Windows 10, version 20H2 and Windows Server, version 20H2

Find information on known issues and the status of the rollout for Windows 10, version 20H2 and Windows Server, version 20H2. Looking for a specific issue? Press CTRL + F (or Command + F if you are using a Mac) and enter your search term(s).

Current status as of October 20, 2020
Windows 10, version 20H2 is available for users with devices running Windows 10, versions 1903 and higher who manually seek to “Check for updates” via Windows Update. The recommended servicing status is Semi-Annual Channel.
 
Note We are slowly throttling up availability over the coming weeks to ensure a reliable download experience. As a result, the update may not be offered to you right away. For more details, see How to get the Windows 10 October 2020 Update.
Windows 10, version 20H2 is now available Windows 10, version 20H2 is now available
Find out how to get the update >
What’s new for IT pros What’s new for IT pros
Explore the latest features and servicing innovations in Windows 10, version 20H2 >

Known issues

This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.

SummaryOriginating updateStatusLast updated
Domain controllers in your enterprise might encounter Kerberos authentication issues
Authentication and renewal issues for Kerberos ticket after installing updates released November 10, 2020.
OS Build 19042.630
KB4586781
2020-11-10
Resolved
KB4594440
2020-11-19
10:00 PT
Certificates may not be present after updating to a newer version of Windows 10
Devices in a managed environment using update management tools or ISO images might lose certificates when updating.
N/A

Mitigated
2020-11-17
14:11 PT
You might receive an error when accessing the sign-in options or users MMC snap-in
You might receive the error, "Your PC will automatically restart in one minute"
N/A

Mitigated
2020-11-11
18:11 PT
Issues when using Microsoft IME for Japanese or Chinese languages
Users of the Microsoft IME for Japanese or Chinese languages might have issues.
N/A

Mitigated
2020-11-11
17:48 PT
Stop error when plugging in a Thunderbolt NVMe SSD
Devices using Thunderbolt SSDs may receive a stop error "DRIVER_VERIFIER_DMA_VIOLATION (e6)" when plugging an SSD in.
N/A

Investigating
2020-11-06
17:46 PT
Errors or issues during or after updating devices with certain Conexant audio drivers
Devices with affected Conexant or Synaptics audio drivers might receive a stop error with a blue screen.
N/A

Investigating
2020-10-20
10:06 PT
Errors or issues during or after updating devices with Conexant ISST audio drivers
Devices with affected Conexant ISST audio drivers might receive an error or have issues with Windows 10, version 2004.
N/A

Investigating
2020-10-20
10:06 PT

Issue details

November 2020

Domain controllers in your enterprise might encounter Kerberos authentication issues

StatusOriginating updateHistory
Resolved
KB4594440
OS Build 19042.630
KB4586781
2020-11-10
Resolved: 2020-11-19, 10:00 PT
Opened: 2020-11-14, 01:39 PT
After installing KB4586781 on domain controllers (DCs) and read-only domain controllers (RODCs) in your environment, you might encounter Kerberos authentication issues. This is caused by an issue in how CVE-2020-17049 was addressed in these updates. As noted in CVE-2020-17049, there are three registry setting values for PerformTicketSignature to control it, but in the current implementation you might encounter different issues with each setting:
  • Setting the value to 0 might cause authentication issues when using S4U scenarios, such as scheduled tasks, clustering, and services for example line-of-business applications.
  • The default value setting of 1 might cause non-Windows clients authenticating to Windows Domains using Kerberos to experience authentication issues.
    • With setting 1, clients attempting to renew a Kerberos ticket that should be renewable on a DC updated with KB4586781 will fail to renew the Kerberos ticket if it was issued from a DC that has not installed an update released November 11, 2020 or any DC running Windows Server 2008 R2 SP1 or Windows Server 2008 SP2.
    • Going from 0 to 1 might also cause this issue since there can be outstanding Kerberos tickets that are marked renewable, but will not be renewed by updated DCs.
  • With the default value setting of 1, you might also have Cross realm referrals failures on Windows and non-Windows devices for Kerberos referral tickets passing through domain DCs that have not installed an update released November 11, 2020 or any DC running Windows Server 2008 R2 SP1 or Windows Server 2008 SP2. This issue might happen if domain environment is partially updated or contains at least one Windows Server 2008 R2 SP1 or Windows Server 2008 SP2.
  • Setting the value to 2 is intended for enforcement mode and will create issues in an environment where not all DCs are updated because it will explicitly reject certain types of non-compliant Kerberos tickets. It should also not be used at this time if your environment contains DCs running Windows Server 2008 R2 SP1 or Windows Server 2008 SP2.
Note This issue only affects Windows Servers, Windows 10 devices and applications in enterprise environments.

Affected platforms:
  • Server: Windows Server, version 20H2; Windows Server, version 2004; Windows Server, version 1909; Windows Server, version 1903; Windows Server, version 1809; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012
Resolution: This issue was resolved in the out-of-band update KB4594440. It is a cumulative update, so you do not need to apply any previous update before installing it. To get the standalone package for KB4594440, search for it in the Microsoft Update Catalog. You can import this update into Windows Server Update Services (WSUS) manually. See the Microsoft Update Catalog for instructions. Note KB4594440 is not available from Windows Update and will not install automatically.

You might receive an error when accessing the sign-in options or users MMC snap-in

StatusOriginating updateHistory
MitigatedN/A

Last updated: 2020-11-11, 06:11 PT
Opened: 2020-11-05, 07:01 PT
After updating to Windows 10, version 20H2, you might receive the error in LSASS.exe with the text "Your PC will automatically restart in one minute" when interacting with any dialog window that lists users, for example accessing the sign-in options settings app page or the users folder in the Local user and groups MMC snap-in. This issue only affects devices in which any of the local built-in accounts have been renamed, such as Administrator or Guest. You might also receive an error in the Application Event log with Event ID 1015 that LSASS.EXE failed with status code C0000374. C0000374 is related to heap corruption.

This issue is caused by duplicate built-in user accounts being created with the same security identifiers (SIDs) and relative identifiers (RIDs) during the update to Windows 10, version 20H2. SIDs and RIDs for built-in user accounts are well-known as documented here and must be unique on a given device.

To safeguard your update experience, we have applied a compatibility hold on these devices from installing or being offered Windows 10, version 2004 or Windows 10, version 20H2. If your organization is using Update Compliance, the safeguard ID is 30103339.

Workaround: For information on how to mitigate this issue, please see KB4592802. Note If you have already encountered this issue on your device, the uninstall window might be 10 or 30 days depending on the configuration of your environment and the version you’re updating to.

Affected platforms:
  • Client: Windows 10, version 20H2
  • Server: Windows Server, version 20H2
Next steps: We are working on a resolution and will provide an update in an upcoming release. In the coming weeks, we will also provide updated bundles and refreshed media to prevent the issue.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until the safeguard is removed.

Stop error when plugging in a Thunderbolt NVMe SSD

StatusOriginating updateHistory
InvestigatingN/A

Last updated: 2020-11-06, 05:46 PT
Opened: 2020-11-05, 07:01 PT
An incompatibility issue has been found with Windows 10, version 2004 or Windows 10, version 20H2 when using an Thunderbolt NVMe Solid State Disk (SSD). On affected devices, when plugging in a Thunderbolt NVMe SSD you might receive a stop error with a blue screen and "DRIVER_VERIFIER_DMA_VIOLATION (e6) An illegal DMA operation was attempted by a driver being verified." Affected Windows 10 devices will have at least one Thunderbolt port and any currently available version of the driver file stornvme.sys.

To safeguard your update experience, we have applied a compatibility hold on Windows 10 devices with affected drivers from being offered Windows 10, version 2004 or Windows 10, version 20H2. If your organization is using Update Compliance, the safeguard IDs is 29991611.

Affected platforms:
  • Client: Windows 10, version 20H2; Windows 10, version 2004
Next steps: We are working on a resolution and estimate a solution will be available in late November.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until the safeguard is removed.

October 2020

Certificates may not be present after updating to a newer version of Windows 10

StatusOriginating updateHistory
MitigatedN/A

Last updated: 2020-11-17, 02:11 PT
Opened: 2020-10-30, 05:16 PT
System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated. 
 
Note Devices using Windows Update for Business or that connect directly to Windows Update are not impacted. Any device connecting to Windows Update should always receive the latest versions of the feature update, including the latest LCU, without any extra steps. 
 
Workaround: If you have already encountered this issue on your device, you can mitigate it within the uninstall window by going back to your previous version of Windows using the instructions here. The uninstall window might be 10 or 30 days depending on the configuration of your environment and the version you’re updating to. You will then need to update to the later version of Windows 10 after the issue is resolved in your environment. Note Within the uninstall window, you can increase the number of days you have to go back to your previous version of Windows 10 by using the DISM command /Set-OSUninstallWindow. You must make this change before the default uninstall window has lapsed. For more information, see DISM operating system uninstall command-line options

Affected platforms:
  • Client: Windows 10, version 20H2; Windows 10, version 2004; Windows 10, version 1909; Windows 10, version 1903
  • Server: Windows Server, version 20H2; Windows Server, version 2004; Windows Server, version 1909; Windows Server, version 1903
Next Steps: This issue is now resolved when using the latest feature update bundles that were released November 9, 2020 for Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. Refreshed media is not yet available for Windows 10, version 20H2 on on Volume Licensing Service Center (VLSC) and Visual Studio Subscriptions (VSS, formerly MSDN Subscriptions). Refreshed media for VLSC and VSS will be released in the coming weeks to address this issue and the known issue here that requires a media refresh is resolved. Please check the known issue here for the status of the remaining Windows 10, version 20H2 known issue. For information on verifying you're using the latest feature update bundles, see How to address feature update refreshes in your environment. If you are using or creating custom media, you will need to include an update released October 13, 2020 or later.

August 2020

Issues when using Microsoft IME for Japanese or Chinese languages

StatusOriginating updateHistory
MitigatedN/A

Last updated: 2020-11-11, 05:48 PT
Opened: 2020-08-31, 12:12 PT
Users of the Microsoft IME for Japanese or Chinese languages might experience issues when attempting various tasks. Input may have issues, you may receive unexpected results or you may be unable to enter text.

Affected platforms:
  • Client: Windows 10, version 20H2, Windows 10, version 2004
  • Server: Windows Server, version 20H2, Windows Server, version 2004
Next steps: We are working on a resolution and estimate a solution will be available in late November. For more information on issues, workaround steps and currently resolved issues, please see KB4564002.

May 2020

Errors or issues during or after updating devices with certain Conexant audio drivers

StatusOriginating updateHistory
InvestigatingN/A

Last updated: 2020-10-20, 10:06 PT
Opened: 2020-05-27, 12:20 PT
Synaptics and Microsoft have found incompatibility issues with certain versions of drivers for Conexant or Synaptics audio devices and Windows 10, version 2004 (the Windows 10 May 2020 Update). Windows 10 devices with affected Conexant or Synaptics audio drivers might receive a stop error with a blue screen during or after updating to Windows 10, version 2004. The affected driver will be named Conexant HDAudio Driver under Sound, video and game controllers in Device Manager and have versions 8.65.47.53​, 8.65.56.51​, or 8.66.0.0 through 8.66.89.00 for chdrt64.sys or chdrt32.sys.

To safeguard your update experience, we have applied a compatibility hold on Windows 10 devices with affected Conexant or Synaptics audio drivers installed from being offered Windows 10, version 2004 or Windows Server, version 2004 until the driver has been updated. If your organization is using Update Compliance, the safeguard IDs are 25702617, 25702660, 25702662, and 25702673.

Affected platforms:
  • Client: Windows 10, version 20H2, Windows 10, version 2004
  • Server: Windows Server, version 20H2, Windows Server, version 2004
Next steps: Microsoft and Synaptics are working on a resolution and will provide an update in an upcoming release.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.

Errors or issues during or after updating devices with Conexant ISST audio drivers

StatusOriginating updateHistory
InvestigatingN/A

Last updated: 2020-10-20, 10:06 PT
Opened: 2020-05-27, 12:22 PT
Synaptics and Microsoft have found incompatibility issues with certain versions of drivers for Conexant ISST audio driver and Windows 10, version 2004 (the Windows 10 May 2020 Update). Windows 10 devices with affected Conexant ISST audio driver might receive an error or experience issues while installing the update or after the device has updated. The affected driver will be named Conexant ISST Audio or Conexant HDAudio Driver under Sound, video and game controllers in Device Manager and have file name uci64a96.dll through uci64a231.dll and a file version lower than 7.231.3.0.

To safeguard your update experience, we have applied a compatibility hold on Windows 10 devices with affected Conexant or Synaptics audio drivers installed from being offered Windows 10, version 2004 or Windows Server, version 2004 until the driver has been updated. If your organization is using Update Compliance, the safeguard ID is 25178825.

Affected platforms:
  • Client: Windows 10, version 20H2, Windows 10, version 2004
  • Server: Windows Server, version 20H2, Windows Server, version 2004
Workaround: To mitigate this issue, you will need to check with your device manufacturer (OEM) to see if an updated driver is available and install it.

Next steps: Microsoft and Synaptics are working on a resolution and will provide an update in an upcoming release.

Note We recommend that you do not attempt to manually update using the Update now button or the Media Creation Tool until this issue has been resolved.