{"id":26569,"date":"2022-09-15T13:42:48","date_gmt":"2022-09-15T11:42:48","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=26569"},"modified":"2023-06-03T16:53:58","modified_gmt":"2023-06-03T14:53:58","slug":"windows-10-update-kb5017308-causes-issues-when-creating-copying-files-via-gpo","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/09\/15\/windows-10-update-kb5017308-causes-issues-when-creating-copying-files-via-gpo\/","title":{"rendered":"Windows 10 Update KB5017308 causes issues when creating\/copying files via GPO"},"content":{"rendered":"

\"Windows\"[German<\/a>]Sort September 2022 patchday recap. It looks like the cumulative (security) update KB5017308 released on September 13, 2022 for Windows 10 comes with collateral damage. I have received several reports from readers that following the update installation, creating or copying files via GPO or creating GPO settings files no longer works.<\/p>\n

<\/p>\n

Windows 10 Update KB5017308<\/h2>\n

\"\"Cumulative update KB5017308<\/a> is available for Windows 10 Enterprise\/Education 20H2 as well as Windows 10 version 21H1-21H2, and is supposed to fix various things. I had informed about it in the blog post Patchday: Windows 10-Updates (September 13, 2022)<\/a> and also mentioned issues with daylight saving time (see Windows 10\/ 11: Possible daylight saving time changeover issues [in Chile and worldwide]<\/a>). Microsoft is holding back on details of what the update fixes. The list of improvements can be found in the blog post Windows 10 Preview Update KB5016688 (August 26, 2022)<\/a>.<\/p>\n

GPO related file operation issues reported<\/h2>\n

Shortly after the publication of the blog post Patchday: Windows 10-Updates (September 13, 2022)<\/a>, the first users came forward reporting issues in connection with the creation of shortcut files. In the meantime, I have received further reports.<\/p>\n

Shortcuts on desktop via GPO broken<\/h3>\n

German blog reader Aike has reported issues in this German comment<\/a> and describes there the following misbehavior under Windows 10 21H2 now with current build 19044.2006, i.e. after installing update KB5017308<\/a>.<\/p>\n

After September updates, creating two shortcuts on the users desktop via GPO within the domain no longer works reliably.<\/p>\n

After a GPUPDATE \/force on the client, one of the two shortcuts created by the GPO disappears. After another manual call of GPUPDATE \/force it is available again and disappears again independently (after the default GPUPDATE interval). This game can be played on as an endless loop.<\/p>\n

Set in the policy: User Configuration\/Settings\/Windows Settings\/Links.<\/p>\n

\"Link to a web application A\" and \"Link to a web application B\" – action \"Replace\". Within each object target type: URL location: desktop – otherwise no parameters. Options common to both objects: Run in the security context of the logged in user (user policy option) & Remove item when no longer applied.<\/p>\n

It worked wonderfully for years – Now this behavior.<\/p><\/blockquote>\n

German blog reader Markus also confirms (in the same comment thread) that computer and user policies (GPOs) are no longer copying files. Windows 10 clients are affected as well as Server 2022\/2019 – here is the translated text:<\/p>\n

we have the problem too. Computer policies as well as user policies (Gpo) do not copy files anymore (Win10 Client as well as Server 2022\/2019) – unfortunately, Sven's workaround did not help in our case.<\/p>\n

Message in the application log:
\nThe computer \"\" setting item in the group policy object \"******** {97B70815-2B31-4A40-BB56-A27E6DAC6485}\" was not applied due to an error. Error Code: \"0x800703ee The volume of a file has been externally modified so that the open file is no longer valid.\" This error was suppressed…<\/p>\n

Update uninstalled – everything works again<\/p><\/blockquote>\n

More reports via mail and facebook<\/h3>\n

German blog reader Sebastian G. contacted me by mail today and pointed me to the a reddit.com thread<\/a>, which discusses problems with copying files after installing the KB501730 update. A post there states:<\/p>\n

Our patch manager accidentally pushed the update to live production instantly, yay!<\/i><\/p>\n

 <\/p>\n

Issues encountered Win10 21H2 KB5017308:<\/i><\/p>\n

gpo file copy seems to not work properly (shortcuts lose their icon and batch file is blank)<\/i><\/p>\n

can no longer deploy programs from lansweeper<\/i><\/p><\/blockquote>\n

There is also a 2nd reddit.com thread<\/a> about that issue. On Facebook, blog reader Simon A. also brought up the problem (see screenshot) to me in a closes administrator group, and pointed to a mention on Geek at Works:<\/p>\n

<\/p>\n

Windows Update KB5017308 breaks GPO preferences file creation<\/strong><\/p>\n

Anyone observing the same issue? All files created with GPO preferences in replace<\/strong> mode are having 0 kb. Doesn't matter if these are newly created links or files copied to a machine with GPO preferences.<\/p><\/blockquote>\n

Again, it is reported that uninstalling the update solves the problem. The short article links to this Microsoft Answers forum thread<\/a>, which also states that shortcut files cannot be created via GPO.<\/p>\n

Addendum:<\/strong> I got reports from German blog readers, that the issue occurs also on Windows 11, Windows Server 2016 and Windows Server 2022. Using GPO to copy files in user context fails.<\/p>\n

A possible workaround<\/h2>\n

Several users report that if copying the files via GPO is not done in the user context, it works again. German blog reader Sven wrote a workaround he was using within this German comment<\/a> (I've translated it):<\/p>\n

After some searching it was clear, we copy the config files to the users new on the clients. But these files were copied with 0 KB after the update.<\/p>\n

After unchecking that the files should be copied in the user context (user policy option) the copying via GPO worked again.<\/p><\/blockquote>\n

Also on Microsoft Answers you can find the following note from Adam Postgate in this forum post<\/a>:<\/p>\n

Yes we had this today too – try un-checking \"run in user security context\" on any gpo<\/p>\n

I assumed it was needed for %userprofile% variable to work, but it isn't<\/p><\/blockquote>\n

It's definitely worth a try – although there are user reports that it didn't work and the problems persist. Thanks to all users for the feedback – I have reported the bug to Microsoft via MS Answers<\/a> and on Twitter<\/a>. I know also, that some business users has opened a support ticket.<\/p>\n

Addendum:<\/strong> More details are covered at the article\u00a0Windows GPO bug (copy\/move) caused by Sept. 2022 update confirmed by Microsoft<\/a>. Microsoft has also confirmed the bug, as shown in this article.<\/p>\n

Similar articles:
\n<\/strong>Microsoft Security Update Summary (September 13, 2022)<\/a>
\nPatchday: Windows 10-Updates (September 13, 2022)<\/a>
\nPatchday: Windows 11\/Server 2022-Updates (September 13, 2022)<\/a>
\nWindows 7\/Server 2008R2; Windows 8.1\/Server 2012R2: Updates (September 13, 2022)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Sort September 2022 patchday recap. It looks like the cumulative (security) update KB5017308 released on September 13, 2022 for Windows 10 comes with collateral damage. I have received several reports from readers that following the update installation, creating or copying … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,580,22,2],"tags":[47,2740,69,195,194],"class_list":["post-26569","post","type-post","status-publish","format-standard","hentry","category-issue","category-security","category-update","category-windows","tag-issue","tag-patchday-9-2022","tag-security","tag-update","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/26569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=26569"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/26569\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=26569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=26569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=26569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}