September OS security update (KB 5043055) for Azure Stack HCI, version 23H2

Applies to: Azure Stack HCI, version 23H2

This article describes the OS security update for Azure Stack HCI, version 23H2 that was released on September 10, 2024 and applies to OS build 25398.1128.

Improvements

This security update includes quality improvements. The following key issues and new features are present in this update:

  • Windows Installer When repairing an application, the User Account Control (UAC) doesn't prompt for your credentials. After you install this update, the UAC will then prompt for them. Because of this, you must update your automation scripts. Application owners must add the Shield icon. It indicates that the process requires full administrator access. To turn off the UAC prompt, set the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableLUAInRepair registry value to 1.

    The changes in this update might affect automatic Windows Installer repairs - see Application Resiliency: Unlock the Hidden Features of Windows Installer.

  • BitLocker You might not be able to decrypt a BitLocker data drive. This occurs when you move that drive from a newer version of Windows to an older version.

  • Unified Write Filter (UWF) Windows Management Instrumentation (WMI) API calls to shut down or restart a system results in an access denied exception.

  • Azure Virtual Desktop A deadlock stops you from signing in to sessions.

For more information about security vulnerabilities, see the Security Update Guide and the September 2024 Security Updates.

Known issues

Microsoft is not currently aware of any issues with this update.

To install this update

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

To install the LCU on your Azure Stack HCI cluster, see Update Azure Stack HCI clusters.

File list

For a list of the files that are provided in this update, download the file information for Cumulative update 5043055.

Next steps