Important When you install this update (3000850) from Windows Update, updates 3016437, 3003057, and 3014442 are included in the installation.

The November 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 resolves issues and includes performance and reliability improvements. We recommend that you apply this update rollup as part of your regular maintenance routines. Check out the fixed issues in this update. Also notice that there is a prerequisite and a restart requirement to apply this update.

New features and improvements

This update rollup includes the following new features and improvements:

  • Refreshed language packs

  • Defense-in-depth security and Schannel hardening

  • Support for newer hardware (boot order allowance, SD card improvements, USB debugging)

  • Improved Web Services for Devices (WSD) printer support during network switches

  • Performance and reliability improvements in clustered virtual machine mission-critical environments

  • Improved manageability

  • Additional hardware support (devices that have third-party disk encryption software enabled can now be upgraded to Windows 8.1 more easily)

This November update rollup also includes all previous updates since the previous image update in April 2014. This is a convenient single step to bring Windows clients and servers up to date. Unlike our April update, the November update rollup is not required to be able to continue to receive security or other updates. However, we strongly recommend that you deploy it to Windows clients and servers to benefit from these new features and improvements as well as to prevent many known issues that have been resolved since April. This update is thoroughly tested to the same quality level as our previous service packs. However, unlike service packs, this update does not change the version number and does not deprecate or change any APIs in a manner that would require recertification.

Issues that this update resolves

This update package fixes the problems that are documented in the following Microsoft Knowledge Base articles.

For Home Users:

For IT Professionals:

Known issues in this update

  • You receive a 0x800f0922 or 0x80070005 error message when you try to install this updateSymptomsAssume that you have either of the following configurations:

    • You have a Windows Server 2012 R2 server that is running on hardware that has UEFI that has Secure Boot enabled.

    • You have a Windows Server 2012 R2-based Hyper-V host that is running, and you are running a Generation 2 virtual machine guest that uses UEFI firmware support and that has the Secure Boot option enabled. Additionally, the guest virtual machine is running Windows Server 2012 R2.

    In these configurations, update 3000850 may not be installed, and you receive a 0x800f0922 or 0x80070005 error message.SolutionTo resolve this problem, follow these steps:

    1. Install the updated servicing stack update 2975061, and then restart the computer.

    2. Try to reinstall this update.

  • The computer may crash if you restore the system to a restore point that was created before update rollup 3000850 was installedNotes

    • This problem applies only to Windows 8.1 editions.

    • An installation of a Windows update typically creates a restore point to which the system can be rolled back in case the installation or the updates cause any problems. In this case, the computer may experience startup failures if you try to roll back the system to a restore point that was created before you installed update rollup 3000850.

    • If the computer has Windows Recovery Environment (WRE) configured, the system automatically restores itself to the last-known working state.

    WorkaroundTo work around this problem, use the Programs and Features item in Control Panel instead of System Restore. To do this, click View installed updates in the navigation panel in Programs and Features, select KB3000850 in the list, and then click Uninstall.

  • After you apply this update on a computer, the computer does not respond during shutdown if you have enabled Fast Startup.Solution If you do not encounter the issue but have enabled Fast Startup, install hotfix 3042085 before you apply the November 2014 update.If you have encountered the issue, to work around this issue, restart your computer.

  • After you install security update 2992611 or update 3000850, domain users who log on to domain-joined Windows 8.1 computers experience the following issues:

    • Adding new account in Windows Live Mail 2012 fails with error 0x80090345.

    • Saving RDP passwords fails with no apparent error.

    • Opening Credential Manager fails with error 0x80090345.

    • Explorer hangs when encrypting a file. A WPA trace contains the following signature:

      Explorer taking ~664 seconds to Encrypt a file. TID #3376. This is being serviced by LSASS TID #1488 .LSASS TID#3848 is executing the sspCryptUnprotectData call which leads into GetMasterKey. GetMasterKey is taking ~664 seconds (TimesinceLast). LSASS TID 3848. We spend the whole time waiting on LSASS TID 576 which is performing DCLocator pings to find a DC.File Encryption delay/hang is also accounted by the same code change where the backup is required. 

    WorkaroundTo work around this problem, set the value of the ProtectionPolicy registry entry to 1 to enable local backup of the MasterKey instead of requiring a RWDC in the following registry subkey:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb

  • Text for DNS events is not rendered in DNS Manager mmc snap-in after you install August 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2975719) or a later version of monthly updates on Windows Server 2012 R2-based DNS servers. WorkaroundTo work around this problem, view DNS events by using the Event Viewer and Computer Management snap-ins.

How to obtain the update rollup

Method 1: Windows UpdateThis update is provided as an Important update from Windows Update. If you turn on automatic updates, this update is automatically installed.

  1. Open Windows Update by swiping in from the right edge of the screen (or point to the lower-right corner of the screen and move the mouse pointer up), tap or click Settings, tap or click Change PC settings, and then tap or click Update and recovery.

  2. Tap or click Check now, and then wait while Windows looks for the latest updates for your computer.

  3. If updates are found, tap or click Install updates.

  4. Select update 3000850 under Optional, and then tap or click Install.

Note You might have to restart your computer to finish installing some updates. Save and close your files and apps before you restart so that you do not lose any work or data.

For more information about Windows Update, see frequently asked questions on Windows Update.

Method 2: Microsoft Download CenterYou can also obtain the stand-alone update package through the Microsoft Download Center.DownloadDownload the x86-based Windows 8.1 update package now.DownloadDownload the x64-based Windows 8.1 update package now.DownloadDownload the x64-based Windows Server 2012 R2 update package now.Notes

  • The update for Windows RT 8.1 can be obtained only from Windows Update.

  • Update KB3016437 is applicable only to computers that have the Windows Server 2012 R2 Active Directory Domain Services (AD DS) role enabled. If you try to install KB3016437 on a Windows client or a Windows server on which AD DS role is not turned on, the update does not install. There are no other adverse effects.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Update detail information

PrerequisitesTo apply this update, you must first install update 2919355 on Windows 8.1 or Windows Server 2012 R2.

Restart informationYou must restart the computer after you apply this update.

Update replacement informationThis update does not replace any previously released update.

File informationFile detail informationFor a list of the files that are provided in this update 3000850, download the file information for update 3000850.File hash informationThe following table lists the thumbprints of the certificates that are used to sign the updates (.msu). Verify the certificate thumbprint in this Microsoft Knowledge Base article against the certificate thumbprint indicated on the update that you download.

File name

SHA1 and SHA2

Windows8.1-KB3000850-arm.msu

SHA1: 18EE162CF68D6C3E0E127C4692BF8B2D7F57B890SHA256: B08466D5F8380A092D72BEC80897F13E6F8FEA9943ECCF85D4746BC1886A3FF2

Windows8.1-KB3000850-x64.msu

SHA1: 94A08E535C004B860E9434FBD1E2D293583620A2SHA256: E0E292FF13179FB1F211DB3B2DAE11A1253C046036C7FFF981DC1B2134817539

Windows8.1-KB3000850-x86.msu

SHA1: 28CB632E527E2E78FF59432779CD3B9539BC896FSHA256: A1DB258F260296402BDA8DD55E7CF40CF4452871FD0EDC653E21B3725D659B38

Windows8.1-KB3016437-x64.msu

SHA1: 4187471B733E02D40EA8EF1A0F742B6AF122491ASHA256: 49B6315FB5C93E2F2A35DAC95115F1BBBDEB828373C18F0984625B391C6A94D8

Windows8.1-KB3003057-arm.msu

SHA1: E4E73C142DB559889D4CEE4CCF7C5CE2EC7414FDSHA256: 53A11146CC7FADECD2BC4B8D8BFE75308F605C7A5034844C23F3EAD60652672F

Windows8.1-KB3003057-x64.msu

SHA1: D28A8EF73C4064431057DE9E40491F0237A53851SHA256: A39D4330CB3310C71BA33A10CA5CD51087A0D13E32B18EC8FFDA9C6000424D06

Windows8.1-KB3003057-x86.msu

SHA1: 2E7A2FE45D6387D05B7AA5C658F4FFB42D3691A3SHA256: 47BF8C29997BF8B1790CCB63D35AEA1012080B19C33AC2B19D38DD60390559CF

Windows8.1-KB3014442-arm.msu

SHA1: 1D02721C1A9DF57DE2DC4A1C33CD1BAF75898C52SHA256: 2FE2E168AB3735EC33B4CA1CC10E832A39890C89CEC844E227C0CB8DB53364F9

Windows8.1-KB3014442-x64.msu

SHA1: 7144F7A9E3431816253ADED98773797143D2E150SHA256: BDE0A21A582DB4F0CEACA8EC2EEB6B14B9AA11E3F7A3619B9F4E849A540BD9F4

Windows8.1-KB3014442-x86.msu

SHA1: B7A8DCC749C1E9D6C431857E52FF6EE1D03940D4SHA256: E30146C78EBF3F606E45AE2FF1B7C7414831D86B4FD647AAAE44809EEF82EBA5

References

See the terminology that Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.