KB5023697 Updates Windows 10 1607 to Build 14393.5786

Microsoft releases the second Tuesday patch update for all Windows versions and Windows Servers. In this post, we will discuss the cumulative update KB5023697 that comes exclusively for Windows 10 version 1607, including known issues, fixes, and improvements on this security update.


Direct Download Links to KB5023697

To download and install the latest version of Windows 10 version 1607 or Windows Server 2016, use these direct download links. 

KB5023697 Changelog


With this update, Microsoft brings the following changes and fixes to your computer –

  • Implements phase three of Distributed Component Object Model (DCOM) hardening. To know more about this, see KB5004442. Do note that you won’t be able to turn off any changes using the registry key after you have upgraded to this Build OS.
  • Microsoft confirms supporting the United Mexican States government’s order on Daylight Saving Time for the year 2023.
  • Resolves an issue that affects the Local Security Authority Subsystem Service (LSASS). Earlier, this problem was causing LSASS to stop responding. This occurs after you run Sysprep on a domain-joined machine.
  • Addresses an issue affecting a computer account and Active Directory. Previously, this error was preventing users from joining an active directory domain using the same computer account. This error was known to occur only on devices that have installed Windows updates dated October 11, 2022, or later.

When you face this problem, you may see an error message as well that reads the following – 

The error message is, “Error 0xaac (2732): NERR_AccountReuseBlockedByPolicy: ‘An account with the same name exists in Active Directory. Re-using the account was blocked by the security policy.’”

For more information, see KB5020276.

Known Issues with this update

Microsoft is not currently aware of any issues with this update. So, it is safe to assume no new bugs or issues will pop up after installing this security update on Windows 10 version 1607. 

How to download this security update

Assuming you did go through the changelog and known issues with this update, and now you want to install this security update on your computer. Well, you don’t require to do anything as this update will install on its own if you haven’t disabled automatic updates on your computer.

In case you didn’t find this patch update, manually check for it by visiting the below path –

Settings > Update & Security > Windows Update 

Head over to the right pane and click Check for updates. The system will check for any pending updates online and download/install the available ones. All you require is to restart your computer and your system upgrades to OS Build 14393.5786.

Alternatively, you may also download this update manually from Microsoft’s Update Catalog. Make sure to check your system architecture first and download the standalone package accordingly.

Release Note