question

Hello @ShannLim-3692,

Thank you for posting here.

1.What is the operating system of this server?

2.Do you mean you installed 2020-09 Cumulative Update (KB4577015) on this machine? If so, it will affect Windows 10 1607 and Windows 2016.

If we installed 2020-09 Cumulative Update (KB4577015), the security options of the local group policy cannot be opened, and the error is reported as follows:

Now there is solution to this problem. Please install the following patches KB4580346 on the problematic servers (OS Build 14393.3986).
Based on your description above, you have installed this update, please run PS command get-hotfix on this problematic server, then check if we installed KB4580346 actually.

For example:

If we did not install KB4580346, please install it to see if it helps.

If we have installed KB4580346, please restart this problematic machine to see if it helps.

For more inforamtion, please refer to the link below.
October 13, 2020—KB4580346 (OS Build 14393.3986)
https://support.microsoft.com/en-us/help/4580346/windows-10-update-kb4580346

Hope the above reply is helpful to you. If anything is unclear, please feel free to let us know.

Best Regards,
Daisy Zhou

@DaisyZhou-MSFT
I had faced this problem too.
1. Window Server 2016 version 2016 (OS Build 14393.3986)
2. I did not install KB4577015 but install KB4580346.

Any help is greatly appreciated.

Hi All,

I have installed KB4580346 and the error is still appearing. Please help.

Hello @MSLee-7361,

We can uninstall KB4577015 and KB4580346, then install KB4577015 firstly, then install KB4580346 secondly to see if it helps.

Best Regards,
Daisy Zhou

Hello @KennyCheng-2588,

Is your server a DC or a member server or a server in workgroup?

We can uninstall KB4580346, then install KB4577015 firstly, then install KB4580346 secondly to see if it helps.

If it does not work and it is a DC, we can remove "Group Policy Management" and add "Group Policy Management" again to see if it helps.

Best Regards,
Daisy Zhou

HI Daisy,

I have tried but in vain. I do have GPO applied (with Security Policy setting configured to adhere to our security requirements) to the affected servers. I am suspecting could it be one of the configured setting but I am unsure which one. Any advices? Thank you.

Hello @MSLee-7361,

Thank you for your update.

1.Is the error message the same as below or different?

2.Would you please show us the screenshot with error message?

3.So you suspect that what security policy you set is causing your problem, right?

If so, which GPO object do you think it might be? If you think it might be a GPO object, if possible, you disable the group policy object, and then update the group policy to see if the problem persists.

Or you move a machine from the specified OU to the domain, and then update the group policy to see if the problem still exists.

If you can't operate the above operations,
Or you can add a server to this OU to see if the problem occurs. If it happens, it may be caused by the policy, then you can check the group policy results of this test machine, and then further investigate the possible policy causing the problem.

Hope the information above is helpful.

Best Regards,
Daisy Zhou

Hi Daisy,

I only have one GPO policy applied to the servers. I am hoping that you might be able to point out the exact/possible setting(s) within Security Policy might be affecting it.

Just like down to the level of identifying that regkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId is to be delete during the interim period before 2020-10 patch resolved it.

I had updated the latest patch released last 10 nov 2020. It solved the problem already

I updatted thr patch November 10, 2020—KB4586830 (OS Build 14393.4046) and it fixed the gpmc error. This patch resolved the bug.