June 8, 2021—KB5003697 (Monthly Rollup)

**Important:**Windows Server 2012 has reached the end of mainstream support and is now in extended support. Starting in July 2020, there will no longer be optional releases (known as “C” or “D” releases) for this operating system. Operating systems in extended support have only cumulative monthly security updates (known as the “B” or Update Tuesday release).

Verify that you have installed the required updates listed in the How to get this update section before installing this update.

For information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article. To view other notes and messages, see the Windows Server 2012 update history home page.

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB5003208 (released previous May 11, 2021) and addresses the following issues:

• Security updates to Windows App Platform and Frameworks, Windows Cloud Infrastructure, Windows Authentication, Windows Fundamentals, Windows Storage and Filesystems, Windows HTML Platform, and Microsoft Scripting Engine.
  For more information about the resolved security vulnerabilities, please refer to the new Security Update Guide website.

Known issues in this update

• Error 5: access is denied

• Error 1764: The requested operation is not supported.

• System.InvalidOperationException,Microsoft.PowerShell.Commands.GetEventLogCommand

• Windows has not provided an error code.
  Note Event Viewer and other apps using current non-legacy APIs to access event logs should not be affected.| This is expected due to security hardening changes relating to Event Tracing for Windows (ETW) for CVE-2021-31958. This issue is resolved if the local and remote devices both have installed updates released June 8, 2021 or later.
  |
  Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.| Do one of the following:

• Perform the operation from a process that has administrator privilege.

• Perform the operation from a node that doesn’t have CSV ownership.
  Microsoft is working on a resolution and will provide an update in an upcoming release.

How to get this update

File information

For a list of the files that are provided in this update, download the file information for update 5003697.