UPDATE 12/12: KB5033372 Windows 10 Cumulative Update Build 19044.3803 and 19045.3803

November 30, 2023 - KB5032278 (OS Build 19045.3758) Preview

^11/16/23
IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there won’t be a non-security preview release for the month of December 2023. There will be a monthly security release for December 2023. Normal monthly servicing for both security and non-security preview releases will resume in January 2024.

^11/17/20
For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 22H2, see its update history page.

Note Follow @WindowsUpdate to find out when new content is published to the Windows release health dashboard.

Highlights

• New! This update adds the Copilot in Windows (in preview) button to the right side of the taskbar. This only applies to devices that run Home or Pro editions (non-managed business devices). When you select it, Copilot in Windows appears at the right on your screen. It will not overlap with desktop content or block open app windows. This is available to a small audience initially and deploys more broadly in the months that follow. To learn more, see How to get Copilot in Windows (in preview) on Windows 10 and Welcome to Copilot in Windows.
  
  Tutorial: Add or Remove Copilot Button on Taskbar in Windows 10
• New! The news & interests feature on your device is now larger! This will help you use the feature more effectively and show the content you care about most on a larger scale.
• New! If you use Home or Pro consumer devices or non-managed business devices, you can get some of the newest experiences as soon as they are ready. To do so, go to Settings > Update & Security > Windows Update. Set the Get the latest updates as soon as they are available toggle to on. Note that this toggle is not turned on for devices that your IT department manages unless IT configures a new policy.
• This update addresses an issue that causes IE mode to stop responding. This occurs when you have multiple IE mode tabs open.
• This update addresses an issue that affects the cursor. Its movement lags in some screen capture scenarios.
• This update addresses an issue that affects the touch keyboard. It might not appear during the out-of-box experience (OOBE).

Improvements

Important: Use EKB KB5015684 to update to Windows 10, version 22H2.

This non-security update includes quality improvements. When you install this KB:

• New! This update adds new functionality that affects app defaults. To learn more, see A principled approach to app pinning and app defaults in Windows.
• New! This update adds Windows Update opt-in notifications to the screen when you sign in.
• This update affects the Netherlands time zone. It adds the recent man-made landmass outside of Rotterdam to the shape files.
• This update addresses an issue that affects the Trusted Sites Zone logon policy. You cannot manage it using mobile device management (MDM).
• This update addresses an issue that causes IE mode to stop responding. This occurs if you press the left arrow key when an empty text box has the focus and caret (cursor) browsing is on.
• This update addresses an issue that affects IE mode. A webpage stops working as expected when there is an open modal dialog.
• This update addresses app cursor issues. These issues occur when apps use the WebView2Standalone XAML control.
• This update addresses an issue that affects fontdrvhost.exe. It stops responding when you use Compact Font Format version 2 (CFF2) fonts.
• This update addresses an issue that affects non-admin processes. Game performance goes down, and the video stutters.
• This update addresses an issue that affects protected content. It stops cross-process windows from being created. Because of this update, you can keep using out-of-process hosting for things like WebView2 under protected, top-level windows.
• This update affects Microsoft Defender for Endpoint (MDE). It enables Conditional Access (CA) scenarios.
• This update addresses a localization issue for Great Britain English (EN-GB) locales. The error message for invalid characters in a new Windows Hello PIN is wrong.
• This update addresses a leak in volatile notifications. This might stop you from signing in to your machine.
• This update addresses an issue that affects Windows LAPS. Its PasswordExpirationProtectionEnabled policy fails to turn on the setting.

If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.

Windows 10 servicing stack update - 19045.3745

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

Known issues in this update

Symptom	Workaround
Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment. Affected environments are those with the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies set to enabled and selecting either "full encryption" or "used space only". Microsoft Intune is affected by this issue but third-party MDMs might also pe affected. Important This issue is a reporting issue only and does not affect drive encryption or the reporting of other issues on the device, including other BitLocker issues.	To mitigate this issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies to not configured. We are working on a resolution and will provide an update in an upcoming release.
Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows (in preview).	To prevent users from encountering this issue, Copilot in Windows (in preview) might not be available on devices that have been used or are currently being used in a multimonitor configuration. We are working on a resolution and will provide an update in an upcoming release.
Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen.	To access Copilot in Windows, make sure your taskbar is positioned horizontally on the top or bottom of your screen. We are working on a resolution and will provide an update in an upcoming release.

How to get this update

Before installing this update

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Prerequisite:

Based on your installation scenario, choose one of the following:

1. For offline OS image servicing:
   If your image does not have the March 22, 2022 (KB5011543) or later LCU, you must install the special standalone May 10, 2022 SSU (KB5014032) before installing this update.
2. For Windows Server Update Services (WSUS) deployment or when installing the standalone package from Microsoft Update Catalog:
   If your devices do not have the May 11, 2021 (KB5003173) or later LCU, you must install the special standalone August 10, 2021 SSU (KB5005260) before installing this update.

Install this update

Release Channel	Available	Next Step
Windows Update or Microsoft Update	Yes	Go to Settings > Update & Security > Windows Update. In the Optional updates available area, you’ll find the link to download and install the update.
Windows Update for Business	No	None. These changes will be included in the next security update to this channel.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS)	No	You can import this update into WSUS manually. See the Microsoft Update Catalog for instructions.

If you want to remove the LCU

To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.

Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.

File information

For a list of the files that are provided in this update, download the file information for cumulative update 5032278.

For a list of the files that are provided in the servicing stack update, download the file information for the SSU - version 19045.3745.

Source: https://support.microsoft.com/en-us/...b-c722f3f9dc29


UUP Dump:

32-bit ISO download:
https://uupdump.net/selectlang.php?i...c-257ad96aa3a0

64-bit ISO download:
https://uupdump.net/selectlang.php?i...4-73a58b611ae0

ARM64 ISO download:
https://uupdump.net/selectlang.php?i...5-37f439ef1acc

UUP Dump - Download Windows Insider ISO Tutorial | Windows 11 Forum

Posted By: Brink
30 Nov 2023