Windows 10: Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24

Brink · Jul 24, 2018

July 24, 2018 - KB4338817 (OS Build 16299.579)

Applies to: Windows 10, version 1709

Improvements and fixes

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

Addresses an issue that causes devices within Active Directory or Hybrid AADJ++ domains to unexpectedly unenroll from Microsoft Intune or third-party MDM services after installing provisioning package updates (PPKG). This issue occurs on devices that are subject to the “Auto MDM Enrollment with AAD Token” Group Policy. If youran the script “Disable-AutoEnrollMDMCSE.PS1” as a workaround for this issue, run “Enable-AutoEnrollMDMCSE.PS1” from a PowerShell window running in Administrator mode after installing this update.

Inserts a CR before LF if there was none.

Enables debugging of WebView content in UWP apps using the Microsoft Edge DevTools Preview app available in the Microsoft App Store.

Addresses an issue in which Microsoft Edge DevTools becomes unresponsive when the console is flooded with messages.

Addresses an issue that causes a black screen to appear for several minutes after installing Windows updates before going to the desktop.

Addresses additional issues with updated time zone information.

Improves the PDF file experience in Microsoft Edge by addressing PDF file open, print, and reliability issues.

Addresses an issue in which moving a Microsoft Foundation Class (MFC) application window might leave behind a dithered pattern on the desktop.

Addresses an issue that causes power options to appear on the Windows security screen even when the per-user Group Policy to hide power options is set.

Addresses an issue in which the correct lock screen image won't show when all of the following are true:

GPO policy “Computer Configuration\Administrative Templates\Control Panel\Personalization\Force a specific default lock screen and logon image” is enabled.

GPO policy "Computer Configuration\Administrative Templates\Control Panel\Personalization\Prevent changing lock screen and logon image" is enabled

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage is set to 1.

Addresses an issue in which a warning appears stating that the application is from an “unknown publisher” when running an application as an elevated user (Administrator).

Addresses an issue that causes sporadic authentication issues when using Web Account Manager.

Addresses an issue that sometimes causes the single-sign-on scenario to fail and presents the the logon tile when connecting to a Remote Desktop server.

Addresses an issue in which the memory usage of LSASS continues to grow until it is necessary to restart the system.

Addresses an issue in which the default domain for an Azure Active Directory-joined machine is not set on the logon screen automatically.

Addresses an issue that causes SQL Server memory usage to grow over time when encrypting data using a symmetric key that has a certificate. Then, you execute queries that open and close the symmetric key in a recursive loop.

Addresses an issue in which using an invalid password in a wireless PEAP environment that has SSO enabled causes the submission of two authentication requests with the invalid password. The excess authentication request may cause premature account lockouts in environments with low account lockout thresholds. To enable the changes, add the new registry key, “DisableAuthRetry” (Dword) on HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\26 using regedit, and set it to 1.

Addresses an issue that may cause the BITS service to become unresponsive when the service cannot connect to Internet resources.

Addresses an issue that prevents printing on a 64-bit OS when 32-bit applications impersonate other users (typically by calling LogonUser). This issue occurs after installing monthly updates starting with KB4034681, released in August 2017. To resolve the issue for the affected applications, install this update, and then do one of the following:

Use Microsoft Application Compatibility Toolkit to globally enable the Splwow64Compat App Compat Shim.

Use the following registry setting, and then restart the 32-bit application: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print Setting: Splwow64Compat

Type: DWORD
Value1: 1

Addresses an issue with DNS Response Rate Limiting that causes a memory leak when enabled with LogOnly mode.

Addresses an issue that sometime prevents a system from shutting down or being placed in Hibernation. This issue occurs on the first boot after performing disk encryption on an SSD drive.

Addresses an issue that prevents access to SMB shares using IP addresses if SMB hardening is enabled.

Addresses an issue in which using mandatory (read-only) user profiles for RDP might result in the error code, "Class not registered (0x80040151)".

Addresses an issue in which not all network printers are connected after a user logs on. The HKEY_USERS\User\Printers\Connections Key shows the correct network printers for the affected user. However, the list of network printers from this registry key is not populated in any app, including Microsoft Notepad or Devices and Printers. Printers may disappear or become non-functional.

Addresses an issue that causes in-place upgrades to Windows 10 version 1709 to stop responding at the “Making sure you’re ready to install” screen. This occurs while performing device inventory on devices that have installed monthly updates since April 2018.

Note WSUS can also deliver Dynamic Updates (DU) to devices when configured to sync Dynamic Update content. Verify that Dynamic Updates haven’t been disabled by the /DynamicUpdate Disable setup switch.

Addresses a rendering issue that occurs while dynamically modifying the classname or ID of elements on a page.

Addresses an issue that prevents Memory Analyzer and Performance Analyzer from working properly in Microsoft Internet Explorer 11 Developer Tools.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

Symptom Workaround Some non-English platforms may display the following string in English instead of the localized language: ”Reading scheduled jobs from file is not supported in this language mode.” This error appears when you try to read the scheduled jobs you've created and Device Guard is enabled Microsoft is working on a resolution and will provide an update in an upcoming release. When Device Guard is enabled, some non-English platforms may display the following strings in English instead of the localized language:

"Cannot use '&' or '.' operators to invoke a module scope command across language boundaries."

"'Script' resource from 'PSDesiredStateConfiguration' module is not supported when Device Guard is enabled. Please use 'Script' resource published by PSDscResources module from PowerShell Gallery."

Microsoft is working on a resolution and will provide an update in an upcoming release. After you install any of the July 2018 .NET Framework Security Updates, a COM component fails to load because of “access denied,” “class not registered,” or “internal failure occurred for unknown reasons” errors. The most common failure signature is the following:
Exception type: System.UnauthorizedAccessException
Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) For more information, see KB4345913.
Microsoft is working on a resolution and will provide an update in an upcoming release.
How to get this update

To download and install this update, go to Settings > Update & Security > Windows Update and select Check for updates.

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for cumulative update 4338817.
Click to expand...

Source: https://support.microsoft.com/en-us/help/4338817

Direct download links for KB4338817 MSU file from Microsoft Update Catalog:

*Arrow Download KB4338817 MSU for Windows 10 v1709 32-bit (x86) - 436.6 MB

*Arrow Download KB4338817 MSU for Windows 10 v1709 64-bit (x64) - 840.9 MB

Tip How to Turn On or Off Push Notifications for New Windows 10 Builds from TenForums.com

Find Windows 10 Version Number

Find Windows 10 Build Number

:)

Athlonite · Jul 24, 2018

What is the latest stable build of Win10 ?

If your not willing to run the latest V1803 build then I'd suggest sticking to v1709 from here http://windowsiso.net/windows-10-iso/windows-10-creators-update-1709-download-build-16299-15/ pick the one most applicable to you

sygnus21 · Jul 24, 2018

Cumulative Update KB4051963 Windows 10 v1709 Build 16299.98

I have looked there and I have seen them there before. However for me they are just not there anymore.

See my post:
Cumulative Update KB4051963 Windows 10 v1709 Build 16299.98 - Page 8 - Windows 10 Forums
Click to expand...

Can you post a screen shot of the settings page?

And which version of Windows do you have? Include Build number....

(Reference image)

mora67 · Jul 24, 2018

Cumulative Update KB4090913 Windows 10 v1709 Build 16299.251 - Mar. 5

Hi,

BTW, have you run Kyhi's ImageHealth on your system as I suggested?

Cheers, *Wink
Click to expand...

Now I finished, after step 2 result:

So I suppose that's it?

Windows 10: Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24

Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24

Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24

Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24

Cumulative Update KB4338817 Windows 10 v1709 Build 16299.579 - July 24 - Similar Threads - Cumulative Update KB4338817

Cumulative Update KB4516071 Windows 10 v1709 Build 16299.1420 Sept. 24 Win Update

Cumulative Update KB4505903 Windows 10 v1903 build 18362.267 - July 24

Cumulative Update KB4507465 Windows 10 v1709 Build 16299.1296 July 16

Cumulative Update KB4507455 Windows 10 v1709 Build 16299.1268 - July 9

Cumulative Update KB4338827 Windows 10 v1703 Build 15063.1235 -July 24

Cumulative Update KB4340917 Windows 10 v1803 Build 17134.191 - July 24

Cumulative Update KB4345420 Windows 10 v1709 Build 16299.550 - July 16

Cumulative Update KB4338825 Windows 10 v1709 Build 16299.547 - July 10

Cumulative Update KB4051963 Windows 10 v1709 Build 16299.98