• Microsoft releases update KB5011831 for Windows 10 21H2.
  • The update bumps the version number to build 19044.1679.
  • The update KB5011831 improves servicing for Secure Boot.
  • This release also brings a lot of improvements and fixes.
  • Initially released as build 19044.1682, now the update is available as build 19044.1682.

As part of the next Patch Tuesday update, Microsoft is making the update KB5011831 for devices running Windows 10 21H2 (and versions 21H1 and 20H2) as an optional install in the Stable Channel. The update is a non-security update that delivers a bunch of fixes and improvements that the company is expected to ship with the next maintenance update.

Initially released as build 19044.1682, now the update is available as build 19044.1682.

Windows 10 update KB5011831 bumps the version number to build 19042.1682 (20H2), 19043.1682 (21H1), and 19044.1682 (21H2), and according to the logs (Release Preview announcement), improves the servicing for the Secure Boot components, addresses problems with a black screen during sign-in and sign-out, users unable to change expired passwords, Kerberos error 0xc0030009, and other networking issues.

Update KB5011831 fixes and changes for Windows 10

These are the fixes and improvements available with the latest update preview of Windows 10:

Download update KB5011831 for Windows 10

The update is available immediately and it will download and install automatically through the Release Preview Channel. However, you can always force the update from Settings > Update & Security > Windows Update, click the Check for updates button, and use the option to install the optional update.

  • Added improvements for servicing the Secure Boot component of Windows.
  • Changed the timeout for Azure Active Directory (Azure AD) registration from 60 minutes to 90 minutes for hybrid Azure AD-joined Autopilot scenarios. This also addresses a race condition that causes an exception at timeout.
  • Fixed an issue that causes a remote desktop session to close or reconnection to stop responding while waiting on the accessibility shortcut handler (sethc.exe).
  • Fixed an issue that delays OS startup by approximately 40 minutes.
  • Fixed an issue that incorrectly returns Execution Policy settings from the registry.
  • Fixed an issue that causes Internet Explorer to stop working when you copy and paste text using an Input Method Editor (IME).
  • Fixed an issue that displays a black screen for some users when they sign in or sign out.
  • Fixed an issue that causes Kerberos authentication to fail, and the error is “0xc0030009 (RPC_NT_NULL_REF_POINTER)”. This occurs when a client machine attempts to use the Remote Desktop Protocol (RDP) to connect to another machine while Remote Credential Guard is enabled.
  • Fixed an issue that prevents you from changing a password that has expired when you sign in to a Windows device.
  • Fixed an issue that might cause Windows to stop working when you apply a Windows Defender Application Control (WDAC) policy that doesn’t require a restart.
  • Fixed an issue that might fail to copy the security portion of a Group Policy to a machine.
  • Fixed an issue that causes the Key Distribution Center (KDC) code to incorrectly return the error message “KDC_ERR_TGT_REVOKED” during domain controller shutdown.
  • Fixed an issue that might prevent graphics processing unit (GPU) load balancing over Remote Desktop from working as intended.
  • Fixed an issue that prevents the instantiation of the Microsoft RDP Client Control, version 11 and higher, inside a Microsoft Foundation Class (MFC) dialog.