January 10, 2023—KB5022289 (OS Build 14393.5648)

**Important:**For Windows Recovery Environment (WinRE) devices, see the updated (1/20/23) Special instructions for Windows Recovery Environment (WinRE) devices in the How to get this update section to address security vulnerabilities in CVE-2022-41099.

1/10/23 **REMINDER **Today, January 10, 2023, the public extension for servicing devices that have the Intel Atom Clover Trail processor ends. This January 10, 2023 security update is the last update for these devices. After today, they will not receive monthly security and quality updates. These updates protect you from the latest security threats. Unfortunately, these devices do not meet the hardware requirements to upgrade to a newer version of Windows 10 or Windows 11. We recommend that you consider a new device that has Windows 11

11/19/20
For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 1607, see its update history page.

Highlights

• This update addresses security issues for your Windows operating system.

Improvements

This security update includes quality improvements. When you install this KB:

• New! This update provides the Quick Assist application for your client device_. _
• This update addresses an issue that might affect authentication. It might fail after you set the higher 16-bits of the msds-SupportedEncryptionTypes attribute. This issue might occur if you do not set the encryption types or you disable the RC4 encryption type on the domain.
• This update addresses an issue that affects cluster name objects (CNO) or virtual computer objects (VCO). Password reset fails. The error message is, "There was an error resetting the AD password… // 0x80070005”.
• This update introduces a Group Policy that enables and disables HTML Application (HTA) files. If you enable this policy, it stops you from running HTA files. If you disable or do not configure this policy, you can run HTA file. To configure this Group Policy:
  • Open the Group Policy Editor.
  • Select Computer Configuration >Administrative Templates>Windows Components > Internet Explorer.
  • Double-click Turn on DisableHTMLApplication.
  • Select Enabled.
  • To save the policy setting, select OK orApply.
• This update addresses a known issue that affects apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to databases. The connection might fail. You might also receive an error in the app, or you might receive an error from the SQL Server.
  If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device. For more information about security vulnerabilities, please refer to the new Security Update Guide website and the January 2023 Security Updates.

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update