Windows 10: Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Brink · Mar 21, 2018

March 22, 2018 - KB4088889 (OS Build 14393.2155)

Applies to: Windows Server 2016, Windows 10 Version 1607

Improvements and fixes

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

Addresses an issue where WMI stops responding to queries and WMI-dependent operations fail after exceeding the 256 MB WMI Arbitrator memory limit. Computers that experience high WMI memory usage or that return error WBEM_E_INVALID_CLASS or WBEM_E_NOT_FOUND should install this update. For more information, see KB4096063.

Addresses issue with a GDI handle leak in the Windows Ribbon control.

Addresses issue where customers can't change the lock screen image from the Settings app. This occurs if the "Force a specific default lock screen and logon image" Group Policy is turned on and the "Prevent changing lock screen and logon image" Group Policy is turned off.

Addresses issue where, during BitLocker decryption or encryption of a drive, files protected with the Encrypting File System (EFS) may become corrupted.

Adds support for additional high-speed eMMC devices.

Adds support in stornvme for additional SSDs.

Addresses issue where UWF file exclusion failed when non-ASCII characters were used in the directory name.

Addresses issue where ID:55 and ID:130 might be logged when using UWF in DISK mode, which eventually requires a restart.

Addresses issue where the VSS API ResyncLun failed to find the hardware provider.

Addresses issue where Hyper-V replication suspends when the primary server restarts and Azure Site Recovery (ASR) is used to replicate Hyper-V virtual machines.

Addresses issue where an error might occur when the memory manager finds an undeleted page table space when a process terminates.

Addresses issue where Windows Server 2016 Domain Controllers (DC) may periodically restart after a Local Security Authority Subsystem Service (LSASS) module faults with exception code 0xc0000005. This interrupts applications and services bound to the DC at that time. DCs may log the following events:

Application Error event ID 1000; the faulty module is NTDSATQ.dll with exception code 0xc0000005.

User32 event ID 1074 and Microsoft-Windows-Wininit event ID 1015, which indicates that lsass.exe failed with status code 255.

Addresses issue where the AdminSDHolder task fails to run when a protected group contains a member attribute that points to a deleted object. Additionally, Event 1126 is logged with “Active Directory Domain Services was unable to establish a connection with the global catalog. Error value: 8430. The directory service encountered an internal failure. Internal ID: 320130e.”

Addresses issue where users may exist in a trusted domain with transitive trust (a child domain across Forest trust or AD FS in a child domain and the user is across Forest trust). However, users cannot locate a PDC or DC for the Extranet Lockout Feature. The following exception occurs: “Microsoft.IdentityServer.Service.AccountPolicy.ADAccountLookupException: MSIS6080: A bind attempt to domain 'globalivewireless.local' failed with error code '1722'.” A message appears on the IDP page, "Incorrect user ID or password. Type the correct user ID and password, and try again."

Addresses issue where, when Claims Provider Trust is set with OrganizationalAccountSuffix (even after performing HRD), AD FS doesn't save the HRD information. The user will always see the HRD page for any new request. This breaks the SSO request for users because they need to type a username or email and password for each request.

Improves the performance of AD FS MFA authentication response time by improving the utilization of Strong Authentication Service (SAS) calls.

Addresses issue caused by a new privilege in Windows Server 2016 and Windows 10 version 1607 named "Obtain an impersonation token for another user in the same session”. When applied using Group Policy to those computers, gpresult /h fails to generate reporting data for any setting configured by the Security Configuration Engine (SCE) extension. The error message is “Requested value ‘SeDelegateSessionUserImpersonatePrivilege’ was not found”. The Group Policy Management Console fails to show the privilege in the Settings tab for a GPO where the setting has been configured.

Addresses issue where WMI stops responding to queries and WMI-dependent operations fail after exceeding the 256 MB WMI Arbitrator memory limit. Computers that experience high WMI memory usage or that return error WBEM_E_INVALID_CLASS or WBEM_E_NOT_FOUND should install this update.

Addresses a threading issue that might cause the WinRM service to stop working when under load. This is a client-side solution, so it should be applied to affected computers as well as computers that communicate with it using WinRM.

Addresses issue with system performance that causes logons to become unresponsive with the message "Please wait for the Remote Desktop Configuration" because of a deadlock in the WinRM service.

Addresses issue where the Remote Desktop License report gets corrupted when it exceeds the 4 KB size limit.

Addresses a race condition in RemoteApp that occurs when an activated RemoteApp window opens behind the previous foreground window.

Addresses rendering issue in Microsoft Edge for PDF documents with backgrounds created using various third-party publishing tools.

Addresses issue caused by a race condition where Windows Server 2016 may restart after win32kbase.sys faults with error code 0x18.

Addresses issue that decreases the Universal CRT’s performance in the _gcvt and _gcvt_s functions.

Addresses issue in which the output to a file or pipe was fully buffered in the Universal CRT for the standard error (STDERR) stream.

Addresses issue in the Universal CRT by adding the "x" access mode flag to support the fopen() function.

Addresses issue with a race condition in the Universal C Runtime (CRT) that occurs when you update the global locale. The issue corrupts the current locale reference count and triggers a double free condition.

Addresses issue that may change the cluster network associated with an adapter to a partitioned and unreachable state when you run the PowerShell cmdlet: Restart -NetAdapter.

Adds Active Directory Certificate Server (ADCS) support for Certificate Transparency (CT) that is compatible with updated Google Chrome requirements. CT is a technology used by Certificate Authorities to log and publish certificate metadata for improved security. For more information about Certificate Transparency, see KB4093260.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

For more information about the resolved security vulnerabilities, see the Security Update Guide.

Windows Update Improvements
Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 Feature Update based on device compatibility and Windows Update for Business deferral policy. This does not apply to long-term servicing editions.

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

This update will be downloaded and installed if you go to the Windows Settings > Update & Security > Windows Update page, and click Check online for updates from Microsoft Update.

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Important When installing both the SSU (KB4089510) and the LCU updates from the Microsoft Update Catalog, install the SSU before installing the LCU

File information

For a list of the files that are provided in this update, download the file information for cumulative update 4088889.
Click to expand...

Source: https://support.microsoft.com/en-us/help/4088889

*Arrow Download KB4088889 MSU for Windows 10 Version 1607 32-bit (x86) - 647.7 MB

*Arrow Download KB4088889 MSU for Windows 10 Version 1607 64-bit (x64) - 1224.0 MB

Bree · Mar 21, 2018

Installed without problems.

Also got 'Servicing stack update for Windows 10 Version 1607: March 22, 2018' at the same time.
https://support.microsoft.com/help/4089510

:)

'Mike P · Mar 21, 2018

How do I reset Windows 10 Setup?

Command Prompt(admin)

CleanMgr

be sure to add a checkmark to the item for Windows Updates.

I might try installing the final cumulative update for 1607 before attempting the upgrade to 1709.

KB4088889 (OS Build 14393.2155)

Microsoft Update Catalog

Keep in mind most likely the Spring Creators v1803 will show up around April 10th.

Qureshi_4ever · Mar 21, 2018

Windows 10 updates

I have Windows 10 Home Edition. version 1607
OS Build : 14393.2155

last 2 months some updates are downloaded but aren't succesfully installed why are fix it I have try trouble shooting updes online but problem not gone.

Errors are:

1-Feature update to Windows 10, version 1709 - Error 0x80070005

2-Security Update for Microsoft Silverlight (KB4023307) - Error 0x80070643

3-2018-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4088889)

4-2018-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4088787)

Security Update for Microsoft Silverlight (KB4023307) updates not install since 7 months.

sml156 · Mar 22, 2018

Wow direct download is 1.2 Gig for 64 bit systems.

Bree · Mar 22, 2018

Wow direct download is 1.2 Gig for 64 bit systems.
Click to expand...

Well it would be. This update for 1607 contains every current fix since the Anniversary Update was first released in August 2016.

Brink · Mar 27, 2018

KB4088889 article in first post updated. *Smile

Access Denied · Mar 27, 2018

I got this one when I made my USB install from the Media Creation Tool I believe.

I have the 16299.334 version and my last was KB4089848 and KB4088776 after getting to the desktop. Now I understand why the download for the install files took so long *Tongue (1.2G update here)

mrgeek · Apr 4, 2018

Email prod sent to users to warn of April 10 End of Life with link to download and install Update Assistant to facilitate update to newer version.

Windows 10: Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22

Cumulative Update KB4088889 Windows 10 v1607 Build 14393.2155 Mar. 22 - Similar Threads - Cumulative Update KB4088889

Cumulative Update KB4489889 Windows 10 v1607 Build 14393.2879 -Mar. 19

Cumulative Update KB4489882 Windows 10 v1607 Build 14393.2848 -Mar. 12

Cumulative Update KB4089848 Windows 10 v1709 Build 16299.334 - Mar. 22

KB4088787 Update for Windows 10 Mobile v1607 Build 14393.2125 Mar. 20

Cumulative Update KB4096309 Windows 10 v1607 Build 14393.2156 Mar. 29

Cumulative Update KB4088787 Windows 10 v1607 Build 14393.2125 Mar. 13

Cumulative Update KB4025334 Windows 10 v1607 Build 14393.1532

Cumulative Update KB4088891 Windows 10 v1703 Build 15063.994 - Mar. 22

Cumulative Update KB4077525 Windows 10 v1607 Build 14393.2097 Feb. 22