Windows 10 Insider Release Preview Channel (21H2)

[Corrine]

Announcing Windows 10 Insider Preview Build 19044.1147 (21H2)

Note: This Build is ONLY going to Insiders who were moved from the Beta Channel to the Release Preview Channel because their PC did not meet the hardware requirements for Windows 11. In addition, the build is going to those Insiders via the “seeker” experience in Windows Update. This means these Insiders will need to go to Settings > Update & Security > Windows Update and choose to download and install 21H2. After updating to Windows 10, version 21H2, new 21H2 updates will be received automatically through Windows Update.

Improvements:

• We fixed an issue with searchindexer. After you sign out, searchindexer continues to hold handles to the per user search database in the profile path, “C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\\”. As a result, searchindexer stops working and duplicate profile names are created.
• We fixed an issue that prevents gaming services from opening certain games for desktop users.
• We fixed an issue that prevents you from entering text using the Input Method Editor (IME). This might occur, for example, after startup if you have set the power options to shut down a laptop by closing its lid.
• We changed the functionality for uploading new activity into Timeline. If you sync your activity history across your devices using your Microsoft account (MSA), you cannot upload new activity into the Timeline. You can still use Timeline and see your activity history (information about recent apps, websites, and files) on your local device. This does not affect Azure Active Directory (AAD) accounts. To view web history, Microsoft Edge and other browsers provide the option to view recent web activities. You can also view recently used files using Microsoft OneDrive and Microsoft Office.
• We fixed an issue that might cause the File Explorer window to lose focus when you are mapping a network drive.
• We fixed an issue that causes File Explorer to stop working after reaching 99% completion when you are deleting many files on a mapped network drive.
• We fixed a timing issue in the Group Policy Registry Telemetry that causes Group Policy extension processing to fail.
• We fixed an issue that repeatedly rebuilds the Windows Filtering Platform (WFP) filters. This issue occurs when a device is enrolled in a mobile device management (MDM) service and “MDMWinsOverGP” is set.
• We fixed an issue with an MDM service that fails to correctly apply certain junk mail rules.
• We fixed an issue that always reports the update build revision (UBR) as zero (0) on a device during enrollment to an MDM service.
• We fixed an issue that causes the enrollment of the Elliptic Curve Digital Signature Algorithm (ECDSA) certificate to fail with the error, “0x80090027 NTE_INVALID_PARAMETER”. This issue occurs when the Trusted Platform Module (TPM) provider (the Microsoft Software Key Storage Provider) stores the key.
• We fixed an issue with auditing events 4624 and 5142 that display the wrong event template when Dutch is the display language.
• We fixed an issue that causes System Integrity to leak memory.
• We fixed an issue that plays the sound for selecting something in a game loudly when you press the trigger button on a game controller.
• We fixed an issue that prevents power plans and Game Mode from working as expected. This results in lower frame rates and reduced performance while gaming.
• We fixed an issue in which “Network Internal Access” appears on the taskbar network icon on systems that access the internet from certain domains.
• We fixed an issue in which the Network Connectivity Status Indicator (NCSI) fails to detect internet connectivity after you connect to a virtual private network (VPN).
• We fixed an issue that causes printing to stop or prints the wrong output. This issue occurs when you print using a USB connection after updating to Windows 10, version 2004 or later.
• We fixed a rare issue that might degrade performance in applications that call Gdiplus.dll!GdipMeasureString in a tight loop with a new font on each call. This issue occurs after installing Windows updates released on and after February 2021.
• We fixed an issue that incorrectly routes some audio channels when streaming using certain fixed channel layouts.
• We fixed an issue that always displays devices that RemoteFX USB redirects as “Remote Desktop Generic USB Device” instead of the actual device name.
• We fixed an issue in which Set-RDSessionCollectionConfiguration does not set the camerastoredirect:s:value custom property.
• We fixed a Local Security Authority Subsystem Service (LSASS) domain controller memory leak that is reported in Privileged Access Management (PAM) deployments.
• We fixed an issue that prevents you from accessing a network drive that maps to a Distributed File System (DFS) root after you sign out.
• We fixed an issue that prevents you from reconnecting to mapped network drives after you sign in and displays an access denied error. This issue occurs if you use the net use /deep option to create multiple drive mappings to different paths on the same encrypted file share.
• We fixed an issue that prevents access to files on a Server Message Block (SMB) share when you enable Access Enabled Enumeration (ABE).
• We fixed an issue that prevents the Windows Server service from starting if SrvComment is greater than 128 characters.
• We fixed an issue in the Windows Network File System (NFS) client that might prevent you from renaming a file after mounting an NFS share. This issue occurs if you rename the file using File Explorer but does not occur if you rename the file using command line.
• We fixed an issue with an unhandled Open File dialog critical exception. As a result, Microsoft Foundation Class (MFC) applications might close unexpectedly.
• We fixed an issue in which the Storage Sense page in Settings might incorrectly report the size of some storage devices that use the GUID Partition Table (GPT). The affected devices will incorrectly report in Storage Sense that the size is twice as large as the size reported in File Explorer. Note: This issue does not affect storage devices that use a master boot record (MBR).

 

[Corrine]

Announcing Windows 10 Insider Preview Build 19044.1149 (21H2)

Note: This update will apply to Windows Insiders in Release Preview already on Windows 10, version 21H2 (Build 19044.1147) and Insiders who were moved from the Beta Channel to the Release Preview Channel because their PC did not meet the hardware requirements for Windows 11. For those Insiders already on Windows 10, version 21H2, this update will come through automatically via Windows Update. For Insiders not yet on 21H2, if this update is available for you, it will be offered via the “seeker” experience which means these Insiders will need to go to Settings > Update & Security > Windows Update and choose to download and install Windows 10, version 21H2.

This update includes the following change in addition to all the improvements listed as part of Build 19044.1147:

• We added a new policy that creates generic strings and removes branding-specific terms, such as “Windows” or “PC”, for IoT Enterprise editions. For example, we changed “computer” to “device”. Instead of “Getting Windows ready,” we changed that to “Getting things ready” and so on. These generic strings are displayed on a user’s screen when an update is in progress.

 

[Corrine]

Announcing Windows 10 Insider Preview Build 19044.1200 (21H2)

This update will be offered automatically for Windows Insiders already on Windows 10, version 21H2 in the Release Preview Channel. For Insiders not yet on Windows 10, version 21H2 – this update is offered via our “seeker” experience in Windows Update and ONLY to Insiders who were moved from the Beta Channel to the Release Preview Channel because their PC did not meet the hardware requirements for Windows 11. This means these Insiders will need to go to Settings > Update & Security > Windows Update and choose to download and install Windows 10, version 21H2.

The update includes the new features as mentioned in John Cable’s blog post for Windows 10, version 21H2 last month.

 

[Corrine]

Announcing Windows 10 Insider Preview Build 19044.1202 (21H2)

This update will be offered automatically for Windows Insiders already on Windows 10, version 21H2 in the Release Preview Channel. For Insiders not yet on Windows 10, version 21H2 – this update is offered via our “seeker” experience in Windows Update and ONLY to Insiders who were moved from the Beta Channel to the Release Preview Channel because their PC did not meet the hardware requirements for Windows 11. This means these Insiders will need to go to Settings > Update & Security > Windows Update and choose to download and install Windows 10, version 21H2.

This update includes the following change in addition to all the improvements listed as part of Build 19044.1200:

• We fixed an issue that causes the Windows Update settings page to stop responding after you download an optional update.

 

[Corrine]

Releasing Windows 10 Build 19044.1263 (21H2) to Release Preview Channel

Again, this update is only offered to Windows Insiders already on Windows 10, Version 21H2 in the Release Preview Channel or via "seeker" as explained above.

Fixes:

• We fixed an issue that changes the device’s current UI language. This occurs during an unattended out-of-box experience (OOBE) language pack installation scenario on a desktop.
• We fixed an issue that causes the system time to be incorrect by one hour after a daylight saving time (DST) change.
• We fixed an issue that causes the Server Manager application to disappear after you use it to remove Hyper-V features on Windows Server 2022.
• We fixed an issue with parsing time formats in event logs. This issue occurs when you exclude milliseconds.
• We fixed an issue that causes the DnsCache service to increase the CPU usage to 100% utilization. As a result, the device stops responding.
• We provided administrators the option to reset the zoom to the default for HTML dialogs in Microsoft Edge Internet Explorer mode.
• We fixed an issue that stops calls to the Windows Image Acquisition (WIA) minidriver for Windows Portable Devices (WPD) devices that you access using WIAMgr.
• We fixed an issue that causes applications, such as Microsoft Outlook, to suddenly stop responding during normal use. This occurs if the application created and removed UI elements on a background thread that is no longer receiving messages.
• We fixed an issue with the Microsoft Outlook Add-in that prevents you from providing input after you select Reply.
• We fixed an issue that fails to keep the NumLock state after a Fast Startup restart.
• We fixed an issue with sharing a screen using Microsoft Teams. Protected content, such as a digital rights management (DRM) email, appears black for the presenter, but appears transparent for everyone else.
• We fixed an issue that might prevent drawing on the screen using Windows Context::UpdateRgnFromRects from working.
• We fixed an issue that might cause distortion in the audio that Cortana and other voice assistants capture.
• We removed the limitation of 25 maximum Traffic Selectors in the Windows native Internet Key Exchange (IKE) client and server.
• We fixed an issue that fails to display the smart card PIN dialog when you are connected to a virtual private network (VPN). This issue occurs after upgrading to Windows 10, version 2004.
• We fixed an issue that causes a memory leak in lsass.exe when the pTokenPrivileges buffer is not released.
• We fixed an issue with a non-paged pool (NPP) leak from the UxSF pool tag. This leak occurs when lsass.exe stops processing asynchronous Security Support Provider Interface (SSPI) calls.
• We fixed an issue that prevents the xhunter1.sys driver from loading. As a result, some games cannot run when you enable Hypervisor-Protected Code Integrity (HVCI).
• We fixed an issue that causes Windows to stop working if you deploy a Code Integrity policy without user mode rules.
• We improved the performance of MsSense.exe in environments with User Datagram Protocol (UDP) applications that require high amounts of bandwidth.
• We fixed an input method editor (IME) mode instability in the RemoteApp scenario. You must install this update on the Remote Desktop server and Remote Desktop client.
• We fixed an issue that causes blurry News and interests icons when you use certain screen resolutions.
• We fixed a paged pool memory leak of the registry keys for the Virtual Desktop ID that occurs in explorer.exe.
• We fixed an issue that causes LogonUI.exe to stop working because Direct Manipulation fails to start.
• We fixed an issue that causes News and interests to appear in the context menu even when you have disabled it on a device.
• We fixed an issue that causes the configuration for multiple artifact DB support across datacenters to fail for Security Assertion Markup Language (SAML) artifacts.
• We fixed an issue that causes the LsaLookupSids() function to fail. This occurs when there are security identifiers (SID) for users that no longer exist in a group that contains cross-domain trusted users.
• We fixed an issue that fails to apply the post_logout_redirect_uri= parameter when you use an External Claims Provider.
• We fixed an issue with a deadlock in the WebDav redirector that occurs when it attempts to read a file from the local TfsStore. As a result, the system stops responding.
• We fixed an issue that causes a stop error after a restart.
• We fixed an issue with Enterprise Mode Site List redirection from Internet Explorer 11 to Microsoft Edge. In certain circumstances, the redirection opens a site in multiple tabs in Microsoft Edge.
• We removed a hyperlink that might cause the Input app to stop working when you first enter fuzzy pinyin content.
• We fixed an activation issue for the Input application.
• We fixed an issue that causes apps to lose focus when the taskbar is not at the bottom of the screen.
• We fixed an issue that always reports the update build revision (UBR) as zero (0) on a device during enrollment to mobile device management (MDM) service.
• We fixed an issue with PropertyGet in JScript9.dll.
• We implemented a Group Policy for the registry key below:
  • Key: HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint
  • Value: RestrictDriverInstallationToAdministrators

 

[Corrine]

Releasing Windows 10 Build 19044.1319 (21H2) to Release Preview Channel

Again, this update is only offered to Windows Insiders already on Windows 10, Version 21H2 in the Release Preview Channel or via "seeker" as explained above.

Fixes:

• We fixed an issue that prevents you from accessing the pre-provisioning page during the out-of-box experience (OOBE). This issue occurs when the credentials page for signing in to Azure Active Directory appears, and you press the Windows key five times.
• We added a feature that facilitates certain cross-browser data transfers.
• We fixed an issue with Assigned Access kiosks that are configured with Microsoft Edge as a kiosk application. These kiosks might sometimes fail to restart Microsoft Edge if users close the browser window.
• We fixed an issue in which the use of App-V intermittently causes black screens to appear when signing in on the credentials page.
• We fixed an issue that might prevent subtitles from displaying for certain video apps and streaming video sites.
• We fixed an issue that prevents Windows 10 virtual private network (VPN) users from connecting to Windows Server 2019 Routing and Remote Access service (RRAS) servers.
• We fixed an issue that prevents Software-Defined Networking (SDN) virtual machines from working when you configure the Generic Routing Encapsulation (GRE) VPN bandwidth limitation.
• We fixed a Primary Refresh Token (PRT) update issue that occurs when VPN users sign in using Windows Hello for Business when the VPN connection is offline. Users receive unexpected authentication prompts for online resources that are configured for user sign-in frequency (SIF) in Azure Active Directory-Conditional Access.
• We fixed an issue that causes Windows to go into BitLocker recovery after a servicing update.
• We fixed an issue that might cause Kerberos.dll to stop working within the Local Security Authority Subsystem Service (LSASS). This occurs when LSASS processes simultaneous Service for User (S4U) user-to-user (U2U) requests for the same client user.
• We fixed an issue in Code Integrity that might cause a memory leak.
• We enhanced Microsoft Defender for Endpoint’s ability to identify and intercept ransomware and advanced attacks.
• We fixed an issue in the OOBE that might cause Windows AutoPilot provisioning to fail.
• We fixed an issue that prevents Kana input mode users from inserting a question mark (?) using the Shift-0 key combination.
• We fixed an issue that sometimes causes the lock screen to appear black if you enable slideshow.
• We fixed a reliability issue with LogonUI.exe, which affects the rendering of the network status text on the credentials screen.
• We fixed an issue that causes Server Message Block (SMB) Query Directory Requests to fail when the buffer size is large.
• We fixed a memory leak issue in lsass.exe on domain controllers in the forest root domain that occurs when you have multiple forests and multiple domains in each forest. The SID-Name mapping functions leak memory when a request comes from another domain in the forest and crosses forest boundaries.
• We fixed an issue with the virtual machine (VM) Load Balancing feature, which ignores a site’s fault domain.

 

[Corrine]

Releasing Windows 10 Build 19044.1320 (21H2) to Release Preview Channel | Windows Insider Blog

This update includes the improvements from Build 19044.1319 plus the following additional change:

• We fixed a known issue that might prevent the successful installation of printers using the Internet Printing Protocol (IPP).

 

[Corrine]

Releasing Windows 10 Build 19044.1379 / 19043.1379 to Release Preview Channel

Build 19044.1379 is for Insiders on 21H2 and Build 19044.1379 is for Insides on 21H1 (KB5007253).

Fixes:

• We fixed an issue that affects the opening of the SearchFilterHost.exe process.
• We fixed an issue that causes searchindexer.exe to keep handles to the per user search database in the path below after you sign out: “C:\Users\username\AppData\Roaming\Microsoft\Search\Data\Applications\\” As a result, searchindexer.exe stops working and duplicate profile names are created.
• We added support for the cancellation of daylight savings time for the Republic of Fiji for 2021.
• We fixed an issue that prevents the enrollment status page (ESP) from displaying the error message or remediation options after a failure.
• We added the –cd argument to wsl.exe to specify a Windows or Linux path as a starting directory for Windows Subsystem for Linux (WSL).
• We fixed an issue that fails to apply machine Group Policy objects automatically at startup or in the background to devices on a domain that have certain processors.
• We added the option to configure an Internet Protocol version 4 (IPv4) maximum transmission unit (MTU) that is less than 576 bytes on an interface.
• We fixed an issue that fails to provide an event description for the System Center – Operations Manager.
• We fixed an issue that incorrectly renders some variable fonts.
• We fixed an issue that might cause the 32-bit version of Microsoft Excel to stop working on devices that have certain processors when you export to PDF.
• We fixed an issue that displays glyphs at the wrong angle when you use the Meiryo UI font and other vertical fonts. These fonts are frequently used in Japan, China, or other countries in Asia.
• We enabled onunload events to create pop-up windows in Microsoft Edge Internet Explorer mode.
• We fixed an issue that affects predictive pre-rendering in Microsoft Edge Internet Explorer mode.
• We fixed an issue that causes Internet Explorer to stop working.
• We fixed an issue that causes Internet Explorer to stop working when using the Input Method Editor (IME) to insert elements.
• We fixed an issue that causes the Settings page to unexpectedly close after you uninstall a font.
• We fixed an issue that affects the UI for renaming files when using folder view in File Explorer. The UI fails to properly handle inline composition when using the new Japanese IME.
• We fixed a memory leak in ctfmon.exe that occurs when you switch between different edit clients.
• We fixed a known issue that causes error codes 0x000006e4, 0x0000007c, or 0x00000709 when connecting to a remote printer that is shared on a Windows print server.
• We fixed an issue that turns off screen capture and recording functionalities on the Windows Game Bar because of a service failure.
• We fixed an issue that might cause the return value of GetCommandLineA() to be lowercase in some developer scenarios.
• We fixed an issue that might cause the decryption of a file that is on a remote server to fail. This issue occurs when using the Encrypted File System (EFS) on the remote server and the error message is, “ERROR_DECRYPTION_FAILED”.
• We fixed an issue that prevents you from enabling BitLocker on a thinly provisioned virtual machine (VM). The error is “A device attached to the system is not functioning” and the system logs, “STATUS_UNSUCCESSFUL”.
• We fixed an issue that causes Windows Defender Application Control to incorrectly compare two file version numbers.
• We enabled credentials for Azure Active Directory (Azure AD) Active Directory Federation Services (ADFS) users in Quick Assist.
• We fixed an issue that sometimes prevents Quick Assist users from using full screen view after they start a remote assistance session.
• We fixed an issue that prevents the applications that you use often from appearing on the Start menu and prevents you from configuring them to appear on the Start menu using a Group Policy.
• We fixed an issue that causes the syncing of desktop settings to fail when you use the built-in User Experience Virtualization (UE-V) template.
• We fixed an issue that prevents Failover Clustering from updating Domain Name Server (DNS) records.
• We fixed an issue that prevents your device from starting up, and it becomes unresponsive because of licensing API calls.

 

[Corrine]

Releasing Windows 10 Build 19044.1381 / 19043.1381 to Release Preview Channel

Build 19044.1381 is for Insiders on 21H2 and Build 19044.1381 is for Insiders on 21H1 (KB5007253).

In addition to the fixes from the previous build, this release includes the following fix:

• We fixed an issue that might affect devices that use Windows Hello for Business and are joined to Azure Active Directory (AD). These devices might experience issues when they access on-premises resources, such as file shares or websites.

 

[Corrine]

Releasing Windows 10 Build 19044.1499 to Release Preview Channel

This update includes the following improvements:

• We fixed an issue in Microsoft UI Automation that might cause Microsoft Outlook to stop working.
• We updated daylight saving time to start in February 2022 instead of March 2022 in Jordan.
• We fixed an issue that prevents the Windows Subsystem for Linux 2 (WSL2) localhost relay from starting when you enable Fast Startup.
• We added parameters that pass to wmic.exe in telemetry to capture additional usage data to address application compatibility concerns.
• We fixed an issue in CLSID_InternetExplorer.
• We added a reminder to Internet Explorer 11 that notifies users of its upcoming retirement.
• We fixed an issue that might sometimes cause Japanese Microsoft Office applications stop working when you use the new Japanese Input Method Editor (IME).
• We fixed an issue that causes applications to stop working when you type text using the Chinese IME.
• We fixed an issue that might cause Windows to stop working when you use the Pen Haptics API.
• We updated the phone number for Windows Activation for locales that have the wrong phone number.
• We fixed an issue that causes a device to incorrectly report itself as noncompliant with Conditional Access because of an antivirus or firewall configuration.
• We fixed an issue that stops printing or prints the wrong output when you print using USB on Windows 10, version 2004 or later.
• We fixed an issue that affects the Remote Desktop screen, in some cases, when you use Advanced Video Coding (AVC) software encoding.
• We fixed an issue that prevents certain surround sound audio from playing in Microsoft Edge.
• We fixed a deadlock in vpnike.dll and rasmans.dll.
• We fixed an issue that affects the Fast Identity Online 2.0 (FIDO2) credential provider and prevents the display of the PIN entry box.
• We fixed an issue that causes Windows to stop working and generates the error, “IRQL_NOT_LESS_OR_EQUAL”.
• We fixed an issue that might cause the Get-TPM PowerShell command to fail when it attempts to report Trusted Platform Module (TPM) information. The command fails with the error, “0x80090011 Microsoft.Tpm.Commands.TpmWmiException,Microsoft.Tpm.Commands.GetTpmCommand”.
• We fixed an issue that causes the AltGr key to stop working if a remote desktop client is running or if RemoteApp was disconnected.
• We added a new feature that provides direct access to select your Microsoft Edge profiles from News & interests. You can also go to Microsoft Edge directly from News & interests in the same corresponding profile.
• We added a new feature called Sync Your Settings for users who are migrating to Windows 11, original release. You’ll use Sync Your Settings to automatically back up a list of your applications to your Microsoft Account. Then, you can quickly restore those applications on a Windows 11, original release device. This new feature that will deploy over the coming weeks.
• We fixed an issue that causes functioning Bluetooth devices to stop working when you attempt to connect to a non-functioning Bluetooth device.
• We fixed an issue that causes lsass.exe to stop working and the device restarts. This issue occurs when you query Windows NT Directory Services (NTDS) counters after the NTDS service has stopped.
• We fixed an issue that fails to apply the Group Policy Object (GPO) “Do not allow compression on all NTFS Volume” in some cases.
• We fixed an issue that prevents Robocopy from retrying the file copy process.
• We fixed an issue that might occur when you enable verbose Active Directory Federation Services (AD FS) audit logging and an invalid parameter is logged. As result, Event 207 is logged, which indicates that a failure to write to the audit log occurred.
• Addresses a memory leak that occurs when you call WinVerifyTrust(). This issue occurs if verification fails for the first signature of a file that has multiple signatures.

 

[Corrine]

Releasing Windows 10 Build 19044.1618 to Release Preview Channel

In a phased release, search highlights is being added to Windows 10. See Search in the Windows 11 Insider Preview for additional information.

Improvements and Fixes:

• New! We provided the ability to change the color of toast buttons to identify success and critical scenarios more easily for apps that send notifications using Windows notifications in the OS. This feature also makes notifications more visually compact.
• New! We added a new policy that expands an app’s top three notifications by default in the Action Center for apps that send notifications using Windows notifications in the OS. This feature displays multiple notifications that you can interact with simultaneously.
• We fixed an issue that causes searchindexer.exe to stop responding during a dismount operation in the Remote Desktop setup environment.
• We fixed an issue that affects searchindexer.exe and prevents Microsoft Outlook’s offline search from returning recent emails.
• We fixed an issue that might deactivate Windows when you change the National Language Support (NLS) version from 6.3 to 6.2.
• We fixed an issue in which modern browsers fail to correctly render HTML that is generated by gpresult/h.
• We fixed an issue that causes an “Access denied” exception for a file during a PowerShell test for AppLocker.
• We fixed an issue that might cause the Group Policy Service to stop processing telemetry information for Group Policy Registry Preferences.
• We fixed an issue that might prevent a DNS Server query resolution policy from working as expected when you specify a fully qualified domain name (FQDN) and subnet conditions.
• We fixed a heap leak in PacRequestorEnforcement that degrades the performance of a domain controller.
• We fixed an issue that affects the Key Distribution Center (KDC) Proxy. The KDC Proxy cannot properly obtain Kerberos tickets for signing in to Key Trust Windows Hello for Business.
• We added support for Microsoft Account (MSA) Pass-through scenarios in Azure Active Directory (AAD) Web Account Manager (WAM).
• We fixed an issue that logs Event ID 37 during certain password change scenarios, including failover cluster name object (CNO) or virtual computer object (VCO) password changes.
• We fixed an issue that might unintentionally add a Trusted Platform Module (TPM) protector when you use the Silent BitLocker enablement policy.
• We fixed an issue that prevents the User Account Control (UAC) dialog from correctly showing the application that is requesting elevated privileges.
• We fixed an issue that causes the Move-ADObject command to fail when you move computer accounts across domains. The error message is, “Multiple values were specified for an attribute that can have only one value”.
• We fixed an issue that prevents Event 4739 from displaying the new values of certain attributes after a policy change.
• We fixed an issue that prevents Android device users from signing in to some Microsoft applications, such as Microsoft Outlook or Microsoft Teams. This issue occurs after rolling over token signing and decrypting certificates, resetting a user’s password, or when an administrator has revoked refresh tokens.
• We fixed an issue that might cause domain joining to fail in environments that use disjoint DNS hostnames.
• We fixed an issue that prevents the Back button of the credentials window, where you sign in, from being visible in high contrast black mode.
• We fixed an issue that prevents you from accessing Server Message Block (SMB) shares using an IP Address when SMB hardening is enabled.
• We fixed an issue that occurs when the Best Practices Analyzer (BPA) values for SMB have not been updated for more recent platforms.
• We fixed an issue that causes stop error 0x1E in the SMB Server (srv2.sys).
• We fixed an issue that causes a mismatch between NetBIOS and DNS Active Directory domain names when you create a cluster.
• We fixed an issue that causes the Network File System (NFS) redirector to stop working (error 0x50) when you convert a text file to a PDF.

 

[Corrine]

Releasing Windows 10 Build 19044.1679 to Release Preview Channel | Windows Insider Blog

This update includes the following improvements:

• New! We added improvements for servicing the Secure Boot component of Windows.
• We changed the timeout for Azure Active Directory (Azure AD) registration from 60 minutes to 90 minutes for hybrid Azure AD-joined Autopilot scenarios. This also addresses a race condition that causes an exception at timeout.
• We fixed an issue that causes a remote desktop session to close or a reconnection to stop responding while waiting on the accessibility shortcut handler (sethc.exe).
• We fixed an issue that delays OS startup by approximately 40 minutes.
• We fixed an issue that incorrectly returns Execution Policy settings from the registry.
• We fixed an issue that causes Internet Explorer to stop working when you copy and paste text using an Input Method Editor (IME).
• We fixed an issue that displays a black screen for some users when they sign in or sign out.
• We fixed an issue that causes Kerberos authentication to fail, and the error is “0xc0030009 (RPC_NT_NULL_REF_POINTER)”. This occurs when a client machine attempts to use the Remote Desktop Protocol (RDP) to connect to another machine while Remote Credential Guard is enabled.
• We fixed an issue that prevents you from changing a password that has expired when you sign in to a Windows device.
• We fixed an issue that might cause Windows to stop working when you apply a Windows Defender Application Control (WDAC) policy that doesn’t require a restart.
• We fixed an issue that might fail to copy the security portion of a Group Policy to a machine.
• We fixed an issue that causes the Key Distribution Center (KDC) code to incorrectly return the error message “KDC_ERR_TGT_REVOKED” during domain controller shutdown.
• We fixed an issue that might prevent graphics processing unit (GPU) load balancing over Remote Desktop from working as intended.
• We fixed an issue that prevents the instantiation of the Microsoft RDP Client Control, version 11 and higher, inside a Microsoft Foundation Class (MFC) dialog.
• We fixed an issue that might cause a Microsoft OneDrive file to lose focus after you rename it and press the Enter key.
• We fixed an issue that causes the news and interest panel to appear when you haven’t clicked, tapped, or moused over it.
• We fixed an issue that fails to pass the Shift KeyUp event to an application when you use the Korean IME.
• We fixed an issue that might occur when you use Netdom.exe or the Active Directory Domains and Trusts snap-in to list or modify name suffixes routing. These procedures might fail. The error message is, “Insufficient system resources exist to complete the requested service.” This issue occurs after installing the January 2022 security update on the primary domain controller emulator (PDCe).
• We fixed an issue that displays the wrong IME mode indicator when the Font Mitigation policy is enabled.
• We fixed an issue that causes the primary domain controller (PDC) of the root domain to generate warning and error events in the System log. This issue occurs when the PDC incorrectly tries to scan outgoing-only trusts.
• We fixed an issue that affects a Server Message Block (SMB) multichannel connection and might generate a 13A or C2 error.
• We fixed an issue that occurs when you map a network drive to a Server Message Block version 1 (SMBv1) share. After restarting the OS, you cannot access that network drive.
• We fixed an issue that causes virtual computer object (VCO) password settings failure on a distributed network name resource.
• We fixed an issue that damages a pool when a Client-Side Caching (CSC) cleanup method fails to delete a resource that was created.
• We fixed an issue that might cause the server to lock up because the nonpaged pool grows and uses up all memory. After a restart, the same issue occurs again when you try to repair the damage.
• We reduced the overhead of resource contention in high input/output operations per second (IOPS) scenarios that have many threads contending on a single file.

 

[Corrine]

Releasing Windows 10 Build 19044.1741 to Release Preview Channel

This update includes all the improvements previously noted here plus this additional fix:

• We fixed an issue that prevents the file system control code (FSCTL_SET_INTEGRITY_INFORMATION_EX) from handling its input parameter correctly.

To check and see which version of Windows 10 you’re running, just type “winver” into the Windows search box on the taskbar. It should show as “Version 21H2”.

 

[Corrine]

Releasing Windows 10 Build 19044.1806 to Release Preview Channel

This update includes the following improvements:

• New! We added IP address auditing for incoming Windows Remote Management (WinRM) connections in security event 4262 and WinRM event 91. This We fixed an issue that fails to log the source IP address and machine name for a remote PowerShell connection.
• New! We added Server Message Block (SMB) redirector (RDR) specific public File System Control (FSCTL) code FSCTL_LMR_QUERY_INFO.
• New! We introduced the following Print and Scan features:
  • IPP over USB support – Microsoft has supported Internet Print Protocol (IPP) for network printers starting in 2018 with the release of Windows 10, version 1809. We are now expanding IPP support to USB printers.
  • Print support app (PSA) APIs – Using the PSA framework, printer manufacturers can extend printer functionalities and user experience. For more information, see Print support app design guide.
  • PIN-protected printing for IPP and Universal Print – Standard print dialogs now include a user interface to enter a PIN code.
  • eSCL Mopria Scan protocol – Windows now supports the eSCL Mopria Scan protocol. It can be used with Mopria certified scanner devices.
• We fixed an issue that affects the Cloud Clipboard service and prevents syncing between machines after a period of inactivity.
• We fixed an issue that prevents the Pashto language from appearing in the language list.
• We enabled the InternetExplorerModeEnableSavePageAs Group Policy. For more information, see Microsoft Edge Browser Policy Documentation.
• We fixed an issue that affects the touchpad area that responds to a right-click (the right-click zone). For more information, see Right-click zone.
• We fixed an issue that affects some certificates chains to Root Certification Authorities that are members of the Microsoft Root Certification Program. For these certificates, the certificate chain status can be, “This certificate was revoked by its certification authority”.
• We fixed an issue that leads to a false negative when you run scripts while Windows Defender Application Control (WDAC) is turned on. This might generate AppLocker events 8029, 8028, or 8037 to appear in the log when they should not.
• We fixed an issue that prevents the use of Encrypted File System (EFS) files over a Web-based Distributed Authoring and Versioning (WebDAV) connection.
• We fixed an issue that causes a domain controller to incorrectly write Key Distribution Center (KDC) event 21 in the System event log. This occurs when the KDC successfully processes a Kerberos Public Key Cryptography for Initial Authentication (PKINIT) authentication request with a self-signed certificate for key trust scenarios (Windows Hello for Business and Device Authentication).
• We fixed an issue that causes the LocalUsersAndGroups configuration service provider (CSP) policy to fail when you modify the built-in Administrators group. This issue occurs if the local Administrator account isn’t specified in the membership list when you perform a replace operation.
• We fixed an issue in which malformed XML inputs might cause an error in DeviceEnroller.exe. This prevents CSPs from being delivered to the device until you restart the device or correct the XML.
• We fixed an issue that causes Microsoft NTLM authentication using an external trust to fail. This issue occurs when a domain controller that contains the January 11, 2022 or later Windows update services the authentication request, is not in a root domain, and does not hold the Global Catalog role. The affected operations might log the following errors:
  • The security database has not been started.
  • The domain was in the wrong state to perform the security operation.
  • 0xc00000dd (STATUS_INVALID_DOMAIN_STATE).

 

[Corrine]

Releasing Windows 10 Build 19044.1862 to Release Preview Channel

This update is KB5015878 and is for Windows 10 Insiders on Windows 10, version 21H2 and includes the following improvements:

• New! We provided the ability for you to consent to receive urgent notifications when focus assist is on.
• New! We restored functionality for Windows Autopilot deployment scenarios that are affected by the security mitigation for hardware reuse. This update removed the one-time use restriction for self-deploying mode (SDM) and pre-provisioning (PP). This update also re-enabled any User Principal Name (UPN) display in user-driven mode (UDM) deployments for approved manufacturers.
• We reduced the overhead of resource contention in high input/output operations per second (IOPS) scenarios that have many threads contending on a single file.
• We improved the reliability of a push-button reset after an OS upgrade.
• We fixed an issue that makes the tenant restrictions event logging channel inaccessible if you remove the EN-US language pack.
• We fixed an issue that prevents troubleshooters from opening.
• We updated the Remove-Item cmdlet to properly interact with Microsoft OneDrive folders.
• We fixed an issue that causes certain docking stations to lose internet connectivity when waking from Sleep mode.
• We added functionality that caches additional audio endpoint information to improve the OS upgrade experience.
• We fixed an issue that might cause consecutive video clip playback to fail in games that use DX12.
• We fixed an issue that affects certain games that use the XAudio API to play sound effects.
• We fixed an issue that causes port mapping conflicts for containers.
• We fixed an issue that causes Code Integrity to continue trusting a file after the file has been modified.
• We fixed an issue that might cause Windows to stop working when you enable Windows Defender Application Control with the Intelligent Security Graph feature turned on.
• We fixed an issue that affects the height of the Search box when you use multiple monitors that have different resolutions as measured dots per inch (DPI).
• We fixed an issue that prevents the Storage Migration Service (SMS) from completing inventory on servers that have many shares. The system logs error event 2509 in Microsoft-Windows-StorageMigrationService/Admin channel (ErrorId=-2146233088/ErrorMessage=”Invalid table id”).
• We fixed an issue that causes the Windows profile service to fail sporadically. The failure might occur when signing in. The error message is, “gpsvc service failed to sign in. Access denied”.