Windows 10 V2004/20H2: Preview Update KB5001391 with issues

[German]Microsoft has released the update KB5001391 for Windows 10 version 2004, for version 20H2 as well as for the upcoming version 21H1 as a preview on April 28, 2021. This update is supposed to fix a number of bugs – however, for one blog reader, it causes problems with games that I had already described a few days ago for the March 29, 2021 preview update. Here is some information around this update and the problems.

I confess, I had even seen this German article about update KB5001391 at the colleagues of deskmodder. It said "Microsoft has updated KB5001391 again and fixed another bug." – just screams "ignore, what's the garbage" – because on April 22, 2021 there was already a preview update KB5001396 – but for Windows 10 version 1909 (see Windows 10 V1909: Preview Update KB5001396 (April 22, 2021)). Much of what is listed below also appears in the update description for KB5001391.

And: I can't keep track of the updates that are thrown onto the market by Microsoft as previews, insider previews or updates of updates of updates and are hyped up and down by various blogs. I also don't care if the build 19041.964, 19042.964 or 19043.964 comes on the machines – no one who is not meshugge gets into these lowlands. Even the mails from 29.4.2021 from Hans Thölen I categorized for read later in peace. Hans wrote:

Early this morning I was offered 2 updates on Windows Update. KB4023075 installed itself immediately. I have the update since 20.02.2021 already times on the PC.

KB5001391 is a cumulative update and appeared as an optional update. After clicking download and install, Servicing Stack 10.0.19041.963 was installed first. After that KB5001391 was installed. Everything ran error free and without any problems.

After German blog reader Tom also emailed me about problems with this update, I'll pick this up after all.

Update KB5001391 for Windows 10 V2004/20H2

Preview update KB5001391 of April 28, 2021 is available for Windows 10 V2004/20H2 (as well as Insider Preview of 21H1) and server counterparts. The build increases to 19041.964 (version 2004), 19042.964 (version 20H2) and 19043.964 (Insider Preview version 21H1), respectively. One of the new features is the introduction of the "News and Interests" feature in the Windows 10 Taskleist (was already going around the Internet the days, but I had deliberately not addressed in the blog).

Highlights: News and Interests and more

In the KB article, Microsoft highlights the introduction of the News and Interests feature as a particular highlight. An entry in the Windows taskbar will give users quick access to an integrated feed of dynamic content such as news, weather, sports and more that will be updated throughout the day. Users are said to be able to personalize this feed to display relevant content. The rest of the highlights:

• Updates an issue to prevent blank tiles from appearing in the Start menu after upgrading to a newer version of Windows 10. 
• Adds the ability to adjust the idle time before a headset goes to sleep in the Settings app for Windows Mixed Reality.

This can be found in a similar form in the article Windows 10 V1909: Preview Update KB5001396 (April 22, 2021)).

Improvements and fixes

Microsoft lists the following improvements and fixes in its support post for update KB5001391 – security-wise, after all, the update doesn't include fixes to close vulnerabilities.

• Fixes an issue that causes a website to not exit Microsoft Edge IE mode as expected.
• Fixes an issue that causes mandatory profiles to not be completely removed when users log off and use the Delete Cached Copies of Roaming Profiles group policy.
• Fixes an issue that causes empty tiles to appear in the Start menu with names such as "ms-resource:AppName" or "ms-resource:appDisplayName". These blank tiles represent the installed apps and are displayed for about 15 minutes after updating to a newer version of Windows 10. Installing this update prevents these blank tiles from appearing in the Start menu.
• Fixes an issue with the Microsoft Japanese Input Method Editor (IME) that prevents the custom candidate window of an app from displaying properly.
• Resolves an issue that occurs when installing inventory applications.
• Resolves an issue that includes kernel-mode rules for .NET applications in Windows Defender Application Control policies. As a result, the generated policies are significantly larger than necessary.
• Resolves an issue that causes devices to fail the device health check.
• Resolves an issue that disables S mode when you enable System Guard Secure Launch on a system that is running Windows 10 in S mode.
• Resolves an issue where the memory usage of lsass.exe increases until the system becomes unusable. This occurs when Transport Layer Security (TLS) resumes a session.
• Fixes a race condition issue between Task Scheduler and the Workstation Service. As a result, users cannot automatically join a hybrid Azure Active Directory (AAD) domain and error 0x80070490 is generated.
• Resolves an issue that causes Azure Active Directory authentication to fail after logging in on Windows virtual desktops.
• Fixes an issue that causes AAD work accounts to exit unexpectedly from certain apps such as Microsoft Teams or Microsoft Microsoft Office.
• Resolves an issue that inadvertently triggers Hybrid AAD participation when the "Register domain-joined computers as devices" group policy is set to DISABLED. For more information, see Posting configuration tasks for The Hybrid Azure AD Association.
• Fixes an issue with a partial Service Connection Point (SCP) configuration that causes dsregcmd.exe to stop working. This issue occurs due to a case-sensitive domain ID name comparison that occurs when joining a hybrid Azure Active Directory domain with Single Sign-On (SSO).
• Adds the ability to adjust the idle time before a headset goes to sleep in the Settings for Windows Mixed Reality app.
• Fixes an issue that might generate a stop error when running Docker containers with process isolation.
• Fixes an issue that causes autoenrollment and certificate retrieval to fail with the error "The parameter is incorrect".
• Resolves an issue that can cause Microsoft Defender Application Guard virtual machines to stop responding when Microsoft Defender Application Guard for Office opens a document. This issue may occur on some devices or with drivers that use GPU Hardware Accelerated Scheduling.
• Resolves an issue that prevents some media players from playing content on hybrid devices running dGPU on iGPU displays.
• Fixes an issue with race conditions that cause high CPU utilization. This causes the system to stop working and deadlocks occur.
• Fixes a problem with a deadlock in the New Technology File System (NTFS).
• Fixes a problem that causes DWM.exe to stop working in some cases.
• Improves the Windows Server Storage Migration Service by:
• Adding support for migrating NetApp -FAS arrays to Windows servers and clusters.
• Fixes several issues and improves reliability.
  For more information, see Storage Migration Service Overview.
• Fixes an issue that might prevent an application screen from working when a Remote Desktop control ActiveX embedded in an HTML page.

Only the fixes that are not already present on the machine through previous updates will be installed. Microsoft integrates the latest Service Stack Update (SSU) in the above preview update. Does the error 0x800f0823 – CBS_E_NEW_SERVICING_STACK_REQUIRED occur during the installation? Then install the latest SSU (KB4598481).

The optional update KB5001391 should be found when searching for updates, but is also available for download in the  Microsoft Update Catalog. It is not offered in WSUS, but can be imported if necessary. Means: The preview update is optional and should only be installed if someone thinks that it fixes serious problems.

In addition, Microsoft has released an update directly for the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked via GPO.

Some known issues

Microsoft lists the known issue of certificates being lost during a feature update in KB article KB5001391. Devices with Windows installations created from custom offline media or custom ISO images may have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge. This issue only occurs when custom offline media or ISO images are created by slipstreaming this update into the image without first installing the standalone Servicing Stack Update (SSU) dated March 29, 2021 or later. Devices that connect directly to Windows Update to receive updates are not affected. This includes devices that use Windows Update for Business

Additionally, Microsoft writes that a small subset of users reported lower-than-expected performance in games after installing this update. Most users affected by this issue run games in full-screen or borderless windowed mode and use two or more monitors.The problem already occurred with the preview update KB5000842 from the end of March. So the error pattern is a reoccurrence, because it was supposedly automatically corrected by Microsoft (see Windows 10: Microsoft tries to fix graphics issues in with games after April update). Doesn't seem to work out that way, though, because blog reader Tom B. sent me the following mail a few hours ago: After installing this update now yesterday, crashing problems in games.It's always a pleasure to see how Windows 10 users are graced with the same bugs over weeks and months.