就在今天中午1607用户忽然发现又一个更新补丁，查看微软消息说是系统会更新到14393.1613.
关于KB4034658的msu离线下载地址：http://www.catalog.update.microsoft.com/Search.aspx?q=KB4034661
译文：
在从Windows Server 2016部署的Citrix XenApp上启动应用程序时出现黑屏的问题。有关详细信息，请参阅CTX225819。
遇到其他打开的窗口时，用户帐户控制（UAC）提示有时出现隐藏的问题。
在来自其他域控制器（DC）的用户登录事件（ID 4624）中导致数据损坏的事件收集器数据的问题。
在PowerShell命令Add-HgsAttestationTpmHost无法找到系统的认可密钥证书的问题，即使证书存在。
在某些情况下，加密硬盘驱动器设备在系统启动时不会自动解锁。
解决问题时，AppLocker规则向导在选择帐户时崩溃。
解决了第三方目录结构导致磁盘清理以使引导驱动器无法访问的问题。
解决了NtfsQueryLinksInfo中的不同步访问导致系统崩溃的问题。
遇到极大数量的I / O冲洗可能导致错误的问题。
解决了当用户给智能卡引脚提示输入错误时发生的可靠性问题。
解决问题，通过增加超时窗口启动Docker for Windows以避免0x5b4错误。
当ADFX服务器配置为使用HTTP代理时，会解决Azure Multi Factor Authentication（MFA）问题。
在ADFS 4.0和Windows Server 2016 RS1 ADFS服务器的安全事件日志中，411个事件未记录主叫IP地址的问题。即使在启用成功审核和失败审核后也会出现此问题。
解决了计算机帐户失去其域成员资格的错误1789“此工作站与主域之间的信任关系失败”。当用户密码无法更改时，内部发生同样的问题，错误为0xc0000206“缓冲区对于指定的操作无效。
解决的问题是，在计划重新启动主服务器之后，存储复制不会按预期自动恢复。此外，Storage Replication服务在重新启动后随机失败。
如果用户从网络断开连接并重新启动，则使用GPO登录脚本映射网络驱动器的问题将会失败。当用户再次登录时，映射的驱动器不可用。即使登录脚本的持久性标志设置为TRUE，也会出现此问题。
解决问题，卸载SMBv1后，如果您将SPN验证级别设置为2，当您远程访问UNC共享（例如\\ <MachineName> \ C $）时，请求将以STATUS_ACCESS_DENIED失败。
解决问题，当尝试使用RD网关进行连接时，远程桌面客户端无法间歇性连接或断开连接。
向ADFS代理服务器呈现过期或撤销的证书的问题不会向用户返回错误。
如果您安装了较早版本的更新，则只有包中包含的新修补程序将被下载并安装在您的设备上。
原文如下：
This package contains d3dcompiler_47.dll; for more information, read the blog post, HLSL, FXC, and D3DCompile.
Addressed issue where a black screen appears when launching an application on Citrix XenApp that was deployed from Windows Server 2016. For more details, read CTX225819.
Addressed issue where the User Account Control (UAC) prompt sometimes appears hidden under other opened windows.
Addressed issue in the event collector data that caused data corruption with % symbols in the user logon events (ID 4624) from other Domain Controllers (DCs).
Addressed issue where the PowerShell command Add-HgsAttestationTpmHost fails to find the Endorsement Key Certificate for a system even though the certificate exists.
Addressed issue where, in some cases, an Encrypted Hard Drive device would not automatically unlock at system startup.
Addressed issue where the AppLocker rules wizard crashes when selecting accounts.
Addressed issue where third-party directory structures caused Disk Cleanup to render a boot drive inaccessible.
Addressed issue where unsynchronized access in NtfsQueryLinksInfo led to a system crash.
Addressed issue where an extremely high number of I/O flushes might lead to an error.
Addressed a reliability issue that occurs when a user gives the wrong input to the smart card pin prompt.
Addressed issue by increasing the time out window when starting Docker for Windows to avoid 0x5b4 errors.
Addressed issue with Azure Multi Factor Authentication (MFA) when an ADFX server is configured to use an HTTP Proxy.
Addressed issue where the calling IP address is not logged by 411 events in the Security Event log of ADFS 4.0 and Windows Server 2016 RS1 ADFS servers. This issue occurs even after enabling Success Audits and Failure Audits.
Addressed issue where a computer account loses its domain membership with the error 1789, “The trust relationship between this workstation and the primary domain failed.” The same problem happens internally when a user password cannot be changed with error 0xc0000206, “The size of the buffer is invalid for the specified operation.”
Addressed issue where, after a planned restart of the primary server, storage replication doesn't automatically resume as expected. Also, Storage Replication service randomly fails after restart.
Addressed issue where using a GPO logon script to map a network drive fails if the user disconnects from the network and restarts. When the user logs in again, the mapped drive is not available. This issue occurs even though the logon script has the persistence flag set to TRUE.
Addressed issue where after uninstalling SMBv1, if you set the SPN validation level to 2, when you access a UNC share remotely (e.g., \\<MachineName>\C$), the request will fail with STATUS_ACCESS_DENIED.
Addressed issue where the Remote Desktop client cannot connect or disconnects intermittently when trying to connect using the RD Gateway.
Addressed issue where presenting an expired or revoked certificate to the ADFS Proxy server does not return an error to the user.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.
|
弡
发表于 2017-08-17 13:54:05
