{"id":16087,"date":"2020-09-25T11:05:41","date_gmt":"2020-09-25T09:05:41","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=16087"},"modified":"2020-09-25T11:05:41","modified_gmt":"2020-09-25T09:05:41","slug":"windows-server-2016-microsoft-besttigt-bug-im-gruppenrichtlinieneditor","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/09\/25\/windows-server-2016-microsoft-besttigt-bug-im-gruppenrichtlinieneditor\/","title":{"rendered":"Windows Server 2016: Microsoft confirms bug in Group Policy Editor"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/win102.jpg\" width=\"58\" align=\"left\" height=\"58\">[<a href=\"https:\/\/www.borncity.com\/blog\/2020\/09\/25\/windows-server-2016-microsoft-besttigt-bug-im-gruppenrichtlinieneditor\/\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]Security update KB4577015, released September 8, 2020, causes a <em>wsecedit.dll<\/em> error in GPO-MMC on Windows Server 2016, rendering the Group Policy Editor unusable.&nbsp; But there is a temporary workaround to prevent the crash and Microsoft has admitted the bug in the meantime. <\/p>\n<p><!--more--><\/p>\n<h2>The bug in GPO-MMC <\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/vg06.met.vgwort.de\/na\/8850936b555b4d13acdfc25352606c75\" width=\"1\" height=\"1\">I've addressed the bug within my blog post <a href=\"https:\/\/borncity.com\/win\/2020\/09\/14\/windows-server-2016-update-kb4577015-verursacht-gpo-mmc-wsecedit-dll-fehler\/\">Windows Server 2016: Update KB4577015 throws a GPO MMC wsecedit.dll error<\/a>. Administrators who install the security update KB4577015 from September 8, 2020 on Windows Server 2016 get a problem. The Group Policy Editor (<em>gpedit.msc<\/em>) throws a<em> wsecedit.dll<\/em> error when loading an MMC snap-in when changing security options. The error occurs when trying to traverse the following path in Group Policy:<\/p>\n<p>Computer Configuration &gt; Windows Setting &gt; Security Settings &gt; Local Policy &gt; Security Options <\/p>\n<p>A gpedit.msc error message appears stating that an MMC snap-in cannot be loaded because a <em>wsecedit.dll<\/em> error has occurred. <\/p>\n<p><img loading=\"lazy\" decoding=\"async\" title=\"gpedit.msc error\" alt=\"gpedit.msc error\" src=\"https:\/\/docs.microsoft.com\/answers\/storage\/attachments\/24073-gpmc-error.jpg\" width=\"575\" height=\"390\">  <\/p>\n<p>The hint to restart the Group Policy Editor or to ignore the error in the session does not help. The hint to restart the Group Policy Editor or to ignore the error in the session does not help. The functions for customizing the security options can no longer be used. There is now a fresh entry <a href=\"https:\/\/docs.microsoft.com\/en-us\/answers\/questions\/92345\/gpmc-error-for-34security-options34-after-updates.html\">GPMC error for \"Security Options\" after Updates 2020-09 in Windows Server 2016 Domain Controllers<\/a> in Microsoft's Q&amp;A. There several users confirmed the error description. There I had also left a comment about the issue reported from several of my blog readers.  <\/p>\n<h2>Microsoft confirms the error<\/h2>\n<p>The colleagues from Bleeping Computer <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-confirms-group-policy-editor-bug-in-windows-server-2016\/\" target=\"_blank\" rel=\"noopener noreferrer\">spottet<\/a> that Microsoft has confirmed this bug on the status page for <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-information\/status-windows-10-1607-and-windows-server-2016#1482msgdesc\" target=\"_blank\" rel=\"noopener noreferrer\">Windows 10 version 2016 and Windows Server 2016<\/a>. There it says:<\/p>\n<blockquote>\n<p><b>Unable to access Security Options section in Group Policy Management Console<\/b>  <\/p>\n<p>Accessing the Security Options data view in the Group Policy Management Editor (gpedit.msc) or Local Security Policy Editor (secpol.msc) might fail with the error \"MMC has detected an error in a snap-in. It is recommended that you shut down and restart MMC\" or \"MMC cannot initialize the snap-in\". This occurs from the MMC window, when the console tree is expanded in the following sequence: select Computer Configuration, then Policies, then Windows Settings, then Security Settings, then Local Policies, then Security Options.  <\/p>\n<p>The resulting error dialog provides options to continue using the Management Console to view other nodes normally. <strong>Note<\/strong>: This issue does not affect the application of the Security Options or any other Group Policy Objects (GPOs) to devices in your environment.  <\/p>\n<p><strong>Affected platforms:<\/strong>  <\/p>\n<ul>\n<li>Client: Windows 10 Enterprise LTSC 2016; Windows 10, version 1607\n<li>Server: Windows Server 2016<\/li>\n<\/ul>\n<p><strong>Workaround: <\/strong>To mitigate this issue, you can install Remote Administrative tools on a device running Windows 10, version 1709 or later. This will allow you to run Group Policy Management Console and edit GPOs on the affected server.  <\/p>\n<p><strong>Next steps: <\/strong>We are working on a resolution and will provide an update in an upcoming release.<\/p>\n<\/blockquote>\n<p>This is the error description I posted above. Microsoft is working on fixing the error and wants to roll out a correction with the next update release. As a workaround, it is recommended to use the Remote Administrator tools on another machine running Windows 10 version 1709 or higher. I had suggested an alternative way in form of a temporary registry intervention (see <a href=\"https:\/\/borncity.com\/win\/2020\/09\/22\/windows-server-2016-workaround-fr-gpo-mmc-wsecedit-dll-fehler\/\">Windows Server 2016: Workaround for GPO-MMC wsecedit.dll error<\/a>). The workaround works and was suggested a week ago by a user (as well as the Microsoft solution) in Microsoft's Q&amp;A in the post <a href=\"https:\/\/docs.microsoft.com\/en-us\/answers\/questions\/92345\/gpmc-error-for-34security-options34-after-updates.html\" target=\"_blank\" rel=\"noopener noreferrer\">GPMC error for \"Security Options\" after Updates 2020-09 in Windows Server 2016 Domain Controllers<\/a>.<\/p>\n<p><strong>Similar articles:<\/strong><br \/><a href=\"https:\/\/borncity.com\/win\/2020\/09\/14\/windows-server-2016-update-kb4577015-verursacht-gpo-mmc-wsecedit-dll-fehler\/\">Windows Server 2016: Update KB4577015 throws a GPO MMC wsecedit.dll error<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2020\/09\/22\/windows-server-2016-workaround-fr-gpo-mmc-wsecedit-dll-fehler\/\">Windows Server 2016: Workaround for GPO-MMC wsecedit.dll error<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Security update KB4577015, released September 8, 2020, causes a wsecedit.dll error in GPO-MMC on Windows Server 2016, rendering the Group Policy Editor unusable.&nbsp; But there is a temporary workaround to prevent the crash and Microsoft has admitted the bug in &hellip; <a href=\"https:\/\/borncity.com\/win\/2020\/09\/25\/windows-server-2016-microsoft-besttigt-bug-im-gruppenrichtlinieneditor\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,2],"tags":[2568,47,483],"class_list":["post-16087","post","type-post","status-publish","format-standard","hentry","category-issue","category-windows","tag-gpedit-msc","tag-issue","tag-windows-server-2016"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/16087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=16087"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/16087\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=16087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=16087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=16087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}