UPDATE 10/3: Cumulative Update KB4524147 Windows 10 v1903 build 18362.388 - Oct. 3

September 26, 2019 - KB4517211 (OS Build 18362.387)

Applies to: Windows 10 version 1903, Windows Server version 1903

Note Follow @WindowsUpdate to find out when new content is published to the release information dashboard.

ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.

For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.

Highlights

• Updates an issue that causes vertical fonts to be larger when printing to a PostScript printer.
• Updates an issue that may cause you to disconnect from a virtual private network (VPN) on cellular networks.
• Updates an issue that may cause audio playback and recording to fail when connecting to a remote virtual machine.
• Updates an issue that may prevent older systems from upgrading to the latest operating systems because a display driver error on older versions.
• Updates an issue that may cause the screen color to turn white on laptops that have built-in, high-dynamic-range (HDR) screens.
• Updates an issue that causes audio in certain games to be quieter or different than expected.

Improvements and fixes

This non-security update includes quality improvements. Key changes include:

• Addresses an issue that causes vertical fonts to be larger when printing to a PostScript printer.
• Addresses an issue that causes printing from 32-bit applications to fail with an “Access is denied” error when you select Run as different user for the application.
• Addresses an issue that may give write access to a removable USB disk when a user switches from a privileged user to an unprivileged user.
• Addresses an issue that causes the lsass.exe service to stop working, which causes the system to shut down. This occurs when migrating Data Protection API (DPAPI) credentials using dpapimig.exe with the -domain option.
• Addresses an issue that gives a Windows Hello for Business user two certificates for authentication during certificate renewal instead of one certificate.
• Addresses an issue that prevents a web browser from connecting securely to Windows Server. This occurs when using a client authentication certificate, such as a SHA512-based certificate, and the web browser does not support a signature algorithm that matches the certificate.
• Addresses an issue that may cause authentication to fail for certificate-based authentication when the certificate authentication includes a cname as part of the pre-authentication request.
• Addresses an issue that prevents a Microsoft App-V application from opening and displays a network failure error. This issue occurs under certain circumstances, such as when a system's battery is low or there is an unexpected power failure.
• Addresses an issue that causes a query request of the Win32_LogonSession class for the StartTime to display the value of the epoch (for example, 1-1-1601 1:00:00) instead of the actual logon time. This occurs when a user who isn’t an administrator creates the query request.
• Addresses an issue that causes File Explorer to show a regular file icon for files marked with FILE_ATTRIBUTE_OFFLINE instead of the expected placeholder icon.
• Addresses an issue with intermittent virtual private network (VPN) disconnections on cellular networks.
• Addresses an issue that may cause audio playback and recording to fail when connecting to a remote virtual machine.
• Addresses an issue with MSCTF.dll that causes an application to stop working.
• Addresses an issue with the input and display of special characters that occurs when an app uses imm32.dll.
• Addresses an issue with resizing Windows Presentation Foundation (WPF) applications; they may not respond to being resized using the mouse until you release the mouse button.
• Addresses an issue that may prevent older systems from upgrading to the latest operating systems because of an error in the display driver of older versions.
• Addresses an issue that may cause the screen color to turn white on laptops that have built-in, high-dynamic-range (HDR) screens.
• Addresses an issue with converting an application from 32-bit to 64-bit architecture.
• Addresses an issue that prevents you from running the Active Directory Diagnostics Data Collector Set from the Performance Monitor for Domain Controllers. This causes the Data Collector Set name to appear empty. Running the Active Directory Diagnostics Data Collector Set returns the error, “The system cannot find the file specified.” Event ID 1023 is logged with the source as Perflib and the following messages:
  
  • “Windows cannot load the extensible counter DLL “C:\Windows\system32\ntdsperf.dll.”
  • “The specified module could not be found.”
  
  
• Addresses an issue that causes audio in certain games to be quieter or different than expected.
• Addresses an issue that prevents Microsoft App-V from handling a parameter of the CreateProcess API properly, which prevents the virtual process from opening.
• Addresses an issue in which the maximum central processing unit (CPU) performance is not enabled when you select the High Performance power plan.
• Provides a way to configure the read buffer size. This allows you to address an issue with slow upload times when uploading a file to a Universal Naming Convention (UNC) share using the Internet Information Services (IIS) Web Distributed Authoring and Versioning (WebDAV) feature.
• Addresses an issue that causes a device to stop working when opening files from a network drive that has client-side caching enabled. This issue may occur when the device has certain third-party antivirus products installed and the drive is backed by a server that is not a Microsoft Server Message Block (SMB) server. The error code is, “0x27 RDR_FILE_SYSTEM.”
• Facilitates the configuration of devices that are managed by mobile device management (MDM) settings, which are created by ADMX ingestion. You can update a previously ingested ADMX file with a newer version, and you are not required to delete the previous ADMX file. This solution applies to all applications that use ADMX ingestion.
• [ADDED 10/1] Addresses an issue that may cause a Hyper-V virtual machine and a Hyper-V host to lose network connectivity because of an inconsistency in the media access control (MAC) address learning process. As a result, the Hyper-V virtual switch drops packets.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Windows Update Improvements
Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 feature update based on device compatibility and Windows Update for Business deferral policy. This doesn't apply to long-term servicing editions.

Known issues in this update

Symptom

Workaround

Some Input Method Editor (IME) may become unresponsive or may have high CPU usage. Affected IMEs include Chinese Simplified (ChsIME.EXE) and Chinese Traditional (ChtIME.EXE) with Changjie/Quick keyboard.

Due to security related changes in this update, this issue may occur when the Touch Keyboard and Handwriting Panel Service is not configured to its default startup type of Manual. To resolve the issue, perform the following steps: Select the Start button and type “services”. Open the Services app and locate Touch Keyboard and Handwriting Panel Service. Double-click Touch Keyboard and Handwriting Panel Service and select Properties. Locate Startup type: and change it to Manual. Select OK. The TabletInputService service is now in the default configuration and IME should work as expected.

How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU. For more information, see Servicing stack updates.

If you are using Windows Update, the latest SSU (KB4520390) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.

Install this update

Release Channel	Available	Next Step
Windows Update or Microsoft Update	Yes	Go to Settings > Update & Security > Windows Update and select Check for updates.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS)	Yes	This update will automatically synchronize with WSUS if you configure Products and Classifications as follows: Product: Windows 10, version 1903 and later Classification: Updates

File information

For a list of the files that are provided in this update, download the file information for cumulative update 4517211.

Source: https://support.microsoft.com/en-us/help/4517211

See also: KB4517210 Compatibility update for installing Windows 10 v1903 Sept.26


Direct download links for KB4517211 MSU file from Microsoft Update Catalog:

Download KB4517211 MSU for Windows 10 v1903 32-bit (x86) - 155.3 MB

Download KB4517211 MSU for Windows 10 v1903 64-bit (x64) - 311.4 MB

Download KB4517211 MSU for Windows 10 v1903 ARM64 - 335.9 MB

How to Find Windows 10 Version Number

How to Find Windows 10 Build Number

Known and Resolved issues for Windows 10 version 1903

Posted By: Brink
26 Sep 2019