MS15-097: Description of the security update for the graphics component in Windows: September 8, 2015

• All future security and nonsecurity updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.
• If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Known issues in this security update

• After you install this security update, some programs may not run. (For example, some video games may not run.) To work around this issue, you can temporarily turn on the service for the secdrv.sys driver by running certain commands, or by editing the registry.
  
  Note When you no longer require the service to be running, we recommend that you turn off the service again.
  
  Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.
  
  To do this, type the following commands at an elevated command prompt. You should press Enter after you type each command.
  • To disable the driver's service, type the following command:

    sc config secdrv start= disabled 

  • To set the driver's service to manual, type the following command:

    sc config secdrv start= demand 

  • To enable the driver's service (and to set it to automatic), type the following command:

    sc config secdrv start=auto 

  • To manually start the driver's service, type the following command:

    sc start secdrv 

  • To manually stop the driver's service, type the following command:

    sc stop secdrv 

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\secdrv
3. Right-click Start, and then click Modify.
4. In the Value data box, do one of the following:
    
   • Type 4 to disable the driver's service, and then click OK.
   • Type 3 to set the driver's service to manual, and then click OK.
   • Type 2 to set the driver's service to automatic, and then click OK.
5. Exit Registry Editor.