KB4493470 Patch Update- takes Windows 10 1607 to Build 14393.2906

Microsoft brings KB4493470 Patch Update for Windows 10 1607 users on 9th April. This is the last delta update for this version and it upgrades the existing OS to build 14393.2906.

Here, in this article, we will discuss general improvements and fixes along with known issues after installing this update on your System. Let’s explore KB4493470 in detail –

KB4493470 Patch Update

Windows 10 1607- Improvements and fixes

There are no new operating features brought with this update, however, some quality improvements do come. The key changes are as follow-

  1. They address an issue to meet GB18030 standard certificate requirements.
  2. Earlier, the apps which use MSXML6 fail to respond whenever an exception comes out during node operations. They have fixed this bug in this release.
  3. The Company also fixes the trouble in which Group Policy editor stops responding while editing a GPO which consists of policy preferences for IE 10 internet settings.
  4. They address the issue which results in BSOD error while using per font EUDC.
  5. They resolve an issue which brings authentication trouble on Internet Explorer 11 or similar apps that use WININET.DLL. This problem pops up only when two or more people try to log in on the same Windows Server Machine using a single user account. The same bug appears while trying multiple, concurrent login session on Remote Desktop Protocol or Terminal Server logons.
  6. New security updates are now available for Windows MSXML, Microsoft Scripting Engine, Windows Server, Microsoft JET Database Engine and Windows SQL components. Windows Storage & Filesystems, Windows Datacenter Networking, Microsoft Graphics Component, Windows App Platform & Frameworks also receive security updates.

Known Issues- KB4493470 Patch Update


After installing this update, SCVMM can’t enumerate or manage logical switches that are deployed on the host.

This occurs only on those hosts which are managed by System Center Virtual Machine Manager i.e. SCVMM.

A stop error may also appear inside vfpext.sys on the hosts if you don’t follow the best practices.

To solve this bug, try any of these two solutions-

  1. Run mofcomp on the following of files on the affected host:
    • Scvmmswitchportsettings.mof
    • VMMDHCPSvr.mof
  2. Follow the best practices while patching to avoid a stop error in vfpext.sys in an SDN v2 environment (NC managed hosts).
After installing KB4467684, the cluster service stops to respond with error “2245 (NERR_PasswordTooShort)”. This occurs when “Minimum Password Length” is configured with greater than 14 characters on the group policy.

You can set the domain default to using only 14 characters as a “minimum password length” policy to solve this bug.

Microsoft is working on a resolution and will provide an update in an upcoming release.

When you install this patch-up, Custom URI Schemes may not start the respective app for local intranet or trusted sites on IE 10. This is applicable only for Application Protocol handlers.

Here, we explain two different methods to fix this issue-

1. Do a right-click on the URL link then choose open in new window or tab option.

2. Turn On the protected mode in internet explorer for trusted sites or a local intranet. Here is the procedure-

  • At first, navigate to Tools–> Internet options–> Security.
  • Here, choose the local intranet option under Select a zone to view or change security settings.
  • Succeeding after, choose Enable protected mode option.

At last, hit OK and restart your PC so that changes made so far come into effect.

Microsoft is working on this and once found, will bring this with its next cumulative update.

Some Users come to know of certain issues when they install this update release on their System. Errors that appear are PXE fails to start a device on the WDS server which is configured to use variable Windows Extension.

  • PXE- Preboot Execution Environment
  • WDS- Windows Development Services

This occurs as a connection to the WDS server terminate automatically, hence the image couldn’t be downloaded.

Sol– You can try any of these three fixes to fix this issue-

Fix 1: Open Command prompt as administrator thereafter copy & paste below command line then press Enter.

Wdsutil /Set-TransportServer /EnableTftpVariableWindowExtension:No

Fix 2: You can resolve this trouble using Windows Deployment Services UI as well. Here is the procedure-

  • At first, open Windows Deployment Services from Windows Administrative Tools.
  • Now expand Servers then make a right-click on the WDS server.
  • Again, open its properties thereafter clear the Enable Variable Window Extension box on the TFTP tab.

Fix 3: If the above two fixes don’t help you, try this method as last resort.

  • At first, navigate to the following path-



  • Succeeding after, alter the value of this particular entry to ‘0’.

At last, disable the Variable Windows Extension henceforth reboot the WDSServer services.

The Company is working on a resolution to this and may provide the solution in its upcoming release.

How to get this update

It is required to install the latest SSU i.e. (KB4485447) on your PC as this will make sure that the Whole Update Process is smooth and reliable. Only then, you should try installing the KB4493470 patch update on the System.

Note: SSU stands for servicing stack updates whereas LCU for “latest cumulative update”.

You will get the whole update package automatically through the Windows Update section. In case, you don’t want to wait and install this patch-up manually on your PC, follow these steps-

  • At first, navigate to the following path.
Settings --> Update & Security --> Windows Update

To get the standalone package, one should visit Microsoft Update Catalog.