Microsoft today released Windows 11 22H2 system patch update KB5023706 (OS Build 22621.1413), bringing a number of new features, improvements and more. This update addresses security issues with the Windows operating system.
Improvements
This security update includes improvements as part of Update KB5022913 (released February 28, 2023). When installing this KB.
This update implements the third phase of the Distributed Component Object Model (DCOM) enhancements. See KB5004442. After installing this update, users cannot turn off changes using registry entries.
This update resolves an issue affecting computer accounts and Active Directory. When reusing an existing computer account to join an Active Directory domain, the join fails. This occurs on devices with Windows updates installed on or after October 11, 2022. The error message is Error 0xaac (2732): NERR_AccountReuseBlockedByPolicy: ‘An account with the same name exists in Active Directory. Re-using the Re-using the account was blocked by security policy.'” For more information, see KB5020276.
Some feature notes for KB5022913.
New feature! This update adds a new Tamil Anjar keyboard for Tamil. To add it, make sure Tamil (Singapore), Tamil (Malaysia), Tamil (Sri Lanka) or Tamil (India)) appears in Settings > Time & Language > Language & Region. Select the ellipsis (…) next to the language. .). Select “Language options”. Add Tamil Anjal (QWERTY) to the list of keyboards.
This update improves the reliability of Windows after installing the update.
This update affects Mexico, United States. This update supports the government’s 2023 Daylight Saving Time change order.
This update resolves a date information issue. It affects the date format sent between Windows and certain versions of the Heimdal Kerberos library.
This update resolves a compatibility issue affecting certain printers. These printers use the Windows Graphics Device Interface (GDI) printer drivers. These drivers do not follow the GDI specification exactly.
This update resolves an issue affecting the software keyboard. It will not appear in OOBE (Out-of-box experience) after a one-click reset (restoring factory settings). This type of reset requires an external keyboard to be attached to provide credentials.
This update fixes an issue affecting AppV. It prevents file names from having the correct letter case (upper or lower case).
This update resolves an issue affecting Microsoft Edge. This issue removes the conflict policy for Microsoft Edge. This can occur when MDMWinsOverGPFlag is set in a Microsoft Intune tenant and Intune detects a policy conflict.
This update resolves an issue affecting pre-matched packages. In some cases, they could not be applied when elevation was required.
This update resolves an issue affecting Azure Active Directory (Azure AD). Batch pre-provisioning using pre-provisioning packages failed.
This update resolves an issue affecting the Configuration Service Provider (CSP) for Universal Printing. When installing a printer, a command prompt window is displayed.
This update resolves a reliability issue that occurred when using Job View.
This update resolves an issue that may affect lsass.exe. It may stop responding. This occurred when it sent Lightweight Directory Access Protocol (LDAP) queries to a domain controller with a very large LDAP filter.
This update resolves an issue that affects the Local Security Agency Subsystem Service (LSASS). the LSASS may stop responding. This happens after running Sysprep on a computer that has joined the domain.
This update resolves an issue affecting replication from the network to the local drive. For some users, replication was slower than expected.
This update resolves an issue affecting parity-checked virtual disks. Creating them using Server Manager failed.
If a user installed an earlier update, only the new updates included in this package will be downloaded and installed on the device.
Windows 11 Service Stack Update – 22621.1344
This update provides quality improvements to the service stack, which is the component that installs Windows updates. Service Stack Update (SSU) ensures that users have a robust and reliable service stack so that devices can receive and install Microsoft updates.
The following are known issues.
Issue 1: Applies to IT administrators. Using pre-configured packages on Windows 11 version 22H2 (also known as Windows 11 2022 Update) may not work as expected. Windows may be only partially configured and the out-of-the-box experience may not complete or may reboot unexpectedly. Configuration packages are .PPKG files that are used to help configure a new device for use on an enterprise or school network. Pre-configured packages applied during the initial setup are most likely to be affected by this issue.
Note: Pre-configured Windows devices using Windows Autopilot are not affected by this issue. Windows devices used by consumers in their homes or small offices are less likely to be affected by this issue.
Solution: If users can configure Windows devices before upgrading to Windows 11 version 22H2, this will prevent the issue from occurring. Microsoft is currently investigating and will provide an update in an upcoming release.
Issue 2: Applies to IT administrators. Copying large multi-gigabyte (GB) files on Windows 11 version 22H2 may take longer than expected to complete. Users are more likely to experience this problem when copying files from a network share to Windows 11 version 22H2 via Server Message Block (SMB), but local file copying may also be affected. Windows devices used by consumers at home or in small offices are less likely to be affected by this issue.
Solution: To mitigate this issue, users can take advantage of a file copying tool that does not use a cache manager (buffered I/O). This can be done by using the following built-in command line tools listed below.
Issue 3: Applies to IT administrators. Some Windows Server Update Services (WSUS) servers may not provide updates to Windows 11 version 22H2 that are released on or after February 14, 2023. Updates will be downloaded to the WSUS server, but may not be delivered further to client devices. The only affected WSUS servers are those running Windows Server 2022 and have been upgraded from Windows Server 2016 or Windows Server 2019. This issue is caused by the accidental removal of the required Unified Update Platform (UUP) MIME type during an upgrade to Windows Server 2022 from a previous version of Windows Server. This issue may affect security updates or feature updates for Windows 11 version 22H2.Microsoft Configuration Manager is not affected by this issue.
Solution: To mitigate this issue, see Adding file types locally to the Unified Update Platform.
Microsoft is working on a solution and will provide an update in an upcoming release.
Issue 4: Applies to all users. Windows devices with certain third-party UI customization applications may not start after installing this update or later. These third-party applications may cause errors in explorer.exe, which may repeat multiple times in a loop. Known affected third-party UI customization applications are ExplorerPatcher and StartAllBack. these types of applications typically use unsupported methods to implement their customizations and therefore may produce unexpected results on Windows devices.
Solution: Microsoft recommends uninstalling any third-party UI customization applications before installing this update or future updates to prevent this issue. If the user is already experiencing this issue on their Windows device, they may need to contact the customer support of the developer of the application they are using. If StartAllBack is in use, this issue can be prevented by updating to the latest version (v3.5.6 or later).
