August 13, 2019—KB4512489 (Security-only update)

Symptom

Workaround

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

• Perform the operation from a process that has administrator privilege.

• Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error "Status: 0xc0000001, Info: A required device isn't connected or can't be accessed" after installing this update on a WDS server.

This issue is resolved in KB4512478.

After installing this update, applications that were made using Visual Basic 6 (VB6), macros using Visual Basic for Applications (VBA), and scripts or apps using Visual Basic Scripting Edition (VBScript) may stop responding and you may receive an "invalid procedure call error."

This issue is resolved in KB4517298, which is an optional update. It is now available on Microsoft Update Catalog and Windows Server Update Services (WSUS).

When attempting to print from a 32-bit app on a 64-bit operating system (OS), you may receive an error, or the application may stop responding or close.

Note This issue only affects the 64-bit Security Only updates listed and does not affect any Monthly Rollup.

This issue is resolved in KB4525250.  However, the issue occurs when you install only KB4512489(released on August 13, 2019) without installing KB4507457, the previous Security Only update (released July 9, 2019).

Reminder When using the Security Only updates, you must install the latest and all previous Security Only updates to ensure that the device contains all resolved security vulnerabilities.

Release Channel

Available

Next Step

Windows Update and Microsoft Update

No

See the other options below.

Microsoft Update Catalog

Yes

To get the standalone package for this update, go to the Microsoft Update Catalog.

Windows Server Update Services (WSUS)

Yes

This update will automatically synchronize with WSUS if you configure Products and Classifications as follows:

Product: Windows 8.1, Windows Server 2012 R2

Classification: Security Updates