Windows 10 V1903 Update KB4505903 (07/26/2019)

[German]Microsoft has released the KB4505903 cumulative update on June 26, 2019 for the Windows 10 May 2019 Update (Versions 1903) after an extensive testing period with Windows Insiders. Remark: The update has been released accidentially on 07/25/2019 via Microsoft Update Catalog and has then been pulled. Now it's available and documented.

For a list of cumulative Windows 10 updates, visit this Microsoft Web page. However, the update has not yet been documented by Microsoft. The update installation requires an existing current Servicing Stack Updates (SSUs).

In my article Windows 10 V1903 Updates (July 17, 2019) I collected some information about the preview versions of this update in advance.

Updates for Windows Version 1903

The following updates have been released for Windows 10 May 2019 Update (version 1903) and Windows Server 2019.

Update KB4505903 for Windows Version 1903

Cumulative update KB4505903 for Windows version 1903 increases the build number to 18362.267. The update contains quality improvements, but no new operating system functions. Here is the list of highlights:

• Updates an issue that prevents Windows Hello face recognition from working after you restart a device.
• Allows Microsoft Edge to print PDF documents that contain landscape and portrait-oriented pages correctly. 
• Allows Microsoft Edge to open PDFs that are configured to be opened only once correctly. 
• Updates an issue that may display colors incorrectly when viewing an image on 10-bit display panels. 
• Updates an issue that may prevent you from changing the display brightness after your device resumes from Sleep or Hibernation. 
• Updates an issue that may prevent a device from going to Sleep mode when some applications that rely on Bluetooth are open. 
• Improves Bluetooth audio quality when using certain audio profiles for extended periods.
• Improves compatibility with the Window-Eyes screen reader application.
• Ensures that the Start menu works as expected when new users sign in to Windows.

• Updates the Windows Ink Workspace by simplifying the menu and adding direct integration with the Microsoft Whiteboard app for a richer collaboration experience.

Microsoft has also made the following quality improvements and bug fixes:

• Addresses an issue that fails to record a local user's last sign in time even when the user has accessed the server's network share. 
• Addresses an issue that may sever the domain trust relationship when you enable Recycle Bin in the domain that established the trust relationship. 
• Addresses an issue that prevents Windows Hello face authentication from working after a restart. 
• Updates time zone information for Brazil. 
• Addresses an issue to enable Microsoft Edge to print PDF documents that contain landscape and portrait-oriented pages correctly. 
• Addresses an issue with PDFs that are configured to be opened only once in Microsoft Edge. 
• Addresses an issue that may display colors incorrectly when viewing an image on 10-bit display panels. 
• Addresses an issue that may prevent you from changing the display brightness when using certain graphics drivers after resuming from Sleep or Hibernation. 
• Addresses an issue in which Windows Graphics Device Interface (GDI+) returns an empty font family name for Bahnschrift.ttf. 
• Addresses an issue that may cause a mouse press and release event to sometimes produce an extra mouse move event. 
• Addresses an issue that may cause the UI to stop responding for several seconds when scrolling in windows that have many child windows. 
• Addresses an issue that fails to bypass automatic sign in (Autologon) when you press and hold the Shift key during startup. 
• Addresses an issue that may prevent a device from going to Sleep mode when certain applications that rely on Bluetooth are open. 
• Addresses an issue that may reduce Bluetooth audio quality when using certain audio profiles for extended periods. 
• Addresses an issue that prevents Microsoft Application Virtualization (App-V) scripting from working if you run it when you're not connected to a domain controller (DC). App-V scripting also fails when you run it in an environment that only contains Microsoft Azure Active Directory. 
• Addresses an issue that causes an error if you open Microsoft OneDrive files on demand when User Experience Virtualization (UE-V) is enabled. To apply this solution, set the following DWORD to 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UEV\Agent\Configuration\
  ApplyExplorerCompatFix 
• Addresses an issue with UE-V that may sometimes prevent exclusion paths from working. 
• Addresses an issue that may cause a system that has a Trusted Platform Module (TPM) to stop working. 
• Addresses an issue that prevents a system from recognizing a Microsoft account or Azure Active Directory account until the user signs out and signs in again. 
• Addresses an issue that may prevent the Netlogon service from establishing a secure channel and reports the error, "0xC000007A – ERROR_PROC_NOT_FOUND." 
• Addresses an issue that fails to update the personal identification number (PIN) policy (minimum length, required digits and special characters, etc.) for Windows Hello for Business when a PIN already exists on the machine. 
• Addresses an issue that causes failures to create a recovery drive (USB key) with the error, "0x80042405[gle=0x00000715]." 
• Addresses an issue that prevents an Android emulator based on the virtual machine platform from starting on some systems. 
• Addresses an issue that uses a temporary profile to sign in a local user account when the account is configured with a mandatory roaming user profile. The error, "We can't sign in to your account" appears. The Application event log contains Event 1521, and the event's source is listed as the Microsoft-Windows-User Profiles Service. 
• Addresses an issue that changes the status for Work Folders in File Explorer to 0x80C802A0 (ECS_E_SYNC_UPLOAD_PLACEHOLDER_FAILURE) after selecting Free up space. 
• Addresses an issue that may cause a Remote Desktop Server to stop responding when someone who is using drive redirection disconnects. 
• Addresses an issue that may cause the Remote Access Connection Manager (RASMAN) service to stop working. You may receive the error "0xc0000005" on devices that have the diagnostic data level manually configured to the non-default setting of 0. You may also receive an error in the Application section of Windows Logs in Event Viewer with Event ID 1000 referencing "svchost.exe_RasMan" and "rasman.dll". This issue only occurs when a virtual private network (VPN) profile is configured as an Always On VPN (AOVPN) connection with or without a device tunnel.
• Addresses an issue that causes applications on a container host to intermittently lose connectivity because of a port conflict with applications running on a container.<
• Addresses an issue that intermittently prevents connections to a corporate network when using Always On VPN with the IKEv2 protocol. Connections are not always automatically established, and manual connections sometimes fail. In this scenario, when you call the RasDial function from the command line for the target VPN connection, you receive the error, "ERROR_PORT_NOT_AVAILABLE(633)".
• Adds limited support for Windows voice dictation for Chinese Simplified, English (Australia, Canada, India, United Kingdom), French (France), German (Germany), Italian (Italy), Portuguese (Brazil), and Spanish (Mexico, Spain).
• Addresses an issue with opening or using the Window-Eyes screen reader application that may result in an error and prevent some features from functioning as expected.
• Addresses an issue that prevents an App-V application from opening and displays a network failure error. This issue occurs under certain circumstances, such as when a system's battery is low or there is an unexpected power failure.
• Addresses an issue that prevents an App-V application from opening if the client is offline and a startup script is defined for the App-V application.
• Addresses a rare issue that causes Windows Defender Advanced Threat Protection (ATP) to temporarily prevent other processes from accessing files.
• Addresses an issue that causes the Start menu to stop responding when new users sign in to Windows 10, version 1903.

• Updates the Windows Ink Workspace by simplifying the menu and adding direct integration with the Microsoft Whiteboard app for a richer collaboration experience.

Among other things, the brightness control of the display was fixed when waking up from sleep mode. The Remote Access Connection Manager (RASMAN) service error 0xc0000005 was also addressed. What I didn't read was the fix for Sandbox error 0xc0370106 (see Windows 10 V1903: Sandbox fails with error 0xc0370106 that has been mentioned in Windows 10 V1903 Update KB4505903 (for Insider, 07/23/2019)). 

In addition, Microsoft has released an update directly for the Windows Update Client to improve its reliability. This will be rolled out outside of Windows Update if the machine is compatible and not a LTSC variant and updates have not been blocked by GPO..

The update is delivered (currently in the Release Channel) via Windows Update, if the user explicitly requests the search for updates in the settings page. The update can also be downloaded and installed from the Microsoft Update Catalog. It should now also be available in WSUS. However, you should make sure that the latest Servicing Stack Update (SSU) KB4508433 is installed. Microsoft lists a whole range of known isses with this update. Besides the sandbox error 0x80070002 there are PXE boot errors (see also June Update KB4503276 blocks PXE boot on SCCM DPs) and the MIT Kerberos realm boot problem for domains (see Windows 10 V1903: Upgrade blocker Intel RST & MIT Kerberos).

Servicing Stack Update KB4508433 for Windows Version 1903

For Windows version 1903 Microsoft has also released a Servicing Stack Update (SSU) KB4508433. This update introduces the following improvements and fixes:

• Addresses an issue in which an update may not install with certain other updates and upon start up after installation of the other updates, will require a second scan of Windows Update and a second restart to complete installation.
• Addresses an issue in which reserved disk space may not be returned to free space when installation of Language Packs or Features on Demand (FODs) fails or is canceled.  The disk space is returned to free space when Storage Sense is run.
• Addresses an issue when Windows Update Check for updates is run during the installation or uninstallation of an update, Features on Demand (FODs) or Language packs, which may cause the installation to fail and may cause a restart to take up to an hour.

The update is rolled out via Windows Update, but can also be downloaded from the Microsoft Update Catalog.

Similar articles:
Microsoft Office Patchday (July 2, 2019)
Microsoft Security Update Summary (July 9, 2019)
Patchday: Updates for Windows 7/8.1/Server (July 9, 2019)
Patchday Windows 10 Updates (July 9, 2019)
Patchday Microsoft Office Updates (July 9, 2019)
Windows 10 V1903 Update KB4505903 (for Insider, 07/23/2019)
June Update KB4503276 blocks PXE boot on SCCM DPs