On September 12, 2023, Microsoft released several important cumulative updates for Windows 10 as part of the monthly Patch Tuesday updates. These updates address security issues, improve stability, and provide new features for multiple Windows 10 versions.
The key updates include KB5030211 for Windows 10 versions 22H2 and 21H2, KB5030214 for version 1809, KB5030213 for version 1607, and KB5030220 for the original RTM version 1507. All updates are available through Windows Update, Microsoft Update, WSUS, and the Microsoft Update Catalog.
KB5030211 in particular is a critical update for Windows 10 22H2 and 21H2 users. It bumps the build version to 19045.3448 and 19044.3448 respectively. In this article, we will discuss an overview of KB5030211 including what’s new in this September cumulative update for Windows 10, how to download and install, tips for cleanup after installing, how to uninstall the update, and steps to block it if needed.
Installing monthly cumulative updates like KB5030211 is vital for Windows 10 users to get the latest security patches, bug fixes, and feature improvements. Read on to learn everything you need to know about this important September 2023 update for Windows 10.
Update for Windows 11 users: Microsoft has published KB5030219 for Windows 11. Visit this page to learn what is there in the KB5030219 update.
Latest Cumulative Updates (LCU) are Microsoft’s way of packaging stability, security, and feature improvements into a single monthly update for Windows 10/11.
LCUs were introduced alongside Windows 10 in 2015 to simplify and improve the patch process compared to the old Windows update model. Rather than needing to install individual hotfixes, an LCU contains all fixes and enhancements from the past month.
Microsoft releases LCUs on Patch Tuesday, the second Tuesday of each month. They are mandatory updates focused on:
Security patches for vulnerabilities
Bug fixes and stability improvements
Minor new features and UI changes
Driver updates
Previously released servicing stack updates (SSU)
LCUs are published for supported semi-annual channel versions of Windows 10/11 like 21H2 and 22H2. They bring your OS fully up to date.
Article KB | Version | Servicing option | Availability date | Latest revision date | Latest build | End of servicing: Home, Pro, Pro Education and Pro for Workstations | End of servicing: Enterprise, Education, IoT Enterprise, and Enterprise multi-session |
---|---|---|---|---|---|---|---|
KB5030211 | 22H2 | General Availability Channel | 2022-10-18 | 2023-09-12 | 19045.3448 | 2025-10-14 | 2025-10-14 |
KB5030211 | 21H2 | General Availability Channel | 2021-11-16 | 2023-09-12 | 19044.3448 | End of servicing | 2024-06-11 |
Article KB | Version | Servicing option | Availability date | Latest revision date | Latest build | Mainstream support end date | Extended support end date |
---|---|---|---|---|---|---|---|
KB5030211 | 21H2 | Long-Term Servicing Channel (LTSC) | 2021-11-16 | 2023-09-12 | 19044.3448 | 2027-01-12 | 2032-01-13 (IoT Enterprise only)1 |
KB5030214 | 1809 | Long-Term Servicing Channel (LTSC) | 2018-11-13 | 2023-09-12 | 17763.4851 | 2024-01-09 | 2029-01-09 |
KB5030213 | 1607 | Long-Term Servicing Branch (LTSB) | 2016-08-02 | 2023-09-12 | 14393.6252 | End of servicing | 2026-10-13 |
KB5030220 | 1507 (RTM) | Long-Term Servicing Branch (LTSB) | 2015-07-29 | 2023-09-12 | 10240.20162 | End of servicing | 2025-10-14 |
KB5030211 is a security update that is made available for both Windows 10 22H2 and 21H2 users. If you have a Windows 10 PC with either of these versions, please ensure you install this cumulative update.
Press the Windows key + R on your keyboard to open the Run dialog box.
Type winver into the box and press Enter. This will display the version of Windows your computer is running.
The September 2023 cumulative update KB5030211 for Windows 10 versions 22H2 and 21H2 contains important security patches and bug fixes. This monthly update bumps up the build version to 19045.3448 and 19044.3448 for Windows 10 v22H2 and v21H2 respectively. Here are the highlights:
Supports daylight saving time changes in Israel
Enhances location accuracy for better traffic, news, and weather
Expands notification badging for Microsoft accounts on Start
Introduces the Windows Backup app
Fixes display bugs with the search box
Addresses Group Policy processing issues
Resolves Remote Desktop disconnection problems
Patches 2 actively exploited zero-day vulnerabilities
CVE-2023-36761 – Microsoft Word Info Disclosure Vulnerability
CVE-2023-36802 – Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Includes fixes for a total of 60 security flaws
There are various methods to install the Cumulative Update for Windows 10 (KB5030211). This section will discuss the three most common methods: Windows Update, Microsoft Update Catalog, and Windows Server Update Services (WSUS).
By far the easiest and most common method for installing updates, Windows Update automatically checks for available updates and installs them in the background. To manually check for updates, follow these steps:
Click the Start button and then click on Settings.
Select Update & Security.
Click on Windows Update.
Click the Check for updates button.
If the KB5030211 update is available, it will be downloaded and installed automatically. Once it’s downloaded and installed, it asks to reboot the PC.
The cumulative update installation process will be completed upon the reboot.
Another method for obtaining the Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5030211) is through the Microsoft Update Catalog. This provides a manual download option for users who need to apply the update to multiple devices or prefer offline installation. To download and install the update using the Microsoft Update Catalog, follow these steps:
Visit the Microsoft Update Catalog webpage.
Locate and click on the Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5030211) link.
Click the Download button and save the file to your computer.
Double-click the downloaded file and follow the installation instructions.
You can manually download the standalone installer for your version of Windows 10:
For other Windows 10 builds, visit Microsoft Update Catalog page and search the KB on the search box.
For organizations managing a large number of devices, Windows Server Update Services (WSUS) provides a centralized solution for deploying the Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5030211). Administrators can use WSUS to approve and distribute updates to computers within the network. To deploy the update using WSUS, follow these steps:
Open the Windows Server Update Services console.
Expand the Update Services node and click on Updates.
In the All Updates view, locate the Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5030211).
Right-click the update and select Approve.
Select the appropriate computer group(s) and set the approval status to Approved.
Wait for the update to be downloaded and deployed to the targeted devices.
To update cumulative updates using SCCM (System Center Configuration Manager), follow these steps:
Open the SCCM console on your management server or workstation.
In the SCCM console, click on “Software Library” in the left-hand navigation pane.
Expand the “Software Updates” node, and then click on “All Software Updates” or “All Windows Updates,” depending on the type of update you want to deploy.
In the Software Updates view, use the search bar or filters to find the specific cumulative update you want to deploy. You can search by KB number, update title, or other relevant criteria.
Once you’ve located the desired cumulative update, right-click on it and select “Download.” This will initiate the download of the update to your SCCM server. You may need to create a deployment package if you haven’t already done so.
After the update is downloaded, right-click on it again and select “Deploy.” This will open the Deploy Software Updates Wizard.
In the wizard, specify the deployment settings such as the target collection, installation deadline, and user notifications. You can choose to deploy the update immediately or schedule it for a specific time.
Once the deployment is initiated, you can monitor its progress by checking the “Deployment Status” node in the SCCM console. This will show you the status of the update installation on client machines.
SCCM will use its distribution points to distribute the update files to the client computers and initiate the installation process based on the deployment settings you configured. The clients will download and install the cumulative updates according to the schedule or deadline you specified.
Note: It’s important to thoroughly test cumulative updates in a non-production environment before deploying them in a live production environment to ensure compatibility and avoid any unexpected issues.
If you encounter issues with the Windows 10 Cumulative Update (KB5030211), you can uninstall it to restore your system to its previous version. This section covers two methods for uninstalling the update: Using Control Panel and Command Line Options.
Open the Control Panel.
In the Control Panel, click on Programs and Features.
On the left side, click on the View installed updates link.
Locate the update KB5030211 in the list, which should be under the Microsoft Windows section.
Right-click on the update and select Uninstall.
Follow the on-screen instructions to complete the uninstallation process. Your system may need to restart after the process is complete.
Alternatively, you can use the Command Prompt to uninstall the update. Follow these steps:
Press Win + X
on your keyboard and select Command Prompt (Admin) or Windows PowerShell (Admin) from the menu.
In the Command Prompt, enter the following command:
wusa /uninstall /kb:5030211
Press Enter and wait for the process to complete. This may take a few minutes.
When prompted, restart your computer to finalize the uninstallation.
To perform a cleanup after installing Windows updates, you can run the following commands sequentially in Command Prompt with administrative privileges:
Open Command Prompt with administrative privileges: Right-click on the Start button, and select “Command Prompt (Admin)” or “Windows PowerShell (Admin)” to launch the Command Prompt with administrative rights.
#1. Run the command to analyze the component store:
dism.exe /Online /Cleanup-Image /AnalyzeComponentStore
This command analyzes the component store and provides a report on the size of the component store and the potential disk space savings that can be achieved by running cleanup operations.
#2. Run the cleanup commands mentioned earlier:
DISM.exe /Online /Cleanup-Image /StartComponentCleanup
This command cleans up the superseded and unused system components from the Windows Update repository. It helps to reclaim disk space by removing unnecessary files.
#3. Perform a Windows Update cleanup:
DISM.exe /Online /Cleanup-Image /StartComponentCleanup /ResetBase
This command combines the functionality of the previous command with an additional step that removes all superseded versions of every component in the component store. This action cannot be undone, so it’s important to ensure you have all the necessary updates installed and your system is stable before proceeding.
#4. Remove temporary files:
cleanmgr.exe /verylowdisk
This command opens the Disk Cleanup utility, which allows you to remove various temporary files, including Windows Update temporary files, downloaded program files, and more. It presents you with a list of file categories that you can select to clean up. Choose the desired categories and click “OK” to remove the temporary files.
By running these commands, you can free up disk space by removing unnecessary Windows Update files and temporary files generated during the update process. Remember to exercise caution when using these commands and ensure your system is in a stable state before proceeding.
You can use the Windows Update Blocker toolkit to temporarily prevent the KB5030211 cumulative update from being installed automatically.
To do this:
Download the Windows Update Blocker tool.
Run the wub.exe file and select “Hide Updates”
Check the box for KB5030211 and click Next.
Click Close once completed.
This will add a registry key to hide the update from Windows Update until you are ready to install it.
Installing the latest monthly cumulative updates like KB5030211 is critical for Windows 10 users to keep their PCs secure and running smoothly. The September 2023 Patch Tuesday updates contain fixes for actively exploited zero-day vulnerabilities that can be used by hackers to compromise your system. So patching quickly is strongly advised.
Beyond urgent security fixes, cumulative updates also improve stability and provide new features. The Windows Backup app in KB5030211 makes it easier to recover files after reinstalling Windows. While cumulative updates are mandatory and installed automatically through Windows Update, you can manually download the MSU packages from the Microsoft Update Catalog if needed. Make sure to follow best practices like creating system restore points before patching and cleaning up temporary update files after installation. If you face issues with a particular update, you can uninstall it within the 10-day grace period.
Keep your Windows 10 up to date with the most recent patches and fixes to ensure the best performance, stability, and security for your device. We hope this post served as a good source of information to know what is new in KB5030211, September Cumulative Update for Windows 10. Visit our website, thesecmaster.com, and social media pages on Facebook, LinkedIn, Twitter, Telegram, Tumblr, & Medium and subscribe to receive updates like this.
You may also like these articles:
What is New in KB5031356 And How to Download and Install Windows 10 build 19045.3570?
What is New in KB5028166, a Cumulative Update for Windows 10 Version 22H2 and 21H2?
What is New in KB5030219- September Cumulative Update for Windows 11?
What is New in KB5031354 And How to Download and Install Windows 11 build 22621.2428?
Breaking Down the Latest September 2023 Patch Tuesday Report
Arun KL is a cybersecurity professional with 15+ years of experience in IT infrastructure, cloud security, vulnerability management, Penetration Testing, security operations, and incident response. He is adept at designing and implementing robust security solutions to safeguard systems and data. Arun holds multiple industry certifications including CCNA, CCNA Security, RHCE, CEH, and AWS Security.
“Knowledge Arsenal: Empowering Your Security Journey through Continuous Learning”
"Cybersecurity All-in-One For Dummies" offers a comprehensive guide to securing personal and business digital assets from cyber threats, with actionable insights from industry experts.
BurpGPT is a cutting-edge Burp Suite extension that harnesses the power of OpenAI's language models to revolutionize web application security testing. With customizable prompts and advanced AI capabilities, BurpGPT enables security professionals to uncover bespoke vulnerabilities, streamline assessments, and stay ahead of evolving threats.
PentestGPT, developed by Gelei Deng and team, revolutionizes penetration testing by harnessing AI power. Leveraging OpenAI's GPT-4, it automates and streamlines the process, making it efficient and accessible. With advanced features and interactive guidance, PentestGPT empowers testers to identify vulnerabilities effectively, representing a significant leap in cybersecurity.
Tenable BurpGPT is a powerful Burp Suite extension that leverages OpenAI's advanced language models to analyze HTTP traffic and identify potential security risks. By automating vulnerability detection and providing AI-generated insights, BurpGPT dramatically reduces manual testing efforts for security researchers, developers, and pentesters.
Microsoft Security Copilot is a revolutionary AI-powered security solution that empowers cybersecurity professionals to identify and address potential breaches effectively. By harnessing advanced technologies like OpenAI's GPT-4 and Microsoft's extensive threat intelligence, Security Copilot streamlines threat detection and response, enabling defenders to operate at machine speed and scale.