September 19, 2017—KB4038774 (Preview of Monthly Rollup)

Improvements and fixes

This non-security update includes improvements and fixes that were a part of KB4038792(released September 12, 2017) and also includes these new quality improvements as a preview of the next Monthly Rollup update:

• Addressed issue where the performance counter query causes CPU usage to increase for extended periods of time. This occurs because EnumCounterObjects() queries the data for all counters when it tries to get the names of all counters.

• Addressed issue where revoking a certificate associated with a disabled user account in the CA management console fails. The error is "The user name or password is incorrect. 0x8007052e (WIN32: 1326 ERROR_LOGON_FAILURE)”.

• Addressed issue where using a smart card to log on to a Remote Desktop Server sometimes causes the server to stop responding.

• Addressed issue where LSASS deadlocks with the Server Message Block 2.0 (SMB 2.0) client redirector. All attempts to log on to a Remote Desktop Server fail.

• Updated the BitLocker.psm1 PowerShell script to not log passwords when logging is enabled.

• Cleaned up leaked validation ports associated with snapshots in VMMS.

• Updated the SPN and UPN uniqueness feature to work within the forest root tree and across other trees in the forest. The updated NTDSAI.DLL won't allow a subtree to add an SPN or a UPN as a duplicate across the entire forest.

• Addressed issue where Windows Server 2016 domain controllers (DC) may log audit events with ID 4625 and 4776. The DCs use Microsoft Windows Security information that has truncated user names and domain names for logons that come from client applications that use wldap32.dll.

• Addressed issue where DFSR replication may stop intermittently and cause backup failures.

• Addressed issue where users can't access file shares when the Windows Server 2012 R2 file server resource comes back online after it has gone offline.

• Addressed issue where PowerShell script settings defined in a Group Policy using GPMC are removed and subsequently fail to apply. This issue affects logon and logoff scripts, user scripts, and startup and shutdown scripts that are applied to computers.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

How to get this update

This is provided as an Optional update on Windows Update. For more information about how to run Windows Update, see How to get an update through Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for update 4038774.

Prerequisites

You must have the following update installed:

2919355 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014