KB5011495 is a cumulative Windows update released in March 2022 to address security issues in Windows Server 2016. The update file size is 1543MB, which is quite massive and therefore requires you to plan an uninterrupted update window.
This article takes an in-depth look at this cumulative update, including the fixes it does, issues arising during update, where to get KB5011495, and what to do if the update fails.
What Fixes Does Windows KB5011495 Update Make?
Windows KB5011495 makes the following key security updates:
- It corrects printing issues in low integrity process apps, ensuring printing for those apps operates properly.
- It addresses the “Access Denied” error, which occurs when writing a service principal name (SPN) for an object with a similar or conflicting SPN attribute.
- It addresses an issue in the Remote Procedure Call Server Service (RPCSS) by setting the exclusive_owner to 0 if the recursive count in the CsharedLock is also 0.
- Corrects memory leak issues in the wmipicmp.dll module that raise false alarms in the datacenter monitoring system of the System Center Operations Manager (SCOM).
- Fixes memory leaks from the DnsServerPsProvider module during a WmiPrvSE.exe process.
- Addresses sign in mismatch issues between the Remote Desktop Protocol (RDP) client and a Remote Desktop session’s keyboard.
- In addition, Windows has been reported to go into BitLocker recovery following servicing updates. Windows KB5011495 also addresses this issue.
What Issues Has This KB5011495 Update Caused, If Any?
Update issues have been noted in apps that set or acquire Active Directory Forest Trust Information using the Microsoft .NET Framework. They experience the following issues upon installing updates released after January 11th 2022:
- They might close, fail to run or return an error
- Access violation error (0xc0000005)
To resolve these issues, first identify the version of the .NET Framework the app is using, then apply the out-of-band updates for that version.
As you cannot access out-of-band updates automatically through a windows update, you need to search the Microsoft Update Catalog to find the standalone package for your Windows and .NET Framework versions.
Import the relevant updates for your version into the Microsoft Endpoint Configuration Manager and the Windows Server Update Services (WSUS). The Microsoft update catalog has instructions for importing the updates.
How To Get The Windows KB5011495 Update On Windows Server 2016
You can get the Windows update KB5011495 through the following methods:
- Automatic updates through the Windows update.
- Import it through the Windows Server Update Service (WSUS).
Download KB5011495 and deploy it manually through the Microsoft update catalog.
You should first deploy SSU KB5011570 before installing KB5011495, although in the case of automatic updates, the Windows update program automatically offers SSU KB5011570 before the update.
What To Do If KB5011495 Fails To Install?
KB5011495 can fail to install in some cases. Some of the known installation issues with this update so far include:
- Partial update, after which the computer freezes and the installation stops
- Error message that the update couldn’t be completed
- Corruption errors. E.g. if your system cannot find the file, you are likely to see this error: 0x80070002 ERROR_FILE_NOT_FOUND.
Corruption errors during cumulative updates can happen for several reasons, such as system file corruption or missing files.
If you are an IT professional (or are It Savvy), you can fix corruption errors using the system update Readiness tool or through the DISM -Deployment Image Servicing and Management.
Microsoft also provides a follow-along troubleshooting process to guide individual users through installation errors. Instructions are only available for Windows 7; 8.1 (update to this version if you are on Windows 8); and Windows 10.
Before you start any troubleshooting, you need to eliminate the following as possible causes:
- Poor internet connection
A slow internet speed might contribute to incomplete installation. Close any open applications before you begin installation. Closing open applications will free up computer memory and ensure your internet connection is dedicated to one task.
Also test your internet speed and ping rate, to ensure your internet speed is high, and the ping rate low – or stable. A high or erratic ping rate indicates a poor connection.
- Low disk space
You need 16bg or more of free disk space to successfully complete your installation on a 32-bit system, and 20gb or more on a 64-bit OS.
You can free up space by deleting old or duplicate files. Alternatively, back up your old files to the cloud or on an external storage device.
Once done, proceed as follows:
Windows 7 and 8.1
Start by selecting your OS to get the correct instructions for your machine. After that, you’ll need to search ‘cmd’ in your start menu, then enter the command prompts shown here:
Commands for Windows 8.1 below:
Commands for Windows 7 below:
Type each command and let it run to completion before you move on to the next one.
Once all the commands have run, exit the cmd window, restart your computer, and attempt to install windows update KB5011495 once again.
For Windows 10 Users
If your computer runs on Windows 10, you can troubleshoot update errors through the Windows update troubleshooter. We outlined the entire process in this article here.
Once done, restart your computer and check the update status again. Another method worth trying (and also covered this in the same article I indicated above) is temporarily disabling automatic updates and attempting manual installation instead.
