March 25, 2021-KB5000854 (OS Build 17763.1852) Preview

 Highlights

• Updates an issue with zoom that occurs when using Microsoft Edge IE Mode on devices that use multiple high-DPI monitors.

• Updates an issue that displays nothing or shows “Computing Filters” indefinitely when you filter File Explorer search results. 

• Updates an issue with Japanese input that occurs after focus changes between boxes in Microsoft Edge Legacy. 

Improvements and fixes

This non-security update includes quality improvements. Key changes include:

• Addresses an issue with zoom that occurs when using Microsoft Edge IE Mode on devices that use multiple high-DPI monitors.

• Allows administrators to use a Group Policy to enable extended keyboard shortcuts, including Ctrl+S, for users in Microsoft Edge IE Mode.

• Addresses an issue that prevents users from adjusting or turning off the touchpad because of administrative settings.

• Addresses an issue with Japanese input that occurs after focus changes between boxes in Microsoft Edge Legacy.

• Addresses an issue with USB 3.0 hubs. A device connected to the hub might stop working when you set the device to hibernate or restart the device.

• Addresses an issue that displays nothing or shows “Computing Filters” indefinitely when you filter File Explorer search results.

• Addresses an issue with a heap leak that might cause explorer.exe to consume high amounts of memory.

• Updates the Volgograd, Russia time zone from UTC+4 to UTC+3.

• Adds a new time zone, UTC+2:00 Juba, for the Republic of South Sudan.

• Addresses an issue with the Windows Event Log Forwarding client, which returns the first matching certificate without checking private key permissions. With this update, the Windows Event Log Forwarding client selects the client’s certificate only if the Network Service has read permissions for the private key.

• Addresses an issue that causes PowerShell-based monitors to stop working when you enable transcription on the systems.

• Addresses an issue that prevents App-V applications from opening and generates error 0xc0000225.

• Addresses an issue in which some machines enrolled with a mobile device management (MDM) service fail to sync if the device manufacturer's name contains a reserved character.

• Addresses an issue with RSA key generation that generates a damaged key.

• Addresses an issue that prevents users from using the Remote Desktop Protocol (RDP) to connect to a Windows Server 2019 device that is in Desktop Experience mode.

• Addresses an issue that might prompt for credentials when not needed and might fail to authenticate in an Azure Active Directory environment.

• Addresses an issue that causes multiple instances of appidcertstorecheck.exe to run on a system when AppLocker is enabled and the system is not on the internet.

• Addresses an issue that might prevent Hypervisor-Protected Code Integrity (HVCI) from being enabled when you configure it using a Group Policy.

• Addresses an issue that causes a black screen or delays signing in to a Hybrid Azure Active Directory joined machine while the machine attempts to connect to login.microsoftonline.com.

• Addresses an issue that prevents the Chromium-based Microsoft Edge from working. This issue occurs when Microsoft Edge is used in combination with Microsoft App-V and fonts are enabled inside the virtual environment.

• Addresses an issue that causes a virtual machine (VM) to lose internet connectivity when you configure the Instance-Level Public IP and outbound network address translation (NAT) for the VM.

• Addresses an issue with input-output memory management unit (IoMMU) support on certain processors for Windows Server 2019 guest VMs that are on server virtualization software.

• Addresses possible race conditions that occur when the system calls NtOpenKeyEx(),which results in a stop error.

• Addresses an issue with high memory usage when performing XSLT transforms using MSXLM6.

• Addresses an issue that prevents Server Message Block 1 (SMB1) clients from accessing the SMB share after restarting the LanmanServer service.

• Addresses an issue that might cause the cluster network interface to stop working for a short time. As a result, the network interface controller (NIC) is marked as failed. When the network is operational again, the system might not detect that the NIC is working and the NIC remains in a failed status.

• Addresses an issue with signing in to a device that is in the current domain by using the default user profile of a device that is in a different, but trusted domain. The profile service of the current domain cannot retrieve the default user profile from the trusted domain and uses the local default user profile instead.

• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.

• Addresses an issue that turns on Caps lock unexpectedly when using RemoteApp.

• Adds new capabilities to the Packet Monitor (PKTMON) network diagnostic tool. 

• Addresses an issue with the svhost process that hosts the Microsoft-Windows-TerminalServices-LocalSessionManager. The svhost process consumes increasingly large amounts of memory because of a leak in COMMAND_ENTRY objects. Memory leaks might cause issues when signing in to an application or to the Remote Desktop. In extreme cases, the server might stop responding.

• Addresses an issue that prevents you from specifying up to 255 columns when you use the Jet Text installable indexed sequential access method (IISAM) format.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Known issues in this update

How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

If you are using Windows Update, the latest SSU (KB5000859) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.

Install this update

File information 

For a list of the files that are provided in this update, download the file information for cumulative update 5000854..