List of Group Policy related hotfixes post SP1 for Windows 7 SP1 and Windows Server 2008 R2 SP1

Article
1/17/2024

Originally published Aug. of 2014. Updated Aug. 2014.

Applies to:

Windows Server 2008 R2 Service Pack 1
Windows Server 2008 R2 SP1
W2K8 R2 Service Pack 1
W2K8 R2 SP1

Windows 7 Service Pack 1
Windows 7 SP1
Win7 Service Pack 1
Win7 SP1

These updates and hotfixes can help avoid some known issues and may save you a support call.
**
A hotfix is intended to correct only the problem that is described in the article. You should not apply the hotfix if you have not seen the symptoms.

http://i.technet.microsoft.com/ff394763.note%28en-us,WS.10%29.gifNote: A catch 22, do you install it to try preventing the problem from occurring or do you only install it if you see the problem and have an outage?

http://i.technet.microsoft.com/ff394763.note%28en-us,WS.10%29.gifNote: Some updates are required only under certain circumstances**

Note: You should check http://support.microsoft.com/ for the latest version of the different files.

Note 2: These are not available in Windows Update.

Note 3: You can download them without entering your e-mail address and captcha if you are a Microsoft Premier customer and have a http://premier.microsoft.com/ account.

Note 4: Carefully review the list and decide which might be applicable to your unique environment.

Note 5: Test in your test and your quality assurance environment.

2590914 Recommended Updates for Group Policy in Windows Client and Server Products

http://support.microsoft.com/kb/2590914

2820927 Current hotfixes for Windows 7 SP1 enterprise clients that have folder redirection enabled

http://support.microsoft.com/kb/2820927

Group Policy related hotfixes after SP1 for Windows 7 and Windows Server 2008 R2:

=======================================================================

2974313 A domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2

http://support.microsoft.com/kb/2974313

Update(s):

Winrm.cmd

Winrm.vbs

Wsmanconfig_schema.xml

Wsmanhttpconfig.exe 6.1.7601.22716

Wsmanmigrationplugin.dll 6.1.7601.22716

Wsmauto.dll 6.1.7601.22716

Wsmauto.mof Not applicable

Wsmplpxy.dll 6.1.7600.16385

Wsmprovhost.exe 6.1.7600.16385

Wsmpty.xsl

Wsmres.dll 6.1.7600.16385

Wsmsvc.dll 6.1.7601.22716

Wsmtxt.xsl

Wsmwmipl.dll 6.1.7601.22716

Supersede(s):

2884172 FIX: "Access is denied" error occurs on some source-initiated subscription workgroup computers in Windows 7 or Windows Server 2008 R2

2877985 FIX: Locked taskbar moves to the top of the screen in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2877985

Update(s):

Explorer-ppdlic.xrm-ms

Explorer.exe 6.1.7601.22416

2967567 Cannot access DFS root when the DFS path is offline and you log on to a Windows-based computer for the first time

http://support.microsoft.com/kb/2967567

Update(s):

Cscui.dll 6.1.7601.22699

2962059 "RPC Server Unavailable" error when you set up a password and then click Next in Bitlocker To Go in Windows 8.1 or Windows 7

http://support.microsoft.com/kb/2962059

Update(s):

Fveapi.dll 6.1.7601.22664

Fveapibase.dll 6.1.7601.22666

Supersede(s):

2720568 You cannot enable the BitLocker Drive Encryption feature on a computer that is running Windows 7 or Windows Server 2008 R2

2652246 You cannot enable the BitLocker Drive Encryption feature on a computer that is running Windows 7 or Windows Server 2008 R2

2953722 Drive Maps preferences are still displayed in Group Policy RSoP after they are removed or disabled

http://support.microsoft.com/kb/2953722

Note: Requires additional steps as described in the KB.

Update(s):

Gpprefcl.dll 6.1.7601.22649

Grouppolicy.adml

Mmcsnapins.adml

Mmcsnapins.admx

Scripts.adml

Scripts.admx

Windows.admx

Windowsproducts.adml

Windowsproducts.admx

Supersede(s):

2904034 Error code 0x80070003 when a Group Policy preference is applied to Windows 7 clients

2875656 FIX: A shared printer that is mapped successfully with saved credentials is offline in Windows 7 and Windows Server 2008 R2

2869799 Group Policy Preferences incorrectly sets a network printer as default in Windows 7 and Windows Server 2008 R2

2867625 TCP port exhaustion causes key operations to fail when you deploy Group Policy preferences in Windows 7 SP1 or Windows Server 2008 R2 SP1

2864585 DSN is not changed or deleted on client computers when you use Group Policy Preferences to configure it in Windows 7 SP1 or Windows Server 2008 R2 SP1

2693010 Long startup or logon time on a Windows 7-based or Windows Server 2008 R2-based client computer when you apply a Group Policy preference that has OU filtering

2653810 Security group filter in Group Policy Preferences does not remove a user from a group in Windows Server 2008 or in Windows Server 2008 R2

2622802 The Group Policy Client service crashes on a terminal server that is running Windows Server 2008 or Windows Server 2008 R2 when multiple users connect to the server at the same time

2561285 You experience a memory leak or a long domain logon time in Windows Vista, Windows 7, Windows Server 2008 or Windows Server 2008 R2 after you deploy Group Policy preferences to the computer

2551503 A mapped drive that has the non-persistent flag set is displayed as a disconnected drive in Windows 7 or in Windows Server 2008 R2

2939180 RDP session freezes when you connect to a remote virtual machine that is running Windows 7 SP1

http://support.microsoft.com/kb/2939180

Update(s):

Rdpcorets.dll 6.2.9200.20978

Rdpgrouppolicyextension.dll 6.2.9200.20883

Rdpudd.dll 6.2.9200.20978

Rdpvideominiport.sys 6.2.9200.16398

Terminalserver-winip.admx

2937429 Group Policy Preferences items take a long time to apply because of full DFS namespace sync

http://support.microsoft.com/kb/2937429

Update(s):

Gpprefcl.dll 6.1.7601.22612

Supersede(s):

2912760 Logon Windows 7 freezes when a GPO setting name contains two consecutive "%" characters

2936943 Registry.pol is corrupted after an abnormal termination during the writing process in Windows Server 2012 and Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2936943

Update(s):

Gpedit.dll 6.1.7601.22611

2934842 The range of ports is not displayed when a Windows Firewall rule defines a local port range

http://support.microsoft.com/kb/2934842

Update(s):

Microsoft.grouppolicy.reporting.dll 6.1.7601.22613

Supersede(s):

2866693 Wired or Wireless Network GPO setting is not displayed in GPMC report in Windows Server 2008 R2 SP1

2842986 The "Trusted Root Certification Authorities" setting cannot be removed from a GPO in Windows 7 or Windows Server 2008 R2

2642947 "Index was out of range" error message when a Group Policy report is generated in Windows 7 or in Windows Server 2008 R2

2603262 "Index was outside the bounds of the array" error when you use the GPMC snap-in to view the detailed settings of a GPO in Windows Server 2008 R2 or in Windows 7

2932119 Incorrect DNS queries cause unnecessary network traffic when you start GPMC or GPUpdate in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2932119

Update(s):

Gpapi.dll 6.1.7601.22613

Gpapi.dll.mui 6.1.7601.22613

Gpmgmt.dll 6.1.7601.22613

Gprsop.dll 6.1.7601.17514

Gpsvc.dll 6.1.7601.22613

Gpsvc.dll.mui 6.1.7601.22613

Supersede(s):

2791372 You cannot edit GPO and the Registry.pol file is not replicated when locked in Windows Server 2008 R2 or Windows Server 2012

2673042 Long startup or logon time when no domain controllers are available on a Windows 7-based or Windows Server 2008 R2-based domain member computer

2568771 "The parameter is incorrect" error message when you try to use GPMC to back up a GPO in Windows 7 or in Windows Server 2008 R2

2553771 GetGPOList function does not return all GPOs in Windows 7, in Windows Server 2008 R2, in Windows Vista or in Windows Server 2008

2550944 Group Policy logon scripts do not run in Windows 7 or in Windows Server 2008 R2

2924678 "Trusted Publishers" settings are unmanageable in a Group Policy Object in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2924678

Update(s):

Microsoft.grouppolicy.reporting.dll 6.1.7601.22592

Microsoft.grouppolicy.reporting.resources.dll 6.1.7601.22592

Supersede(s):

2717541 Group policy report displays incorrect information on a computer that is running Windows 7 or Windows Server 2008 R2

2922852 Update resolves a problem in which LDAP, Kerberos and DC locator responses are slow or time out with Windows

http://support.microsoft.com/kb/2922852

Update(s):

Bootfix.bin

Expand.exe.mui 6.1.7601.22582

Netlogon.adml

Netlogon.admx

Netlogon.dll 6.1.7601.22582

Netmsg.dll.mui 6.1.7601.22582

Nlsvc.mof

Ntdsa.dll 6.1.7601.22582

Ntdsa.mof

Ntdsai.dll 6.1.7601.22582

2920486 Cannot edit Group Policy settings on a site in Windows

http://support.microsoft.com/kb/2920486

Update(s):

L2gpstore.dll 6.1.7601.22553

Wlangpui.dll 6.1.7601.22553

2917033 An update is available to enable the use of Local ADMX files for Group Policy Editor

http://support.microsoft.com/kb/2917033

Update(s):

Microsoft.grouppolicy.reporting.dll 6.1.7601.22646

Scrptadm.dll 6.1.7601.22646

Admtmpl.dll 6.1.7601.22646

Supersede(s):

2675275 A logoff script is removed incorrectly when you use the GMPC to remove a logon script on a Windows Server 2008 R2-based domain controller

2908518 Svchost.exe crashes after you install the RDP 8.0 update in Windows 7

http://support.microsoft.com/kb/2908518

Update(s):

Rdpcorets.dll 6.2.9200.20883

Rdpgrouppolicyextension.dll 6.2.9200.20883

Rdpudd.dll 6.2.9200.16398

Rdpvideominiport.sys 6.2.9200.16398

Terminalserver-winip.admx

2897002 Irrelevant BitLocker DRA certificate information is displayed in a GPO report in Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2897002

Update(s):

Microsoft.grouppolicy.reporting.dll 6.1.7601.22476

Microsoft.grouppolicy.reporting.resources.dll 6.1.7601.22476

2894219 DFS link does not go offline when you access redirected folders from a different site in Windows

http://support.microsoft.com/kb/2894219

Update(s):

Dfsc.sys 6.1.7601.22472

2889673 Event ID 502 and logon delay in Windows after you configure the "Network directories to sync at Logon/Logoff time only" Group Policy setting

http://support.microsoft.com/kb/2889673

Update(s):

Shell32.dll 6.1.7601.22477

2863374 The BITS bandwidth limitation transitions are not applied to the ongoing transfers in Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1

http://support.microsoft.com/kb/2863374

Update(s):

Qmgr.dll 7.5.7601.22365

Qmgr.mof

Supersede(s):

2659493 Bandwidth throttling reverts to the default settings after a Group Policy is updated in Windows 7 or in Windows Server 2008 R2

2862565 AppLocker blocks administrators and other high privileged group’s users from executing files on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based computer

http://support.microsoft.com/kb/2862565

Update(s):

Appid-ppdlic.xrm-ms

Appid.sys 6.1.7601.22382

Appidapi.dll 6.1.7601.22382

Appidcertstorecheck.exe 6.1.7601.22382

Appidpolicyconverter.exe 6.1.7601.22382

Appidsvc.dll 6.1.7601.22382

Csrsrv.dll 6.1.7601.22382

Ntkrnlpa.exe 6.1.7601.22382

Ntoskrnl.exe 6.1.7601.22382

Apisetschema.dll 6.1.7601.22382

Smss.exe 6.1.7601.22382

Supersede(s):

2568041 You cannot access allowed applications that are managed by AppLocker in Windows 7 or in Windows Server 2008 R2

2849027 Internet Explorer 10 security settings are silently applied to client computers when you use GPMC to view the Group Policy Preferences settings in Windows

http://support.microsoft.com/kb/2849027

Update(s):

Gpme.dll 6.2.9200.16384

Gppref.dll 6.2.9200.20773

Gpprefbr.dll 6.2.9200.20773

Gpprefcn.dll 6.2.9200.20773

Gpregistrybrowser.dll 6.2.9200.16384

Propshts.dll 6.2.9200.20773

Supersede(s):

2798787 Name of Group Policy preferences for Internet Explorer are displayed incorrectly in Windows 7 or Windows Server 2008 R2

2738974 Incorrect start time of Group Policy scheduled tasks on a client computer that is running Windows 7 or Windows Server 2008 R2

2833914 "Interactive Logon: Smart card removal behavior" Group Policy setting doesn't work as expected in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2833914

Update(s):

Certprop.dll 6.1.7601.22288

Certprop.dll.mui 6.1.7601.22288

Scarddlg.dll 6.1.7600.16385

Scarddlg.dll.mui 6.1.7601.22288

Scardsvr.dll 6.1.7601.22288

Scardsvr.dll.mui 6.1.7601.22288

Sccls.dll 6.1.7600.16385

Sccls.dll.mui 6.1.7601.22288

Scfilter.sys 6.1.7601.22288

Scfilter.sys.mui 6.1.7601.22288

2831206 DFS network path goes offline in Windows 7 or Windows Server 2008 R2 when Transparent Caching Group Policy setting is enabled

http://support.microsoft.com/kb/2831206

Update(s):

Cscapi.dll 6.1.7601.22579

Cscdll.dll 6.1.7601.22579

Csc.sys 6.1.7601.22579

Cscmig.dll 6.1.7601.22579

Microsoft-windows-offlinefiles-core-ppdlic.xrm-ms

Cscsvc.dll 6.1.7601.22579

Microsoft-windows-offlinefiles.mof

Supersede(s):

2761645 Access Denied error message when a user tries to access a redirected folder share or a home drive share on a computer that is running Windows 7 or Windows Server 2008 R2

2715922 multiple users are logged on to a computer that is running Windows 7 or Windows Server 2008 R2

2714030 A new file that has the same file name as a ghost file can be created without displaying a prompt on a Windows 7-based or Windows Server 2008 R2-based client computer

2610379 The Folder Redirection policy does not work if a previous user sets a redirected folder to an offline mode in Windows 7 or in Windows Server 2008 R2

2824491 Cached credentials are always used when you run an elevated task in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2824491

Note: There is a registry key that you also have to enable.

Update(s):

Authui.dll 6.1.7601.22296

Authui.ptxml

Appinfo.dll 6.1.7601.22296

Consent.exe 6.1.7601.22296

Supersede(s):

2558990 You cannot use the arrow keys to scroll through the text in the legal notice that is displayed at startup in Windows 7 or in Windows Server 2008 R2

2810177 Excessive network traffic after you enable the Background Sync and Transparent Caching Group Policy settings in Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2810177

Update(s):

Microsoft-windows-offlinefiles.mfl

Microsoft-windows-offlinefiles.mof

Cscsvc.dll 6.1.7601.22244

2809808 Takes longer than expected to log off from a Windows Server 2008 R2 SP1-based RDS server remotely

http://support.microsoft.com/kb/2809808

Update(s):

Wsepno.dll 7.0.7601.22244

2801453 Delay during IPsec renegotiation on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2801453

Update(s):

Bfe.dll 6.1.7601.22214

Fwpuclnt.dll 6.1.7601.22214

Ikeext.dll 6.1.7601.22214

Networksecurity-ppdlic.xrm-ms

Nshwfp.dll 6.1.7601.22214

Wfp.mof

2799904 Folder Redirection policy is not applied to a network share after you update a Group Policy in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2799904

Update(s):

Shell32.dll 6.1.7601.22230

Supersede(s):

2771101 Folder redirection policy fails after you redirect a folder to a different sub folder in Windows 7 or Windows Server 2008 R2

2797136 Mapped printers are not added to a client computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2797136

Update(s):

Win32spl.dll 6.1.7601.22215

Supersede(s):

2748246 "The Specified port is unknown" error message when you use GPP to deploy printers to a computer that is running Windows

2783429 High CPU utilization when you use the Print Management snap-in to add a printer in Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2783429

Update(s):

Printui.dll 6.1.7600.21377

Printui.dll 6.1.7601.22169

2775511 An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1

Update(s):

http://support.microsoft.com/kb/2775511

2769372 Windows Remote Assistance fails in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2769372

Update(s):

Wksprt.exe 6.1.7601.22131

Mstsc.exe 6.1.7601.22131

Mstsc.mof

Aaclient.dll 6.1.7601.22131

Aaclient.mof

Mstscax.dll 6.1.7601.22131

Mstscax.mof

Tsgqec.dll 6.1.7601.22131

Aaclient.dll.mui 6.1.7601.22131

Aaclient.mfl

Mstscax.dll.mui 6.1.7601.22131

Mstscax.mfl

Tsgqec.dll.mui 6.1.7601.22131

2768494 You cannot log on to a Windows 7-based or Windows Server 2008 R2-based client computer after you disable AES encryption for Kerberos authentication

http://support.microsoft.com/kb/2768494

Update(s):

Cryptdll.dll 6.1.7601.22130

2765067 The "Network access: Named Pipes that can be accessed anonymously" Group Policy setting cannot be saved if you delete all listed named pipes by using the GPMC in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2765067

Update(s):

Wsecedit.dll 6.1.7601.22124

2755625 Event ID 4097 is not logged as expected when you cannot install an ActiveX control from a website to a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2755625

Update(s):

Axinstsv.dll 6.1.7600.21334

Axinstui.exe 6.1.7600.16385

Axinstsv.dll 6.1.7601.22124

Axinstui.exe 6.1.7600.16385

2751386 Group Policy settings and preferences are applied to a roaming profile user who logs on to two Windows 7-based or Windows Server 2008 R2-based client computers

http://support.microsoft.com/kb/2751386

Update(s):

Profprov.dll 6.1.7601.17514

Profsvc.dll 6.1.7601.22103

Profsvc.ptxml

Userprofilewmiprovider.mof

Supersede(s):

2673347 Home directory settings that you defined in Group Policy are not applied on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based VDI client

2600484 Certain user folders are absent from the user profile in Windows 7 or in Windows Server 2008 R2 if the folders are excluded from the roaming profile

2738898 Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows Server 2008, in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2738898

Update(s):

Sysclass.dll 6.1.7600.21338

Sysclass.dll 6.1.7601.22128

Wpdbusenum.dll 6.1.7600.21338

Wpdbusenum.mof

Wpdfs.mof

Wpdbusenum.dll 6.1.7601.22128

Wpdbusenum.mof

Wpdfs.mof

Wpd_ci.dll 6.1.7600.21338

Wpd_ci.mof

Wpd_ci.dll 6.1.7601.22128

Wpd_ci.mof

2728738 You experience a long logon time when you try to log on to a Windows 7-based or a Windows Server 2008 R2-based client computer that uses roaming profiles

http://support.microsoft.com/kb/2728738

Update(s):

Profprov.dll 6.1.7601.22382 -> newer in 2751386

Profsvc.dll 6.1.7601.22382 -> newer in 2751386

Mrxsmb10.sys 6.1.7601.22382

Mrxsmb20.sys 6.1.7601.22382

Mrxsmb.sys 6.1.7601.22382

2712331 Duplicate SID information is added to the MachineLaunchRestriction registry entry when you update the Offer Remote Assistance Group Policy setting in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2712331

Update(s):

Raserver.exe 6.1.7600.21212

Rendezvoussession.tlb 6.1.7600.16385

Raserver.exe 6.1.7601.21992

Rendezvoussession.tlb 6.1.7600.16385

2691156 The first two bytes of the DWORD registry value for a Group Policy are cleared unexpectedly on a computer that is running Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2691156

Update(s):

Scesrv.dll 6.1.7601.21980

2660114 "Do not turn off system power after a Windows system shutdown has occurred" Group Policy setting does not work in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2660114

Update(s):

Ntkrnlpa.exe 6.1.7601.17761

Ntoskrnl.exe 6.1.7601.17761

Ntkrnlpa.exe 6.1.7601.21897

Ntoskrnl.exe 6.1.7601.21897

2647582 You cannot update the Group Policy settings on a Windows Server 2008 R2-based RD Session Host server if IP Virtualization is applied

http://support.microsoft.com/kb/2647582

Update(s):

Tsvipcli.dll 6.1.7601.21865

2647409 Remote Desktop Services sessions are not kept alive as expected in Windows Server 2008 R2

http://support.microsoft.com/kb/2647409

Update(s):

Pci.sys 6.1.7601.21866

Termdd.sys 6.1.7601.21866

Volmgr.sys 6.1.7601.21866

Termsrv.dll 6.1.7601.21866

2636585 Proquota.exe uses incorrect profile quota Group Policy settings in Windows Vista, in Windows 7, in Windows Server 2008 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2636585

Update(s):

Proquota.exe 6.1.7601.21927

2575946 "Limit the size of the entire roaming user profile cache" Group Policy setting does not work in Windows Server 2008 R2

http://support.microsoft.com/kb/2575946

Update(s):

Sessenv.dll 6.1.7601.21772

2575866 RSoP shows a red X on the icons for registry settings in 64-bit Windows Vista, in 64-bit Windows 7, in 64-bit Windows Server 2008 or in 64-bit Windows Server 2008 R2

http://support.microsoft.com/kb/2575866

Update(s):

Scecli.dll 6.1.7601.21864

2562672 Computer stops responding if the smart card is removed during hibernation in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2562672

Update(s):

Winlogon.exe 6.1.7601.21756

2549067 A user who has administrator permission can delete printers on a computer that is running Windows 7 or Windows Server 2008 R2 after you deploy the "Prevent deletion of printers" Group Policy

http://support.microsoft.com/kb/2549067

Update(s):

Bwcontexthandler.dll 1.0.0.1

Fdprint.dll 6.1.7601.21899

Share via

Additional resources