December 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

This update package fixes the problems that are documented in the following Microsoft Knowledge Base articles.

Fixed issues

For Home Users:

• KB 3016305 Folder's view settings continuously changes between different folder types
  (http://support.microsoft.com/kb/3016305)
• KB 3015998 OneDrive may crash or freeze when it synchronizes some folders in Windows 8.1 or Windows RT 8.1
  (http://support.microsoft.com/kb/3015998)
• KB 3011954 You cannot toggle Caps Lock in a third-party IME by double-tapping the Shift button
  (http://support.microsoft.com/kb/3011954)
• KB 3009988 "Or, try entering a passcode on it" link is in low-contrast when you add a Bluetooth keyboard
  (http://support.microsoft.com/kb/3009988)
• KB 2990372 Device does not exist error after you reinsert a USB COM port device
  (http://support.microsoft.com/kb/2990372)
• KB 3014591 File duration is incorrect in a file that is created by Media Foundation MPEG-4 file sink
  (http://support.microsoft.com/kb/3014591)
• KB 3000461 A wireless, high-quality print job to a WSD port is automatically canceled on a Windows 8.1 computer
  (http://support.microsoft.com/kb/3000461)
• KB 2914743 You receive Stop error 0xD1 in Windows Server 2012 R2 or Windows 8
  (http://support.microsoft.com/kb/2914743)
• KB 2983336 "DRIVER_POWER_STATE_FAILURE (9f)" error if you shut down the computer while you are using the built-in VPN client
  (http://support.microsoft.com/kb/2983336)

For IT Professionals:

• KB 3015408 You cannot create a new SHV setting configuration in NPS console in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3015408)
• KB 3014175 VPN devices do not establish IPsec site-to-site VPN tunnels for a cross-premises network in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3014175)
• KB 3014172 DNS server that has DNSSEC enabled does not validate signed zones in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3014172)
• KB 3014170 Local IP address cannot be registered on DNS server after DNS Client service is restarted
  (http://support.microsoft.com/kb/3014170)
• KB 3013810 Chkdsk command freezes when it is executed
  (http://support.microsoft.com/kb/3013810)
• KB 3013043 Filesystem data is corrupted on a Windows-based computer that has more than one NUMA node
  (http://support.microsoft.com/kb/3013043)
• KB 3012712 New data blocks initialize incorrectly when a differencing VHD is expanded
  (http://support.microsoft.com/kb/3012712)
• KB 3012557 CPU usage is high on the second node of a Windows Server 2012 R2-based cluster
  (http://support.microsoft.com/kb/3012557)
• KB 3011137 SSO error occurs upon your first visit to websites through ADFS 3.0 that is enabled in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3011137)
• KB 3011135 Large URI request in Web Application Proxy fails in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3011135)
• KB 3009676 Clock frequency of the SD bus decreases on a Windows 8.1-based device
  (http://support.microsoft.com/kb/3009676)
• KB 3009351 AD FS Proxy could not be configured error in WAP post-installation configuration wizard in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3009351)
• KB 3009347 You cannot upgrade licenses to Windows Server 2012 R2 because the CA configuration information is for Windows Server 2012
  (http://support.microsoft.com/kb/3009347)
• KB 3008990 Update to let you log off successfully from AD FS 3.0 server in Windows Server 2012 R2
  (http://support.microsoft.com/kb/3008990)
• KB 3008016 Smart Card service consumes high CPU resources after you disconnected from the Windows Server 2012 R2-based RDS
  (http://support.microsoft.com/kb/3008016)
• KB 3004545 You cannot access virtual machines that are hosted on Azure hosting services through a VPN connection in Windows 8.1
  (http://support.microsoft.com/kb/3004545)
• KB 3004394 Update for Windows Root Certificate Program
  (http://support.microsoft.com/kb/3004394)
• KB 3004098 Memory leak occurs when you create or delete CSV snapshots by using a VSS hardware provider
  (http://support.microsoft.com/kb/3004098)
• KB 2999324 The text for event ID 17 is changed
  (http://support.microsoft.com/kb/2999324)
• KB 2996928 You receive a "FAILED_AT_FREEZE (0x800423f2 - VSS_E_WRITERERROR_TIMEOUT)" error when backup task fails
  (http://support.microsoft.com/kb/2996928)
• KB 2982169 W3C logging service crashes in IIS 8.5 on a server in Windows 8.1 or Windows Server 2012 R2
  (http://support.microsoft.com/kb/2982169)
• KB 2982006 IIS crashes occasionally when a request is sent to a default document in Windows 8.1 or Windows Server 2012 R2
  (http://support.microsoft.com/kb/2982006)
• KB 3013488 Long wait to reset WSUS server when you import CSA files in Windows Server 2012 R2 or Windows Server 2012
  (http://support.microsoft.com/kb/3013488)
• KB 3012325 Windows APN database entries update for DIGI, Vodafone, and Telekom mobile operators
  (http://support.microsoft.com/kb/3012325)
• KB 3007054 PIN-protected printing option always shows when you print a document within a Windows Store application
  (http://support.microsoft.com/kb/3007054)
• KB 3001267 You cannot connect to a network printer by using the CNAME for the print server in a Windows Server 2012 R2 DNS environment
  (http://support.microsoft.com/kb/3001267)

Known issues

• The computer may crash after you apply update rollup 3013769 because of components in some third-party anti-virus products. When this occurs, you receive the following error message:
  
  
  SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (kl1.sys)
  
  Notes
  • This problem applies only to 32-bit Windows 8.1 editions.
  • An installation of a Windows update typically creates a restore point to which the system can be rolled back in case the installation or the updates causes any problems.

  Workaround

  To work around this problem, follow these steps:
  1. Restore your computer to an earlier state to roll back the update installation. To do this, follow these steps:
     1. Wait while your computer tries to restart. After two or more attempts, your system will start in “Automatic Repair” mode.
     2. On the Automatic Repair screen, click Advanced Options, and then click Troubleshoot.
     3. On the Troubleshoot menu, click Advanced Options.
     4. Tap or click System Restore, and then follow the instructions on the screen.
  2. Restart Windows, and then uninstall the third-party antivirus product. To do this, follow these steps:
     1. Swipe in from the right edge of the screen, and then tap Search. (If you are using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.)
     2. In the search box, type control panel, and then tap or click Control Panel.
     3. Under View by, select Large Icons, and then tap or click Programs and features.
     4. Tap or click the program, and then tap or click Uninstall.
     5. Follow the instructions on the screen.
  3. Optional: By default, Windows Defender is enabled. To verify this, follow these steps:
     1. Click Start, type defender in the search box, and then click Windows Defender in the results list.
     2. Follow the instructions on the screen.
  4. Reapply rollup KB 3013769. To do this, follow these steps:
     1. Open Windows Update by swiping in from the right edge of the screen (or point to the lower-right corner of the screen and move the mouse pointer up), tap or click Settings, tap or click Change PC settings, and then tap or click Update and recovery.
     2. Tap or click Check now, and then wait while Windows searches for the latest updates for your computer.
     3. If updates are found, tap or click Install updates.
     4. Under Optional, select update 3013769, and then tap or click Install.

Method 1: Windows Update

This update is provided as an Optional update from Windows Update.

How to perform the update by using Windows Update

1. Open Windows Update by swiping in from the right edge of the screen (or point to the lower-right corner of the screen and move the mouse pointer up), tap or click Settings, tap or click Change PC settings, and then tap or click Update and recovery.
2. Tap or click Check now, and then wait while Windows looks for the latest updates for your computer.
3. If updates are found, tap or click Install updates.
4. Select update 3000850 under Optional, and then tap or click Install.

Note You might have to restart your computer to finish installing some updates. Save and close your files and apps before you restart so that you do not lose any work or data.
For more information about Windows Update, see frequently asked questions on Windows Update.

Method 2: Microsoft Download Center

You can also obtain the stand-alone update package through the Microsoft Download Center.

Download the x86-based Windows 8.1 update package now.
Download the x64-based Windows 8.1 update package now.
Download the x64-based Windows Server 2012 R2 update package now.

Note The update for Windows RT 8.1 can be obtained only from Windows Update.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

To apply this update, you must first install update 2919355 on Windows 8.1 or Windows Server 2012 R2.

Restart information

You must restart the computer after you apply this update.

Update replacement information

This update does not replace any previously released update.

File information

File detail information

For a list of the files that are provided in this update 3013767, download the file information for update 3013769.

File hash information

The following table lists the thumbprints of the certificates that are used to sign the updates (.msu). Verify the certificate thumbprint in this Microsoft Knowledge Base article against the certificate thumbprint indicated on the update that you download.

See the terminology that Microsoft uses to describe software updates.