Windows 10 Updates zum 15.10.2019

[English]Microsoft hat zum 15. Oktober 2019 mehrere nicht sicherheitsrelevante Updates für diverse ältere Windows 10 Versionen freigegeben. Hier ein Überblick über diese Updates.

Die Informationen zu den einzelnen Windows 10 Sicherheitsupdates finden sich in der Windows 10 Update-History-Seite. Zu beachten ist, dass der Support für ältere Windows 10 Versionen ausgelaufen ist. Windows 10 Home und Windows 10 Pro erhalten dann keine Update mehr. Die Update-Installation setzt ein vorhandenes aktuelles Servicing Stack Updates (SSUs) voraus. Microsoft veröffentlicht inzwischen eine Übersicht aktueller Servicing Stack Updates (SSUs) unter ADV990001.

Die Updates der 3. Woche sind alle optional. Bei optionalen Updates muss eine Update-Suche angestoßen werden, damit diese in Windows Update auch gefunden werden. Gehen Sie zu Einstellungen > Update & Sicherheit > Windows Update und wählen Sie Nach Updates suchen.

Update KB4520062 für Windows 10 V1809

Das optionale kumulative Update KB4520062 für Windows 10 V1809 und Windows Server 2019 hebt die Build auf 17763.8832 an. Das Update beinhaltet Qualitätsverbesserungen, aber keine neuen Betriebssystemfunktionen. Hier die Liste der Verbesserungen, von Microsoft als Highlights bezeichnet:

• Prevents blank tiles from appearing in the Start menu when you upgrade to Windows 10, version 1809 from any previous version of Windows 10.  However, if you have already upgraded to Windows 10, version 1809, installing this update will not remove existing blank tiles.
• Updates an issue that causes the power consumption for a device in Connected Standby mode to be high.
• Updates an issue that might display a black screen at startup during the first sign in after installing an update.
• Updates an issue with Bluetooth that occurs when using certain audio profiles for extended periods.
• Updates an issue that prevents users from opening the print dialog in Internet Explorer to print a webpage.
• Updates an issue that causes the Settings app to stop working when you change a Theme.
• Updates an issue that might prevent a scroll bar from being selected in Internet Explorer.

Hinzukommen folgende Fixes und Verbesserungen an der Windows-Version:

• Prevents the appearance of blank tiles in the Start menu when you upgrade to Windows 10, version 1809 from any previous version of Windows 10. These blank tiles have names such as "ms-resource:AppName" or "ms-resource:appDisplayName". However, if you have already upgraded to Windows 10, version 1809, installing this update will not remove existing blank tiles.
• Addresses an issue that causes the power consumption for a device in Connected Standby mode to be high.
• Addresses an issue that prevents users from reconnecting or signing in to Windows Virtual Desktops because of orphaned database handles from a previous user session.
• Updates time zone information for Norfolk Island, Australia.
• Updates time zone information for the Fiji Islands.
• Addresses an issue that fails to index Microsoft Outlook items properly, which causes incomplete results in the search query on Windows Virtual Desktops.
• Addresses an issue that causes Windows Machine Learning (WinML) to throw an unhandled exception when a graphics driver times out.
• Addresses an issue that might prevent a scroll bar from being selected when an ActiveX control implements the CScrollView class. This occurs if you move the Internet Explorer window, which then moves the scroll bar to the left.
• Improves an access control list (ACL) check for Known Folders to prevent a black screen that appears the first time a user signs in after installing a feature or quality update.
• Addresses an issue that causes Microsoft SharePoint file names to appear incorrectly in the Quick access and Recent items folders.
• Addresses an issue with Bluetooth that occurs when using certain audio profiles for extended periods.
• Addresses an issue that causes a query request of the Win32_LogonSession class for the StartTime to display the value of the epoch (for example, 1-1-1601 1:00:00) instead of the actual logon time.
• Addresses an issue with diagnostic data processing when a device has the Diagnostic data setting enabled and set to Basic.
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses an issue that prevents netdom.exe from displaying the new ticket-granting ticket (TGT) delegation bit for the display or query mode.
• Addresses an issue in which Microsoft AppLocker might prevent an application from running or log a false positive error instead of running the application.
• Addresses an issue that causes the Windows Defender Application Control (WDAC) policy to become too restrictive when you enable the WDAC Group Policy setting for Script Enforcement or Constrained Language Mode.
• Addresses an issue that fails to include the full file hash as part of the Event Log entry during auditing events for WDAC.
• Addresses an issue that may cause high CPU usage when many windows are open and Background Application Manager runs a periodic background scan. Additionally, the desktop may become unresponsive. To turn off this scan, set the following registry key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\BamThrottling

Name: DisableWindowHinting
Type: REG_DWORD
Value: 1

• Addresses an issue that causes applications that utilize change notifications on named pipes to have a kernel mode memory leak of input and output (I/O) Request Packet (IRP) objects.
• Addresses an issue that prevents users from opening the print dialog in Internet Explorer to print a webpage.
• Adds support to allow removable drives and assigned access restrictions.
• Addresses an issue that causes printing from 32-bit applications to fail with an "Access is denied" error when you select Run as different user for the application.
• Addresses an issue that might cause error 0x1E, 0xA, or 0x50 to occur during a block cloning operation on an Resilient File System (ReFS) volume because of a race condition.
• Addresses an Offline Files Shell graphical user interface (GUI) issue about online and offline indicators.
• Addresses an issue that causes the Settings app to stop working when you change a Theme.
• Addresses a reliability issue in Windows Server 2019 Hyper-V Host Clusters that are managed using System Center Virtual Machine Manager (SCVMM).
• Addresses an issue with Lightweight Directory Access Protocol (LDAP) queries that have a "memberof" expression in the filter. The queries fail with the error, "000020E6: SvcErr: DSID-0314072D, problem 5012 (DIR_ERROR), data 8996".
• Addresses an issue that causes all Transmission Control Protocol (TCP) dynamic ports to be consumed. As a result, network communications will fail for any protocol or operation using dynamic ports.
• Addresses an issue with applications and scripts that call the NetQueryDisplayInformation API or the WinNT provider equivalent. They may fail to return results after the first page of data, often 50 or 100 entries. When requesting additional pages, you may receive the error, "1359: an internal error occurred."
• Addresses an issue that prevents Computer objects from being added to local groups using the Group Policy Preference "Local Users and Groups". The Group Policy Editor returns the error message, "The object selected does not match the type of destination source. Select again."
• Addresses an issue with a race condition between the volume mount process (within fileinfo.sys) and the deregistration of filter notifications that causes the operating system to stop working on certain virtual machines. The error code is "0x7E."
• Addresses an issue in which an Active Directory Federation Services (AD FS) certificate is renewed and published by default each year. However, the client does not use them, which results in an authentication error.
• Addresses an issue in which files that are stored in a Cluster Shared Volume (CSV) with an alternate data stream are still present after you try to delete them. You may also receive an "access is denied" message on the next try to access or delete the files.
• Addresses an issue that may cause error 0x50 to occur when a backup operation is being performed.

Wenn ich die Liste der Fixes so betrachte, frage ich mich, ob da überhaupt etwas an Windows 10 funktioniert?

Zudem hat Microsoft ein Update direkt für den Windows Update Client veröffentlicht, um dessen Zuverlässigkeit zu verbessern. Das wird außerhalb von Windows Update ausgerollt, wenn die Maschine kompatibel und keine LTSC-Variante ist und Updates nicht per GPO blockiert wurden.

Dieses optionale Update wird nicht automatisch von Windows Update heruntergeladen und installiert – sondern nur, wenn man danach suchen lässt. Dieses Update ist auch im Microsoft Update Catalog, aber nicht per WSUS, erhältlich. Microsoft empfiehlt dringend, dass Sie das neueste Service Stack Update (SSU) für Ihr Betriebssystem installieren, bevor Sie das neueste kumulative Update (LCU) installieren. Für das Update gibt Microsoft im KB-Artikel eine Reihe bekannter Probleme an.

Update KB4519978 für Windows 10 Version 1803

Für Windows 10 Version 1803 steht das optionale kumulative Update KB4519978 zur Verfügung. Dieses hebt die OS-Build auf 17134.1099 und beinhaltet Qualitätsverbesserungen aber keine neuen Betriebssystemfunktionen. Hier die Liste der Verbesserungen, von Microsoft als Highlights bezeichnet:

• Updates an issue that might display a black screen at startup during the first sign in after installing an update.
• Updates an issue with Bluetooth when using certain audio profiles for extended periods.
• Updates an issue that causes a system to stop working during the Windows upgrade process.
• Updates an issue that may prevent a scroll bar from being selected in Internet Explorer.

Hinzu kommen folgende Fixes und Verbesserungen an der Windows-Version:

• Addresses an issue that causes a device to repeatedly go into the Windows Out Of Box Experience (OOBE) restart loop in certain situations.
• Updates time zone information for Norfolk Island, Australia.
• Updates time zone information for the Fiji Islands.
• Addresses an issue that may prevent a scroll bar from being selected when an ActiveX control implements the CScrollView class. This occurs if you move the Internet Explorer window, which then moves the scroll bar to the left.
• Addresses an issue with MSCTF.dll that causes an application to stop working.
• Improves an access control list (ACL) check for Known Folders to prevent a black screen that appears the first time a user signs in after installing a feature or quality update.
• Addresses an issue with Bluetooth when using certain audio profiles for extended periods.
• Addresses an issue that fails to include the full file hash as part of the Event Log entry during auditing events for Windows Defender Application Control (WDAC).
• Addresses an issue in which Microsoft AppLocker may prevent an application from running or log a false positive error instead of running the application.
• Addresses an issue that causes a system to stop working during the Windows upgrade process. The Stop error "SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)" appears in the Transmission Control Protocol/Internet Protocol (TCPIP).
• Addresses an issue that causes the WDAC policy to become too restrictive when you enable the WDAC Group Policy setting for Script Enforcement or Constrained Language Mode.
• Addresses an issue that prevents netdom.exe from displaying the new ticket-granting ticket (TGT) delegation bit for the display or query mode.
• Addresses an issue that may cause high CPU usage when many windows are open and Background Application Manager runs a periodic background scan. Additionally, the desktop may become unresponsive. To turn off this scan, set the following registry key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\BamThrottling
Name: DisableWindowHinting
Type: REG_DWORD
Value: 1

• Addresses an issue that causes printing from 32-bit applications to fail with an "Access is denied" error when you select Run as different user for the application.
• Addresses an issue that sometimes causes the Resilient File System (ReFS) to stop working.
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses an issue with a race condition between the volume mount process (within fileinfo.sys) and the deregistration of filter notifications that causes the operating system to stop working on certain virtual machines. The error code is "0x7E."

Dieses optionale Update wird nicht automatisch von Windows Update heruntergeladen und installiert – sondern nur, wenn man danach suchen lässt. Das Update ist auch im Microsoft Update Catalog erhältlich. Microsoft empfiehlt dringend, dass Sie das neueste Service Stack Update (SSU) für Ihr Betriebssystem installieren, bevor Sie das neueste kumulative Update (LCU) installieren. Microsoft führt gleich mehrere bekannte Probleme auf, die das Update verursacht. Details finden sich im KB-Artikel.

Updates für Windows 10 Version 1507 bis 1709

Für Windows 10 RTM bis Version 1709 stehen verschiedene optionale Updates für die LTSC-Versionen und ggf. die Enterprise-Versionen zur Verfügung. Hier eine Kurzübersicht, welche Updates konkret bereitgestellt werden.

• Windows 10 Version 1709: Update KB4520006 steht nur noch für Enterprise und Education bereit. Das Update hebt die OS-Build auf 16299.1481. Es werden die im KB-Artikel erwähnten Fixes ausgerollt. Dieses Update wird bei einer Suche von Windows Update heruntergeladen und installiert, steht aber auch im Microsoft Update Catalog als Download zur Verfügung. Vor der manuellen Installation muss das aktuelle Servicing Stack Update (SSU) installiert werden. Details, auch zu bekannten Probleme sind im KB-Artikel zu finden.
• Windows 10 Version 1703: Update KB4520010 steht nur noch für Enterprise und Education bereit. Das Update hebt die OS-Build auf 15063.2108. Es sind die im KB-Artikel erwähnten Fixes enthalten. Dieses Update wird bei einer Suche von Windows Update heruntergeladen und installiert, steht aber auch im Microsoft Update Catalog als Download zur Verfügung. Vor der manuellen Installation muss das aktuelle Servicing Stack Update (SSU) installiert werden. Details, auch zu bekannten Probleme sind im KB-Artikel zu finden.
• Windows 10 Version 1607: Update KB4519979 steht nur noch für Enterprise und Education sowie Windows Server 2016 bereit. Das Update hebt die OS-Build auf 14393.3300. Es sind die im KB-Artikel erwähnten Fixes enthalten. Dieses Update wird bei einer Suche von Windows Update heruntergeladen und installiert, steht aber auch im Microsoft Update Catalog als Download zur Verfügung. Vor der manuellen Installation muss das aktuelle Servicing Stack Update (SSU) installiert werden. Details, auch zu bekannten Probleme sind im KB-Artikel zu finden.

Für ältere Windows 10 Versionen sowie für die Version 1903 gab es keine Updates. Details zu obigen Updates sind im Zweifelsfall den jeweiligen Microsoft KB-Artikeln zu entnehmen.

Ähnliche Artikel:
Microsoft Office Patchday (1. Oktober 2019)
Microsoft Security Update Summary (8. Oktober 2019)
Patchday: Updates für Windows 7/8.1/Server (8. Okt. 2019)
Patchday Windows 10-Updates (8. Oktober 2019)
Patchday Microsoft Office Updates (8. Oktober 2019)
Windows 7/8.1 Preview Rollup Updates (15. Oktober 2019)
Windows 10 Updates zum 15.10.2019