February 25, 2020—KB4537806 (OS Build 14393.3542)

Applies to: Windows 10 Version 1607Windows Server 2016


  • Updates an issue that prevents some applications from printing to network printers. 

Improvements and fixes

This non-security update includes quality improvements. Key changes include:

  • Addresses an issue that might cause Microsoft browsers to bypass proxy servers. 
  • Addresses an issue that propagates shared folder permissions incorrectly to parent folders after an administrator makes changes on the host system to shared subfolders that are not in the Users directory. 
  • Addresses an issue in which re-running PowerShell workflows might fail with compilation errors for long sessions. 
  • Improves Event Forwarding scalability to ensure thread safety and increase resources. 
  • Addresses an issue that generates an “unknown username or bad password” error when attempting to sign in. This occurs in an environment that has a Windows Server 2003 domain controller (DC) and a Windows Server 2016 or later DC. 
  • Addresses an issue that causes Transport Layer Security (TLS) sessions to fail with the error, "The request was aborted: Could not create SSL/TLS secure Channel." 
  • Addresses an issue that prevents some applications from printing to network printers. 
  • Addresses an issue that prevents the Network Policy Server (NPS) accounting feature from functioning. This occurs when NPS is configured to use SQL for accounting with the new OLE (compound document) database driver (MSOLEDBSQL.dll) after switching to TLS 1.2. 
  • Addresses an issue that causes Security Assertion Markup Language (SAML) errors and loss of access to third-party apps for users who do not have multi-factor authentication (MFA) enabled. 
  • Addresses an issue that intermittently generates Online Certificate Status Protocol (OSCP) Responder audit events (5125) to indicate that a request was submitted to the OCSP Responder Service. However, there is no reference to the serial number or the domain name (DN) of the issuer of the request.
  • Addresses an issue with the spell checker in RemoteApp. This issue prevents the spell checker from using the locale language the user selects when there is a mismatch between the locale setting and the keyboard layout of the local or client machine. For example, the issue occurs if using a Dutch locale language with the United States-International keyboard layout; the spell checker incorrectly uses the English language instead of the locale language (Dutch) configured in the OS.
  • Addresses an issue with certificate validation that causes Internet Explorer mode in Microsoft Edge to fail.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Known issues in this update

Symptom Workaround
After installing KB4467684, the cluster service may fail to start with the error “2245 (NERR_PasswordTooShort)” if the group policy “Minimum Password Length” is configured with greater than 14 characters.

Set the domain default "Minimum Password Length" policy to less than or equal to 14 characters.

Microsoft is working on a resolution and will provide an update in an upcoming release.

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

After investigation, we have found that this issue does not affect this version of Windows.

How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

If you are using Windows Update, the latest SSU (KB4520724) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog

Install this update

Release Channel Available Next Step
Windows Update or Microsoft Update Yes

Go to Settings > Update & Security > Windows Update and select Check for updates.

Microsoft Update Catalog Yes To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS) No

You can import this update into WSUS manually. See the Microsoft Update Catalog for instructions.


File information

For a list of the files that are provided in this update, download the file information for cumulative update 4537806