Second Batch of February 2020 Cumulative Updates Out for Windows 10 Versions 1903 and 1909

[erek]

Cool! Here's the output from my Windows Check Updates dialog!

"Here's the complete changelog of Windows 10 1909 and 1903 cumulative update (KB4535996):

• Addresses an issue that prevents the speech platform application from opening for several minutes in a high noise environment.
• Addresses an issue that reduces the image quality in the Windows Mixed Reality (WMR) home environment.
• Improves Urlmon resiliency when receiving incorrect Content-Length for a PeerDist response.
• Addresses an issue with rendering PeerDist-encoded content in Internet Explorer and Microsoft Edge.
• Addresses an issue that might prevent ActiveX content from loading.
• Addresses an issue that might cause Microsoft browsers to bypass proxy servers.
• Improves the battery performance during Modern Standby mode.
• Addresses an issue that prevents Centennial apps from opening in certain scenarios.
• Addresses an issue that prevents the OpenFile() function in the KernelBase.dll library from handling file paths longer than 128 characters.
• Addresses an issue that prevents a user from upgrading or uninstalling some Universal Windows Platforms (UWP) apps in certain scenarios.
• Addresses an issue that causes Microsoft Narrator to stop working when a user session is longer than 30 minutes.
• Addresses an issue that adds an unwanted keyboard layout as the default after an upgrade or migration even if you have already removed it.
• Addresses an issue with editing the properties of .mov files.
• Addresses an issue that causes usbvideo.sys to stop working intermittently when a device resumes from Suspend or Sleep after using the Camera app or Windows Hello.
• Addresses an issue that might prevent the "Allow uninstallation of language features when a language is uninstalled" Group Policy from taking effect.
• Addresses an issue that prevents the Windows Search box from rendering fully in the space allotted for it.
• Addresses an issue that prevents the Input Method Editor (IME) user dictionary from being used when leveraging folder redirection with user profiles.
• Addresses an issue that might prevent the Windows Search box from showing results.
• Addresses an issue that causes the installation process to stop responding when installing Windows on a VMware guest machine that has a USB 3.0 hub attached.
• Addresses an issue with Windows Autopilot self-deploying mode and white glove deployment.
• Addresses an issue in which re-running PowerShell workflows might fail with compilation errors for long sessions.
• Improves Event Forwarding scalability to ensure thread safety and increase resources.
• Addresses an issue in the Windows activation troubleshooter that prevents users from reactivating their copy of Windows using the product key stored in their Managed Service Account (MSA).
• Addresses an issue that prevents some applications, which are deployed using the Microsoft Installer (MSI) from being installed using the mobile device management (MDM) platform. This issue occurs because of a missing property in the MSI metadata.
• Addresses an issue that generates an “unknown username or bad password” error when attempting to sign in. This occurs in an environment that has a Windows Server 2003 domain controller (DC) and a Windows Server 2016 or later DC.
• Addresses an issue with sign in scripts that fail to run when a user signs in or signs out.
• Addresses an issue that continues to collect IsTouchCapable and GetSystemSku data when they should no longer be collected.
• Addresses an issue that causes some Azure Active Directory (AAD) joined systems, which were upgraded to Windows 10, version 1903, to erroneously rejoin the AAD domain.
• Addresses an issue in which the WinHTTP AutoProxy service does not comply with the value set for the maximum Time To Live (TTL) on the Proxy Auto-Configuration (PAC) file. This prevents the cached file from updating dynamically.
• Addresses an issue that causes the wrong printer name to be selected when you click the Print button in the SQL reporting service.
• Addresses an issue that prevents the printer settings user interface from displaying properly.
• Addresses an issue in the Network Profile Service that might cause a computer to stop responding.
• Addresses an issue that prevents some applications from printing to network printers.
• Addresses an issue that might cause a printer to be a hidden device in Device Manager after a restart.
• Addresses an issue that causes Host Networking Service (HNS) PortMapping policies to leak when the container host is reinstated after a restart.
• Addresses a stop error (0x000000CA) that occurs when you mount a Resilient File System (ReFS) volume without a physical device. This might occur in some backup solution scenarios.
• Addresses an Open Database Connectivity (ODBC) issue that causes an infinite loop in the retry logic when there are several lost connections in the connection pool.
• Addresses an issue that causes the Local Security Authority Subsystem Service (LSASS) to stop working and triggers a restart of the system. This issue occurs when invalid restart data is sent with a non-critical paged search control.
• Addresses an issue that intermittently generates Online Certificate Status Protocol (OSCP) Responder audit event 5125 to indicate that a request was submitted to the OCSP Responder Service. However, there is no reference to the serial number or the domain name (DN) of the issuer of the request.
• Addresses an issue that causes queries against large keys on Ntds.dit to fail with the error, “MAPI_E_NOT_ENOUGH_RESOURCES”. This issue might cause users to see limited meeting room availability because the Exchange Messaging Application Programming Interface (MAPI) cannot allocate additional memory for the meeting requests.
• Addresses an issue that corrupts a log file when a storage volume is full and data is still being written to the Extensible Storage Engine Technology (ESENT) database.
• Addresses an issue that causes _NFS4SRV_FILE_CACHE_ENTRY and DirectoryCacheLock to stop responding and leads to error 9E.
• Addresses an issue that prevents Server Message Block (SMB) Multichannel from working within a cluster network that has IPv6 Local-Link addresses.
• Addresses an issue that might cause Storage Migration Service inventory operations on a Windows Server 2003 source computer to fail in clustered environments.
• Addresses a timing issue that may cause stop error 0x27 in mrxsmb20!Smb2InvalidateFileInfoCacheEntry. This issue occurs when you rename or delete files that have certain extensions and are stored on a network share that has client-side caching enabled.
• Addresses an issue in the Storage Migration Service that causes the Cutover stage to stop working during migration if an administrator assigns a static IP address to the source adapter.
• Addresses an issue in which canceling a deduplication (dedup) job to rebuild hotspots prevents other deduplicationPowerShell commands from responding.
• Addresses an issue that might cause Remote Desktop sessions to disconnect because a leak in system memory occurs when the client window is minimized or maximized.
• Addresses an issue that makes the Windows Defender Application Control’s Code Integrity-based events unreadable.
• Addresses an issue with certificate validation that causes Internet Explorer mode on Microsoft Edge to fail."

https://wccftech.com/windows-10-kb4535996-is-now-out-for-versions-1903-and-1909/

 

[clockdogg]

• Addresses an issue that prevents the printer settings user interface from displaying properly.
• Addresses an issue that prevents some applications from printing to network printers.
• Addresses an issue that might cause a printer to be a hidden device in Device Manager after a restart.

Can feel a little smug about making my workflow 'paperless'. Next to POP/SMTP, printing is still on the bleeding edge of OS development.

Also... MS doesn't promise fixes, they only address issues.

Can still be effective, if the buggy system is addressed in very strong and colorful language.

 

[pendragon1]

Can feel a little smug about making my workflow 'paperless'. Next to POP/SMTP, printing is still on the bleeding edge of OS development.

Also... MS doesn't promise fixes, they only address issues.

Can still be effective, if the buggy system is addressed in very strong and colorful language.

i wonder if any of that will stop network printers from being stuck "offline" for no reason...

 

[Lakados]

It conveniently leaves out the fact it kills LDAP integration running unencrypted on port 389, and requires you to change over to an encrypted connection on port 636

 

[Lakados]

i wonder if any of that will stop network printers from being stuck "offline" for no reason...

I can only hope it has been causing me no end of troubles in 2 of my buildings. Granted those two buildings print too much and I have had to give them a lot of shit over the past 3 months for their paper usage, so any time they can't print is a time Accounting and I are happy.

 

[pendragon1]

I can only hope it has been causing me no end of troubles in 2 of my buildings. Granted those two buildings print too much and I have had to give them a lot of shit over the past 3 months for their paper usage, so any time they can't print is a time Accounting and I are happy.

i hear ya on that! one of my schools is printing waaaay too much, enough the principal is wanting to reel it in. one lady is pushing 20K copies since sept.

 

[Lakados]

i hear ya on that! one of my schools is printing waaaay too much, enough the principal is wanting to reel it in. one lady is pushing 20K copies since sept.

Those 2 buildings are up a whole 80% on their paper usage from this time last year on the standard letter alone, forget about coloured paper or legal size. Overall they are both damned close to a 100% increase overall from this time last year.

 

[pendragon1]

Those 2 buildings are up a whole 80% on their paper usage from this time last year on the standard letter alone, forget about coloured paper or legal size. Overall they are both damned close to a 100% increase overall from this time last year.

yipes! time to clamp down on that.

 

[Wat]

Paper is recyclable and renewable. If people are going to waste something, better paper than anything else.

 

[Red Falcon]

i hear ya on that! one of my schools is printing waaaay too much, enough the principal is wanting to reel it in. one lady is pushing 20K copies since sept.

Those 2 buildings are up a whole 80% on their paper usage from this time last year on the standard letter alone, forget about coloured paper or legal size. Overall they are both damned close to a 100% increase overall from this time last year.

haha, this is why I laugh when people tell me that no one prints anything any more because of tablets and smartphones.
The "paperless workplace" is a bigger fantasy than The Lord of the Rings.

 

[blandead]

It conveniently leaves out the fact it kills LDAP integration running unencrypted on port 389, and requires you to change over to an encrypted connection on port 636

You can still make an encrypted connection over 389, the change is two GPO settings that's been available for over 2 years so there's nothing new besides a registry change. You can just change it back and let your unencrypted passwords sync.

 

[Lakados]

You can still make an encrypted connection over 389, the change is two GPO settings that's been available for over 2 years so there's nothing new besides a registry change. You can just change it back and let your unencrypted passwords sync.

Our accounting software doesn’t support that change, so we are in the process of having to make a few changes changing software isn’t an option so getting it modified to support the new standard on 636.

 

[Meeho]

"Addresses an issue"

What kind of doublespeak is that?

 

[clockdogg]

Paper is recyclable and renewable. If people are going to waste something, better paper than anything else.

Better than anything else? Like time? The one precious resource that is non-renewable: time wasted with network printer issues.

 

[Wat]

Better than anything else? Like time? The one precious resource that is non-renewable: time wasted with network printer issues.

They are wasting your time, not thier own. You value your time more than theirs, so why shouldn't they do the same?
Empathy is a 4 letter word

 

[Shoganai]

"Addresses an issue"

What kind of doublespeak is that?

Not sure what you mean. Looks like standard English to me.

 

[Meeho]

Not sure what you mean. Looks like standard English to me.

Doesn't fix the issue? Resolve it? I can address an issue by merely acknowledging it exists.

 

[cjcox]

Doesn't fix the issue? Resolve it? I can address an issue by merely acknowledging it exists.

Sometimes words are used to avoid legal liabilities.

 

[Lakados]

"Addresses an issue"

What kind of doublespeak is that?

Usually it means it provides a work around or slightly improves the situation but doesn't outright provide a proper permanent fix.

 

[cjcox]

Rumored developer notes on the fixes.

* Addresses an issue that prevents the speech platform application from opening for several minutes in a high noise environment.
What?! Can't hear you. Stupid speech stuff worthless when Bob's kids are yelling.

* Addresses an issue that reduces the image quality in the Windows Mixed Reality (WMR) home environment.
Is that Billy or Sally? I can't see the difference anymore in WMR.

* Improves Urlmon resiliency when receiving incorrect Content-Length for a PeerDist response.
You can really mess things up by setting Content-Length to a pad value. Hack away.

* Addresses an issue with rendering PeerDist-encoded content in Internet Explorer and Microsoft Edge.
Speaking of messing things up, rendering of peer content is a hack away from a major explosing.

* Addresses an issue that might prevent ActiveX content from loading.
Just when we thought we could sneak in a change to keep ActiveX from loading, Bob says we have to put it back in.

* Addresses an issue that might cause Microsoft browsers to bypass proxy servers.
Proxies are overrated. Easy to bypass.

* Improves the battery performance during Modern Standby mode.
Took out a busy loop. We're going to call it a battery perf enhancement.

* Addresses an issue that prevents Centennial apps from opening in certain scenarios.
After fixing a lot of things, looks like Centennial apps are working again, we don't know why.

* Addresses an issue that prevents the OpenFile() function in the KernelBase.dll library from handling file paths longer than 128 characters.
This one has been there awhile. Too much ancient code stolen from ancient places. Can't handle long paths > 128.

* Addresses an issue that prevents a user from upgrading or uninstalling some Universal Windows Platforms (UWP) apps in certain scenarios.
UWP seems to be performing better with random changes. Let's close this and see if shows up again.

* Addresses an issue that causes Microsoft Narrator to stop working when a user session is longer than 30 minutes.
Left the testing/debugging cap of 30 minutes per session on Narrator. Oops!

* Addresses an issue that adds an unwanted keyboard layout as the default after an upgrade or migration even if you have already removed it.
Defaults come back even after removal.

* Addresses an issue with editing the properties of .mov files.
Editing certain movs opens ports randomly on the host with full admin authority.

* Addresses an issue that causes usbvideo.sys to stop working intermittently when a device resumes from Suspend or Sleep after using the Camera app or Windows Hello.
Add a heavy polling routine to try to keep devices from sleeping properly.

* Addresses an issue that might prevent the "Allow uninstallation of language features when a language is uninstalled" Group Policy from taking effect.
Bob says the language stuff is borked. He submitted a fix I don't really understand.

* Addresses an issue that prevents the Windows Search box from rendering fully in the space allotted for it.
Chopped some bits off the window size. Got to watch those pointers vs integers.

* Addresses an issue that prevents the Input Method Editor (IME) user dictionary from being used when leveraging folder redirection with user profiles.
IME doesn't work.

* Addresses an issue that might prevent the Windows Search box from showing results.
Random other patches seems to have fixed the mysterious Search problem. Crossing fingers.

* Addresses an issue that causes the installation process to stop responding when installing Windows on a VMware guest machine that has a USB 3.0 hub attached.
Inserted a random sleep to see if this helps the VMware USB problem. Not sure what's going on.

* Addresses an issue with Windows Autopilot self-deploying mode and white glove deployment.
Numerous remote backdoors opened using Autopilot. FIX THIS NOW.

* Addresses an issue in which re-running PowerShell workflows might fail with compilation errors for long sessions.
We didn't understand the re-run of scripts problem. But seems to be better now.

* Improves Event Forwarding scalability to ensure thread safety and increase resources.
Event forwarding borked. borked! Never worked right. Call it an "enhancement".

* Addresses an issue in the Windows activation troubleshooter that prevents users from reactivating their copy of Windows using the product key stored in their Managed Service Account (MSA).
We're still trying to figure out how to keep users from using/activating Windows 10 for free. Many more things to address.

* Addresses an issue that prevents some applications, which are deployed using the Microsoft Installer (MSI) from being installed using the mobile device management (MDM) platform. This issue occurs because of a missing property in the MSI metadata.
There a massive overlow problem in the property reader that seems to clobber MDM the most.

* Addresses an issue that generates an “unknown username or bad password” error when attempting to sign in. This occurs in an environment that has a Windows Server 2003 domain controller (DC) and a Windows Server 2016 or later DC.
Differences in how we handled string data in 2003 and 2016 causes weird sign in issues.

* Addresses an issue with sign in scripts that fail to run when a user signs in or signs out.
Differences in how we handled string data in 2003 and 2016 causes weird sign in
issues.

* Addresses an issue that continues to collect IsTouchCapable and GetSystemSku data when they should no longer be collected.
Removed this busy loop. Again, we could call this a performance enhancement.

* Addresses an issue that causes some Azure Active Directory (AAD) joined systems, which were upgraded to Windows 10, version 1903, to erroneously rejoin the AAD domain.
Again, attempts at keeping people from using Windows 10 without paying is causing issues.

* Addresses an issue in which the WinHTTP AutoProxy service does not comply with the value set for the maximum Time To Live (TTL) on the Proxy Auto-Configuration (PAC) file. This prevents the cached file from updating dynamically.
Hardcoded value from test/debug need to be removed.

* Addresses an issue that causes the wrong printer name to be selected when you click the Print button in the SQL reporting service.
Off by one error in selection return.

* Addresses an issue that prevents the printer settings user interface from displaying properly.
Off by one error in selection return.

* Addresses an issue in the Network Profile Service that might cause a computer to stop responding.
Unable to reproduce.

* Addresses an issue that prevents some applications from printing to network printers.
Scripting ftw! Typo on variable name.

* Addresses an issue that might cause a printer to be a hidden device in Device Manager after a restart.
Off by one error in selection return.

* Addresses an issue that causes Host Networking Service (HNS) PortMapping policies to leak when the container host is reinstated after a restart.
Major exploit. Bob says FIX THIS NOW!

* Addresses a stop error (0x000000CA) that occurs when you mount a Resilient File System (ReFS) volume without a physical device. This might occur in some backup solution scenarios.
Bad assumption about what a device is.

* Addresses an Open Database Connectivity (ODBC) issue that causes an infinite loop in the retry logic when there are several lost connections in the connection pool.
Off by one error in loop termination.

* Addresses an issue that causes the Local Security Authority Subsystem Service (LSASS) to stop working and triggers a restart of the system. This issue occurs when invalid restart data is sent with a non-critical paged search control.
This problem went away for us. Can't reproduce. Can't see why it went away.

* Addresses an issue that intermittently generates Online Certificate Status Protocol (OSCP) Responder audit event 5125 to indicate that a request was submitted to the OCSP Responder Service. However, there is no reference to the serial number or the domain name (DN) of the issuer of the request.
Pulled out some accidentally distributed malware. Sorry everyone.

* Addresses an issue that causes queries against large keys on Ntds.dit to fail with the error, “MAPI_E_NOT_ENOUGH_RESOURCES”. This issue might cause users to see limited meeting room availability because the Exchange Messaging Application Programming Interface (MAPI) cannot allocate additional memory for the meeting requests.
Overflow. Could have been worse.

* Addresses an issue that corrupts a log file when a storage volume is full and data is still being written to the Extensible Storage Engine Technology (ESENT) database.
Overflow problem.

* Addresses an issue that causes _NFS4SRV_FILE_CACHE_ENTRY and DirectoryCacheLock to stop responding and leads to error 9E.
Off by one problem.

* Addresses an issue that prevents Server Message Block (SMB) Multichannel from working within a cluster network that has IPv6 Local-Link addresses.
Bad IPv6 code. It's still not right, but better.

* Addresses an issue that might cause Storage Migration Service inventory operations on a Windows Server 2003 source computer to fail in clustered environments.
String handling issue.

* Addresses a timing issue that may cause stop error 0x27 in mrxsmb20!Smb2InvalidateFileInfoCacheEntry. This issue occurs when you rename or delete files that have certain extensions and are stored on a network share that has client-side caching enabled.
Increased dummy loop timer to mitgate the problem.

* Addresses an issue in the Storage Migration Service that causes the Cutover stage to stop working during migration if an administrator assigns a static IP address to the source adapter.
Buffer overflow clobbers address.

* Addresses an issue in which canceling a deduplication (dedup) job to rebuild hotspots prevents other deduplicationPowerShell commands from responding.
Bad thread lock (typo)

* Addresses an issue that might cause Remote Desktop sessions to disconnect because a leak in system memory occurs when the client window is minimized or maximized.
Chopped some bits off the window size. Got to watch those pointers vs integers.

* Addresses an issue that makes the Windows Defender Application Control’s Code Integrity-based events unreadable.
Bad pointer arithmetic.

* Addresses an issue with certificate validation that causes Internet Explorer mode on Microsoft Edge to fail."
Old SSL code is confusing.

 

[clockdogg]

They are wasting your time, not thier own. You value your time more than theirs, so why shouldn't they do the same?
Empathy is a 4 letter word

That would be nice, if true. But MS wastes more of their time re-inventing the wheel than I could in ten thousand lifetimes.

 

[sirmonkey1985]

haha, this is why I laugh when people tell me that no one prints anything any more because of tablets and smartphones.
The "paperless workplace" is a bigger fantasy than The Lord of the Rings.

i wish.. it's hilarious that my work forces all emails to say "think green" except we're required to literally print everything. i don't even want to think how much paper we waste on a yearly basis.