Cumulative update for Windows 10 Version 1511: October 11, 2016

2017-05-02T05:22:35
ID KB3192441
Type mskb
Reporter Microsoft
Modified 2017-05-02T05:23:01

Description

<html><body><p>Describes a security update that includes improvements and fixes in the functionality of Windows 10 Version 1511.</p><h2>Summary</h2><div class="kb-summary-section section">This security update includes <a href="http://windows.microsoft.com/en-us/windows-10/update-history-windows-10" id="kb-link-2" target="_self">improvements and fixes</a> in the functionality of Windows 10 Version 1511. It also resolves the following vulnerabilities in Windows:<br/><br/><ul class="sbody-free_list"><li><a href="https://support.microsoft.com/help/3193229" id="kb-link-3" target="_self">3193229</a> MS16-125: Security update for diagnostics hub: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3193227" id="kb-link-4" target="_self">3193227</a> MS16-124: Security update for Windows registry: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3192892" id="kb-link-5" target="_self">3192892</a> MS16-123: Security update for kernel-mode drivers: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3195360" id="kb-link-6" target="_self">3195360</a> MS16-122: Security update for Microsoft video control: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3192884" id="kb-link-7" target="_self">3192884</a> MS16-120: Security update for Microsoft graphics component: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3192890" id="kb-link-8" target="_self">3192890</a> MS16-119: Cumulative security update for Microsoft Edge: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3192887" id="kb-link-9" target="_self">3192887</a> MS16-118: Cumulative security update for Internet Explorer: October 11, 2016</li><li><a href="https://support.microsoft.com/help/3178465" id="kb-link-10" target="_self">3178465</a> MS16-101: Security update for Windows authentication methods: August 9, 2016</li></ul>Windows 10 updates are cumulative. Therefore, this package contains all previously released fixes.<br/><br/>If you have installed previous updates, only the new fixes that are contained in this package will be downloaded and installed to your computer. If you are installing a Windows 10 update package for the first time, the package for the x86 version is 525 MB and the package for the x64 version is 989 MB. </div><h2>Known issues in this security update</h2><h5 class="sbody-h5 text-subtitle">Issue 1</h5><div class="kb-moreinformation-section section"><span class="text-base">Symptom</span><br/><br/>After you install this security update, System Center Operations Manager (SCOM) Management Console crashes in State view.<br/><br/><span class="text-base">Resolution</span><br/><br/>To resolve this issue, install the following update:</div><div class="indent"><a href="https://support.microsoft.com/en-us/help/3200068" id="kb-link-11">3200068 </a> Cumulative Update for Windows 10 Version 1511: October 18, 2016</div><h5 class="sbody-h5 text-subtitle">Issue 2</h5><div class="kb-moreinformation-section section"><span class="text-base">Symptom</span><br/><br/>After you install this security update, some DFS-N mapped network drives may be inaccessible to members of the Administrators group when UAC and EnableLinkedConnections are enabled. This occurs when the process that is attempting to access the mapped network drive, is running in a different elevation status than the process that created the mapped network drive. For example, an Explorer window, that is an unelevated process, is unable to access a mapped drive created by a logon script, that runs in an elevated context.</div><div class="kb-moreinformation-section section"><span class="text-base">Resolution</span><br/><br/>To resolve this issue, install the update <a href="http://support.microsoft.com/help/4013198">KB4013198</a>.</div><h2>How to get this update</h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">Method 1: Windows Update</h3>This update will be downloaded and installed automatically.<h3 class="sbody-h3">Method 2: Microsoft Update Catalog</h3>To get the stand-alone package for this update, go to the <a href="http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3192441" id="kb-link-13" target="_self">Microsoft Update Catalog</a> website.<h3 class="sbody-h3">Prerequisites</h3>There are no prerequisites for installing this update.<h3 class="sbody-h3">Restart information</h3>You must restart the computer after you apply this update.<h3 class="sbody-h3">Update replacement information</h3>This update replaces the previously released updates <a href="https://support.microsoft.com/help/3185614" id="kb-link-14" target="_self">3185614</a> and <a href="https://support.microsoft.com/help/3193517" id="kb-link-15" target="_self">3193517</a>.<h3 class="sbody-h3">File Information</h3>For a list of the files that are provided in this cumulative update, download the <a href="http://download.microsoft.com/download/c/5/4/c54f5e36-f5f1-4bf6-ac16-dbb36735e06e/3192441.csv" id="kb-link-16" target="_self">file information for cumulative update 3192441</a>.</div><h2>More Information</h2><div class="kb-moreinformation-section section">This package updates the Connected User Experiences and Telemetry service to provide benefit for enterprises by using <a href="https://technet.microsoft.com/en-us/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics" id="kb-link-17" target="_self">Upgrade Analytics</a> to plan and manage the Windows upgrade process. This update includes the following:<br/><br/><ul class="sbody-free_list"><li>Support to enable upload of telemetry and download of settings in an authenticated proxy environment</li><li>Support to configure a specific proxy to upload telemetry and download settings</li><li>Support for Azure Active Directory (AAD) tenant identity </li></ul>The Connected User Experiences and Telemetry service collects usage and diagnostics information from Windows. You can learn more about <a href="http://go.microsoft.com/fwlink/p/?linkid=800316" id="kb-link-18" target="_self">configuring Windows telemetry in your organization</a> here.<br/><br/>This update also resolves known issues that are caused by security update <a href="https://support.microsoft.com/help/3170005" id="kb-link-19" target="_self">3170005</a>. For more information about the known issues, see the <br/><a href="https://support.microsoft.com/help/3170005#mitigations" id="kb-link-20" target="_self">Oct 2016 Update: Mitigation for known issues</a> section in <a href="https://support.microsoft.com/en-us/help/3170005" id="kb-link-21" target="_self">KB 3170005</a>. <br/><br/>Additionally, this update uses SSL (TCP Port 443) to download manifests and upload telemetry to Microsoft that uses the following DNS endpoints:<br/><br/><ul class="sbody-free_list"><li>v10.vortex-win.data.microsoft.com</li><li>settings-win.data.microsoft.com</li></ul>This update contains the following two manifests that are used by the service.<br/><br/><ul class="sbody-free_list"><li>telemetry.ASM-WindowsDefault.json</li><li>utc.app.json</li></ul><h3 class="sbody-h3">Registry information</h3><span><span class="text-base">Important</span>Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, <a href="https://support.microsoft.com/en-us/help/322756" id="kb-link-22">back up the registry for restoration </a> in case problems occur. </span><br/><br/>By default on Windows 10, support for sending usage and diagnostics information through an authenticated proxy is disabled. When the setting isn't disabled (0x0) through the following registry subkey, the Connected User Experiences and Telemetry service will impersonate a logged on user to authenticate with the proxy to send the information. If you are using <a href="https://technet.microsoft.com/en-us/itpro/windows/deploy/manage-windows-upgrades-with-upgrade-analytics" id="kb-link-23" target="_self">Upgrade Analytics</a> in a network environment that uses an authenticated proxy, we recommends configuring this setting to 0x0.<ol class="sbody-num_list"><li>Locate and then select the registry subkey <strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection </strong></li><li>On the <span class="text-base">Edit</span> menu, point to <span class="text-base">New</span>, and then click <span class="text-base">DWORD Value.</span></li><li>Type <span class="sbody-userinput">DisableEnterpriseAuthProxy</span>, and then press the Enter key.</li><li>In the <span class="text-base">Details</span> pane, right-click <strong class="uiterm">DisableEnterpriseAuthProxy</strong>, and then click <span class="text-base">Modify.</span></li><li>In the Value data box, type <span class="sbody-userinput">0</span> (not disabled) or <span class="sbody-userinput">1</span> (disabled), and then click <strong class="uiterm">OK.</strong></li></ol>You can also configure Connected User Experiences and Telemetry to forward usage and diagnostics information to a specific proxy server by using the following registry path. You can specify the FQDN or IP address of the proxy server and optionally a port number.<ol class="sbody-num_list"><li>Locate and then select the registry subkey<strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection </strong></li><li>On the <span class="text-base">Edit</span> menu, point to <span class="text-base">New</span>, and then click <strong class="uiterm">String Value.</strong></li><li>Type <span class="sbody-userinput">TelemetryProxy</span>, and then press the Enter key.</li><li>In the <span class="text-base">Details</span> pane, right-click <strong class="uiterm">TelemetryProxy</strong>, and then click <span class="text-base">Modify.</span></li><li>In the Value data box, type <strong class="sbody-strong"><span class="sbody-userinput">server:port</span></strong>, and then click <strong class="uiterm">OK.</strong></li></ol></div><h2>References</h2><div class="kb-references-section section">Learn about the <a href="https://support.microsoft.com/help/824684" id="kb-link-24" target="_self">terminology</a> that Microsoft uses to describe software updates.<br/></div></body></html>