KB4598243 updates Windows 10 1607 to Build 14393.4169

Windows 10 version 1607 receives a new cumulative update i.e. KB4598243 on 12th Jan 2021, fixing three pre-existing vulnerabilities and security patches for Windows apps and components. In addition to this, the new patch also resolves a blue-screen type error and Netlogon scalability issue.

You may get this security patch either through Windows Update, WSUS, or manually via the Update Catalog site. Let’s explore the key highlights that came along with this cumulative update. 

KB4598243 Changelog

Here are the key features that you will receive after applying the KB4598243 update on your device –

  • Security Updates for the following – Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Media, Windows Fundamentals, Windows Cryptography, Windows Virtualization, Windows Peripherals, and Windows Hybrid Storage Services.
  • Windows 10 1607 users may now modify group policy to show only the domain and the username while logged in.
  • Addresses a blue screen of death error that arises because of Remote Desktop Protocol (RDP) redirector (rdpdr.sys).
  • Works upon a Netlogon scalability issue that simply delays authentication traffic on the computer.

Apart from the above fixes, this update also addresses three vulnerability issues which are as follows –

  1. Resolves a security bypass vulnerability that comes into the picture when the Printer Remote Procedure Call (RPC) binding handles authentication for the remote Winspool interface. 
  2. Additionally, this also works upon a security vulnerability issue with HTTPS-based intranet servers.

Users who have installed Windows 10 updates between dates – 10 Nov 2020 to 8 Dec 2020, complained of not being able to obtain a Kerberos service ticket from Active Directory domain controllers (DC). The two primary reasons behind this problem were –

    • Windows 10 updates containing CVE-2020-17049 protections
    • Configuring the PerfromTicketSignature reg file to 1 or higher. 

Ticket acquisition simply fails on error - "KRB_GENERIC_ERROR". Usually, this occurs when callers submit a PAC-less Granting Ticket (TGT) as an evidence ticket without providing the USER_NO_AUTH_DATA_REQUIRED flag.

This bug gets resolved after upgrading Windows 10 version 1607 to Build 14393.4169.

Known Issues on KB4598243 

There’s one bug that you may encounter after installing this cumulative update for Windows 10 1607 – 

  • 2245 (NERR_PasswordTooShort)

The above error occurs if you have configured the “Minimum Password Length” group policy to use more than 14 characters. You may solve this issue by using characters less or equal to 14. 

How to Get this Security Patch

To obtain this cumulative update for your device, you may follow any of the below methods –

Quick Note: Make sure to first download and install the recent servicing stack i.e. KB4576750 on your device. This will, in turn, ensures the update process finishes without getting into any bug or error. 

1] Windows Update

  • Press WinKey + I to launch the Settings app.
  • Select Update & Security > Windows Update.
  • On the right page, click Check for Updates
  • The system will then automatically search for any pending updates and if available, this will automatically download and install the same. 

2] Windows Server Update Services (WSUS):

Similar to the above method, this too updates Windows automatically if you configure your device as below –

  • Product: Windows 10
  • Classification: Security Updates

3] Update Catalog Site

If you are not able to get Windows 10 updates for whatsoever reason, you may manually download and install the standalone package. Here’s how to perform this task –

  • Visit Microsoft’s official site.
  • Here, pick the one that best matches your system configuration.
  • Hit the Download button available on the right-end. See the Snapshot below –

KB4598243

  • Subsequently, click the top link. The download process will immediately begin.
  • When the download completes, open the folder containing the setup file and double-click on it.

Release Note