters outside of the current system.
• Addresses an issue that prevents Windows 8.1 apps from projecting to a secondary display when those apps use the StartProjectingAsync API.
• Addresses an issue that prevents Event Viewer from saving a full set of filtered events when you filter by the date.
• Addresses an issue that continues to display the previous username hint in the smart card sign in box after a different user has used the machine with domain credentials.
• Addresses an issue that causes lsass.exe to stop working on a terminal server when you enable Remote Credential Guard. The exception code is 0xc0000374.
• Addresses an issue that prevents Microsoft Defender Advanced Threat Protection (ATP) from applying file exclusions in some cases, which leads to application compatibility issues.
• Addresses an issue that causes automatic investigations to fail in Microsoft Defender ATP.
• Improves Microsoft Defender ATP's ability to identify malicious code injection activities.
• Addresses an issue that causes the network controller (NC) host agent to incorrectly report that a virtual machine (VM) has moved.
• Addresses an issue that might cause a deadlock in the Wired AutoConfig (dot3svc) service.
• Addresses an issue that might prevent applications from running as expected on Active Directory Federation Services 2019 (AD FS 2019) clients. This occurs when applications use an iFrame during non-interactive authentication requests and receive X-Frame-Options set to DENY.
• Addresses an issue that incorrectly reports Lightweight Directory Access Protocol (LDAP) sessions as unsecure sessions in Event ID 2889. This occurs when the LDAP session is authenticated and sealed with a Simple Authentication and Security Layer (SASL) method.
• Updates the message users receive that tells them to check their phone for notifications from the Microsoft Authenticator application. This message only appears when authentication is done using the AD FS Azure Multi-Factor Authentication (MFA) adapter.
• Updates dcpromo.exe to remove the "Network access: Restrict clients allowed to make remote calls to SAM" policy on member servers when they are promoted to domain controllers. This allows clients to make Security Accounts Manager (SAM) connections to these domain controllers.
• Addresses an issue that might cause Windows 10 devices that enable Credential Guard to fail authentication requests when they use the machine certificate.
• Addresses an issue that might cause stop error 7E in nfssvr.sys on servers running the Network File System (NFS) service.
• Addresses an issue that discards the Remote Desktop Gateway Secure Sockets Layer (SSL) Bridging settings and resets them to the default.
• Addresses an issue that prevents you from updating the port number for HTTPS or the User Datagram Protocol (UDP) settings in the Remote Desktop Gateway Manager.
• Addresses an issue that occurs when a standalone Remote Desktop Session Host (RDSH) server allows multiple sessions per user. After disconnecting from a session, if you attempt to reconnect to the original session, the server creates a new session instead.
• Addresses an issue that causes the Windows Management Instrumentation (WMI) Provider Host (WmiPrvSE.exe) to leak registry key handles when querying Win32_RDCentralPublishedDeploymentSettings.
• Addresses an issue that logs a Distributed Component Object Model (DCOM) error in the System event log when the Distributed File System (DFS) Replication service is started.
• Addresses an issue that might cause the Microsoft Remote Assistance process (msra.exe) to stop working when a user is receiving assistance during a computer session. The error is 0xc0000005 or 0xc0000409.
• Addresses an issue that causes Server Message Block (SMB) to incorrectly use the original, cached non-Continuous Available handle to a file, which becomes invalid after a network error or storage failover. As a result, applications to fail with errors such as STATUS_UNEXPECTED_NETWORK_ERROR.
• Addresses an issue in SMB that causes Windows Server 2019 to stop working when using 100 GB network interface cards (NIC). This only applies to Storage Spaces Direct (S2D) and SMB Daemon (SMBD) scenarios.

Das Update ist optional und wird nur angeboten, wenn der Nutzer explizit in der Einstellungen-Seite nach Updates suchen lässt. Das Update lässt sich auch aus dem Microsoft Update Catalog herunterladen und installieren. Es ist aber darauf zu achten, dass das neueste Servicing Stack Update (SSU) installiert ist. Microsoft listet einen bekannten Fehler 0x800f0982 mit diesem Update auf.

Ähnliche Artikel:
Microsoft Office Patchday (7. Juli 2020)
Microsoft Security Update Summary (14. Juli 2020)
Patchday: Windows 10-Updates (14. Juli 2020)
Patchday: Windows 8.1/Server 2012-Updates (14. Juli 2020)
Patchday: Updates für Windows 7/Server 2008 R2 (14.7.2020)
Patchday Microsoft Office Updates (14. Juli 2020)
Windows 10 Updates KB4559004, KB4559003 (21. Juli 2020)