March 14, 2017—KB4013429 (OS Build 14393.953)

Applies to: Windows 10, version 1607Windows Server 2016

Improvements and fixes


This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

  • Addressed known issue called out in KB3213986. Users may experience delays while running 3D rendering apps with multiple monitors.
  • Addressed issue in KB3213986 where the Cluster Service may not start automatically on the first reboot after applying the update.
  • Addressed issue where the Active Directory Administrative Center (ADAC) crashes when attempting to modify any attribute of any user account in Active Directory.
  • Addressed issue that causes Start menu and other items to disappear or malfunction when using roaming user profiles
  • Addressed issue where the Japanese Input Method Editor is leaking graphics device interface resources, which causes windows to disappear or only partially render after typing approximately 100 sentences.
  • Addressed an issue which improves the reliability of Enable-ClusterS2D PowerShell cmdlet.
  • Addressed an issue where the Virtual Machine Management Service (Vmms.exe) may crash during a live migration of virtual machines.
  • Improved the bandwidth of SSD/NVMe drives available to application workloads during S2D rebuild operations.
  • Addressed issue where Work Folders clients get duplicate files (sync conflict files) when Work Folders is configured using Group Policy.
  • Addressed an issue where Remote Desktop Servers crash with a Stop 0x27 in RxSelectAndSwitchPagingFileObject when RDP clients connect and utilize redirected drives, printers, or removable USB drives.
  • Addressed issue where adjusting the Windows Server Update Services settings using the Group Policy feature causes downloads to fail.
  • Addressed issue to hard code Microsoft's first-party provider registry key values.
  • Addressed issue that causes the System Preparation (Sysprep) tool to fail.
  • Addressed issue that causes Office 2016 profile corruption when used with User Experience Virtualization (UE-V) roaming.
  • Addressed issue that causes the Local Security Authority Subsystem Service to become unresponsive after upgrading the OS.
  • Addressed issue that causes the Local Security Authority Subsystem Service to fail when a SAP® application uses Transport Layer Security authentication.
  • Addressed issue where sequencing large registries using the Application Virtualization 5.1 Sequencer results in missing registry keys in the final package.
  • Addressed issue that fails to retain the sort order of names in a contact list after a device restarts when using the Japanese language.
  • Addressed issue that causes transactions to fail because of a memory shortage.
  • Addressed issue that allows files that are forbidden by the security zone setting to be opened in Internet Explorer.
  • Addressed issue that causes Internet Explorer 11 to fail after installing KB3175443.
  • Addressed issue that causes applications that use the VBScript engine to fail after applying KB3185319.
  • Addressed issue that occurs in Internet Explorer when the CSS float style is set to "center" in a webpage.
  • Addressed issue that occurs whenever the multipath IO attempts to log I/O statistics with no paths present.
  • Addressed issue that causes a 32-bit static route added by a VPN solution to fail, which prevents users from establishing a connection through the VPN.
  • Addressed issue that may decrease performance by up to 50% when Ethernet adapters that support receive side scaling (RSS) fail to re-enable RSS after a fault or system upgrade.
  • Addressed issue to allow wildcards in the Allowed list field for the Point and Print Restrictions Group Policy.
  • Addressed issue with multipath I/O failure that can lead to data corruption or application failures.
  • Addressed issue that can lead to system failure when removing a multipath IO ID_ENTRY.
  • Addressed issue that occurs when a Network Driver Interface Specification function NdisMFreeSharedMemory() is not called at the correct Interrupt Request Level.
  • Addressed issue to utilize the proper service vault for Azure Backup integration.
  • Addressed issue where SQL server takes 30 minutes to shut down on machines with a lot of RAM (>2TB).
  • Addressed additional issues with updated time zone information, Internet Explorer, file server and clustering, wireless networking, Map apps, mobile upgrades for IoT, display rendering, USB 2.0 safe removal, multimedia, Direct3D, Microsoft Edge, enterprise security, Windows Server Update Services, storage networking, Remote Desktop, clustering, Windows Hyper-V, and Credential Guard.
  • Security updates to Microsoft Edge, Internet Explorer, Microsoft Graphics Component, Internet Information Services, Windows SMB Server, Microsoft Windows PDF Library, Windows kernel-mode drivers, Microsoft Uniscribe, the Windows kernel, DirectShow, the Windows OS, and Windows Hyper-V.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Known issues in this update


Symptom Workaround 
Customers using Windows Server 2016 with Switch Embedded Teaming (SET) enabled might sometimes experience a deadlock or bug check when changing the physical adapter’s link speed property. This issue is addressed in KB4015438.
Windows DVD Player (and 3rd party apps that use Microsoft MPEG-2 libraries) crashes when run. This issue is addressed in KB4015438.
Some customers using IE11 and CRM 2011 may experience forms that do not display correctly. This issue is addressed in KB4016635.
For some apps in the Microsoft Store, customers may experience app update failures with 0x80070216 error code in the Microsoft Store > Downloads and Updates page. This issue is addressed in KB4016635.

How to get this update


This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

  • Update replacement information
    This update replaces the previously released update KB4010672.
  • File information
    For a list of the files that are provided in this update, download the file information for cumulative update KB4013429. If you're installing a Windows 10 update for the first time, the package size for the X86 version is 579 MB and the package size for the x64 version is 1,105 MB.