New cumulative updates released for older version of Windows 10

Following the 2 patches/month policy, Microsoft has yesterday released cumulative updates for older versions of Windows 10, i.e. 1709 and 1703. There is no update yet for the latest release 1803, which is expected soon. Let us discuss in detail about cumulative updates.

Windows 10 1709

Windows 10 version 1709 has got cumulative update KB4284822 that jumps the build number to 16299.522. The changes with this release are as:

• Addresses an application performance degradation issue in operating system functions. This degradation locks and frees large blocks of memory (such as VirtualLock and Heapfree) after installing KB4056892 and superseding fixes.

• Addresses performance regression in App-V that slows many actions in Windows 10.

• Adds a new MDM Policy, “DisallowCloudNotification”, for enterprises to turn off Windows Notification traffic.

• Changes the music metadata service provider used by Windows Media Player.

• Addresses an issue with the placement of text symbols in right-to-left languages.

• Addresses an issue with editing web password fields using a touch keyboard.

• Adds a Group Policy that provides the ability to hide recently added apps from the Start menu.

• Updates the Segoe UI Emoji font to use a water gun to represent a pistol emoji.

• Addresses a reliability issue with resuming from hibernation.

• Addresses an issue where SmartHeap doesn’t work with UCRT.

• Addresses an issue to ensure that Windows Defender Application Guard endpoints comply with regional policies.

• Increases the user account minimum password length in Group Policy from 14 to 20 characters.

• Addresses an issue that causes sporadic authentication issues when using Windows Authentication Manager.

• Addresses an issue where an Azure Active Directory account domain change prevents customers from logging on.

• Addresses an issue that displays unnecessary “Credential Required” and “Do you want to allow the app to access your private key?” messages. This issue occurs when running a Universal Windows Platform (UWP) application.

• Addresses an issue that causes the LSASS service to become unresponsive, and the system needs to be restarted to recover.

• Addresses an issue where client applications running in a container image don’t conform to the dynamic port range.

• Adds a new registry key that prevents access to the Internet using WWAN if a non-routable ethernet is connected. To use this new registry key, add IgnoreNonRoutableEthernet” (Dword) on HKEY_LOCAL_MACHINE\Software\Microsoft\Wcmsvc using regedit, and set it to 1.

• Adds a new registry key that allows customers to control access to the Internet using WWAN without using the default connection manager. To use this new registry key, fMinimizeConnections” (Dword) on HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\WcmSvc\Local using regedit, and set it to 0.

• Addresses an issue that prevented ISO/DVD mounts and eject from working using VM settings and Powershell because of menu transition issues in VMConnect.

• Addresses an issue where restarting the Hyper-V host with Hyper-V Replica (HVR) enabled could cause replication to stop. It may also require a manual restart to resume the replication from a suspended state. The replication state should be normal after the Hyper-V host/VMMS is restarted.

• Addresses an issue that might cause the Mitigation Options Group Policy client-side extension to fail during GPO processing. The possible errors are “Windows failed to apply the MitigationOptions settings. MitigationOptions settings might have its own log file” or “ProcessGPOList: Extension MitigationOptions returned 0xea.” This issue occurs when Mitigation Options have been defined using Group Policy, the Windows Defender Security Center, or the PowerShell Set-ProcessMitigation cmdlet.

• Addresses an issue that causes a connection failure when a Remote Desktop connection doesn’t read the bypass list for a proxy that has multiple entries.

• Addresses an issue where Windows Defender Security Center and the Firewall Pillar app stop working when opened. This is caused by a race condition that occurs if third-party antivirus software has been installed.

Support Page:

https://support.microsoft.com/en-us/help/4284822

Known issues

There are two known issues with the update:

• When Device Guard is enabled, some non-English platforms may display the following strings in English instead of the localized language:

  • “Cannot use ‘&’ or ‘.’ operators to invoke a module scope command across language boundaries.”
    “‘Script’ resource from ‘PSDesiredStateConfiguration’ module is not supported when Device Guard is enabled.
  • Please use ‘Script’ resource published by PSDscResources module from PowerShell Gallery.”

• Some non-English platforms may display the following string in English instead of the localized language: ”Reading scheduled jobs from

  file

  is not supported in this language mode.” This error appears when you try to read the scheduled jobs you’ve created and Device Guard is enabled

Download

You can use the links below to download KB4284822:

• 32 bit download
• 64 bit download

Windows 10 1703

Creators update to Windows 10 has got KB4284830 which jumps the build number to 15063.1182. The following changes are introduced with the update:

• Addresses performance regression in App-V that slows many actions in Windows 10.
• Addresses an issue with the soft keyboard’s input modes in WPF applications.
• Addresses an issue where SmartHeap doesn’t work with UCRT.
• Addresses an issue that causes sporadic authentication issues when using Windows Authentication Manager.
• Addresses an issue that displays unnecessary “Credential Required” and “Do you want to allow the app to access your private key?” messages. This issue occurs when running a Universal Windows Platform (UWP) application.
• Addresses an issue that causes the LSASS service to become unresponsive, and the system must be restarted to recover.
• Addresses an issue where client applications running in a container image don’t conform to the dynamic port range.
• Addresses an issue in MSXML 3.0 that causes the body of the request to be empty when the IXMLHTTPRequest send() method is called. This issue occurs when URL redirection causes the send() method to be invoked a second time with a different URL.
• Adds a new MDM Policy “DisallowCloudNotification” for enterprises to turn off Windows Notification traffic.

Support Page

https://support.microsoft.com/en-us/help/4284830

Download

• 32 bit download
• 64 bit download

That is all for now. If you have troubles installing, see:

Reset Windows update in Windows 10 and earlier versions of Windows