Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Important When you install this update (3000850) from Windows Update, updates 3016437, 3003057, and 3014442 are included in the installation.

The November 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 resolves issues and includes performance and reliability improvements. We recommend that you apply this update rollup as part of your regular maintenance routines. Check out the fixed issues in this update. Also notice that there is a prerequisite and a restart requirement to apply this update.

New features and improvements

This update rollup includes the following new features and improvements:

  • Refreshed language packs

  • Defense-in-depth security and Schannel hardening

  • Support for newer hardware (boot order allowance, SD card improvements, USB debugging)

  • Improved Web Services for Devices (WSD) printer support during network switches

  • Performance and reliability improvements in clustered virtual machine mission-critical environments

  • Improved manageability

  • Additional hardware support (devices that have third-party disk encryption software enabled can now be upgraded to Windows 8.1 more easily)

This November update rollup also includes all previous updates since the previous image update in April 2014. This is a convenient single step to bring Windows clients and servers up to date. Unlike our April update, the November update rollup is not required to be able to continue to receive security or other updates. However, we strongly recommend that you deploy it to Windows clients and servers to benefit from these new features and improvements as well as to prevent many known issues that have been resolved since April. This update is thoroughly tested to the same quality level as our previous service packs. However, unlike service packs, this update does not change the version number and does not deprecate or change any APIs in a manner that would require recertification.

Issues that this update resolves

This update package fixes the problems that are documented in the following Microsoft Knowledge Base articles.

For Home Users:

For IT Professionals:

Known issues in this update

  • You receive a 0x800f0922 or 0x80070005 error message when you try to install this update

    Assume that you have either of the following configurations:

    • You have a Windows Server 2012 R2 server that is running on hardware that has UEFI that has Secure Boot enabled.

    • You have a Windows Server 2012 R2-based Hyper-V host that is running, and you are running a Generation 2 virtual machine guest that uses UEFI firmware support and that has the Secure Boot option enabled. Additionally, the guest virtual machine is running Windows Server 2012 R2.

    In these configurations, update 3000850 may not be installed, and you receive a 0x800f0922 or 0x80070005 error message.

    To resolve this problem, follow these steps:

    1. Install the updated servicing stack update 2975061, and then restart the computer.

    2. Try to reinstall this update.

  • The computer may crash if you restore the system to a restore point that was created before update rollup 3000850 was installed


    • This problem applies only to Windows 8.1 editions.

    • An installation of a Windows update typically creates a restore point to which the system can be rolled back in case the installation or the updates cause any problems. In this case, the computer may experience startup failures if you try to roll back the system to a restore point that was created before you installed update rollup 3000850.

    • If the computer has Windows Recovery Environment (WRE) configured, the system automatically restores itself to the last-known working state.

    To work around this problem, use the Programs and Features item in Control Panel instead of System Restore. To do this, click View installed updates in the navigation panel in Programs and Features, select KB3000850 in the list, and then click Uninstall.

  • After you apply this update on a computer, the computer does not respond during shutdown if you have enabled Fast Startup.


    If you do not encounter the issue but have enabled Fast Startup, install hotfix 3042085 before you apply the November 2014 update.
    If you have encountered the issue, to work around this issue, restart your computer.

  • After you install security update 2992611 or update 3000850, domain users who log on to domain-joined Windows 8.1 computers experience the following issues:

    • Adding new account in Windows Live Mail 2012 fails with error 0x80090345.

    • Saving RDP passwords fails with no apparent error.

    • Opening Credential Manager fails with error 0x80090345.

    • Explorer hangs when encrypting a file. A WPA trace contains the following signature:

      Explorer taking ~664 seconds to Encrypt a file. TID #3376. 
      This is being serviced by LSASS TID #1488 .
      LSASS TID#3848 is executing the sspCryptUnprotectData call which leads into GetMasterKey.
      GetMasterKey is taking ~664 seconds (TimesinceLast). LSASS TID 3848. We spend the whole time waiting on LSASS TID 576 which is performing DCLocator pings to find a DC.
      File Encryption delay/hang is also accounted by the same code change where the backup is required.

    To work around this problem, set the value of the ProtectionPolicy registry entry to 1 to enable local backup of the MasterKey instead of requiring a RWDC in the following registry subkey:


  • Text for DNS events is not rendered in DNS Manager mmc snap-in after you install August 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2975719) or a later version of monthly updates on Windows Server 2012 R2-based DNS servers.

    To work around this problem, view DNS events by using the Event Viewer and Computer Management snap-ins.

How to obtain the update rollup

Method 1: Windows UpdateThis update is provided as an Important update from Windows Update. If you turn on automatic updates, this update is automatically installed.

  1. Open Windows Update by swiping in from the right edge of the screen (or point to the lower-right corner of the screen and move the mouse pointer up), tap or click Settings, tap or click Change PC settings, and then tap or click Update and recovery.

  2. Tap or click Check now, and then wait while Windows looks for the latest updates for your computer.

  3. If updates are found, tap or click Install updates.

  4. Select update 3000850 under Optional, and then tap or click Install.

Note You might have to restart your computer to finish installing some updates. Save and close your files and apps before you restart so that you do not lose any work or data.

For more information about Windows Update, see frequently asked questions on Windows Update.

Method 2: Microsoft Download CenterYou can also obtain the stand-alone update package through the Microsoft Download Center.

DownloadDownload the x86-based Windows 8.1 update package now.
DownloadDownload the x64-based Windows 8.1 update package now.
DownloadDownload the x64-based Windows Server 2012 R2 update package now.


  • The update for Windows RT 8.1 can be obtained only from Windows Update.

  • Update KB3016437 is applicable only to computers that have the Windows Server 2012 R2 Active Directory Domain Services (AD DS) role enabled. If you try to install KB3016437 on a Windows client or a Windows server on which AD DS role is not turned on, the update does not install. There are no other adverse effects.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Update detail information

PrerequisitesTo apply this update, you must first install update 2919355 on Windows 8.1 or Windows Server 2012 R2.

Restart informationYou must restart the computer after you apply this update.

Update replacement informationThis update does not replace any previously released update.

File informationFile detail information

For a list of the files that are provided in this update 3000850, download the file information for update 3000850.

File hash information

The following table lists the thumbprints of the certificates that are used to sign the updates (.msu). Verify the certificate thumbprint in this Microsoft Knowledge Base article against the certificate thumbprint indicated on the update that you download.

File name

SHA1 and SHA2


SHA1: 18EE162CF68D6C3E0E127C4692BF8B2D7F57B890
SHA256: B08466D5F8380A092D72BEC80897F13E6F8FEA9943ECCF85D4746BC1886A3FF2


SHA1: 94A08E535C004B860E9434FBD1E2D293583620A2
SHA256: E0E292FF13179FB1F211DB3B2DAE11A1253C046036C7FFF981DC1B2134817539


SHA1: 28CB632E527E2E78FF59432779CD3B9539BC896F
SHA256: A1DB258F260296402BDA8DD55E7CF40CF4452871FD0EDC653E21B3725D659B38


SHA1: 4187471B733E02D40EA8EF1A0F742B6AF122491A
SHA256: 49B6315FB5C93E2F2A35DAC95115F1BBBDEB828373C18F0984625B391C6A94D8


SHA1: E4E73C142DB559889D4CEE4CCF7C5CE2EC7414FD
SHA256: 53A11146CC7FADECD2BC4B8D8BFE75308F605C7A5034844C23F3EAD60652672F


SHA1: D28A8EF73C4064431057DE9E40491F0237A53851
SHA256: A39D4330CB3310C71BA33A10CA5CD51087A0D13E32B18EC8FFDA9C6000424D06


SHA1: 2E7A2FE45D6387D05B7AA5C658F4FFB42D3691A3
SHA256: 47BF8C29997BF8B1790CCB63D35AEA1012080B19C33AC2B19D38DD60390559CF


SHA1: 1D02721C1A9DF57DE2DC4A1C33CD1BAF75898C52
SHA256: 2FE2E168AB3735EC33B4CA1CC10E832A39890C89CEC844E227C0CB8DB53364F9


SHA1: 7144F7A9E3431816253ADED98773797143D2E150
SHA256: BDE0A21A582DB4F0CEACA8EC2EEB6B14B9AA11E3F7A3619B9F4E849A540BD9F4


SHA1: B7A8DCC749C1E9D6C431857E52FF6EE1D03940D4
SHA256: E30146C78EBF3F606E45AE2FF1B7C7414831D86B4FD647AAAE44809EEF82EBA5


See the terminology that Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!