Windows 7 VDI image hot fixes

This article documents Windows operating system patches (AKA hotfixes) currently available for Windows 7 when configured and running in a Virtual Desktop Infrastructure (VDI) environment.  The list of hotfixes here are for Windows fixes that are, for the most part, not offered via Windows Update, the Microsoft Catalog, or WSUS.  These fixes are the only way to update Windows code outside of Windows Update, until the next service pack is released.

Many fixes intended for regular Windows 7 are applicable to the Windows 7 in the VDI environment.  In addition, many Windows 7 fixes also apply to Server 2008 R2.  So it is very possible a given fix could apply to any Windows computer; thick, thin, or server, so could be applied across the board.  This helps by not having to maintain a "one-off" configuration, or at least reduce the complexity slightly.

NOTE

Microsoft provides two categories of updates to the Windows 7 operating system; General Distribution Release (GDR) and Limited Distribution Release (LDR).  GDR patches are more widely distributed, widely localized, widely tested, and address critical issues that can affect most if not all computers running Windows 7 worldwide.  LDR patches are usually made publically available, though are not widely distributed, not widely tested, and may not affect all Windows 7 computers worldwide.

LDR updates are not proactively advertised and generally not available through Windows Update, the Microsoft Catalog, or Windows Software Update Services (WSUS).  LDR patches, though often targeted to a specific symptom, can and often do have a positive impact on any Windows 7 computer.  A good example is a fix to the networking components to address a performance issue.  Another class of fixes have to do with slow logon.

IMPORTANT

LDR fixes are tested to a limited degree, but not tested as widely as GDR fixes.  Therefore Microsoft recommends that you test all fixes extensively before implementing in production.

For more information about software update terminology, see the following article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates
http://support.microsoft.com/kb/824684/

Windows 7 VDI image hot fixes

2775511 An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2775511/
NOTE: This is a very important rollup and should be installed even if none of the other fixes in this list are installed.  Please review 2775511 documentation for known issues before installing.

2833914 "Interactive Logon: Smart card removal behavior" Group Policy setting doesn't work as expected in Windows 7 SP1 or Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2833914/

**2886366 **FIX: You are instructed to restart the computer when you log on to a Windows 7 SP1 virtual-machine-based image
http://support.microsoft.com/kb/2886366/

**2885978 **0x0000007F Stop error on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based computer
http://support.microsoft.com/kb/2885978/

**2876644 **FIX: Outlook displays "Trying to Connect" or "Disconnected" when it tries to connect to Office 365 Exchange servers on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2876644/

2852386 Disk Cleanup Wizard addon lets users delete outdated Windows updates on Windows 7 SP1
http://support.microsoft.com/kb/2852386/

**2832248 **Memory leak occurs in the Wmiprvse.exe process in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2832248/

**2821049 **COM-based application freezes on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2821049/

**2815853 **RPC service crashes on a Windows 7-based or Windows Server 2008 R2-based COM client
http://support.microsoft.com/kb/2815853/

2815716 Splwow64.exe process doesn't end after a print job finishes in the 64-bit version of Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2815716/

**2848321 **I/O operations time out for files that are stored on offline storage in Windows 7 and Windows Server 2008 R2
http://support.microsoft.com/kb/2848321/

**2801453 **Delay during IPsec renegotiation on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2801453/

**2801244 **Connection to a DAV server cannot established on a computer that is running Windows 7 SP1
http://support.microsoft.com/kb/2801244/

2846960 Error when you open a SharePoint Document Library in Windows Explorer or map a network drive to the library after you install Internet Explorer 10
http://support.microsoft.com/kb/2846960/

2880024 FIX: The conversion program crashes when you convert a large and complex XML document in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2880024/

**2798286 **RemoteApp application session disconnects from a client computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2798286/

2797749 Explorer.exe process may crash after you add custom properties to a .doc file in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2797749/

2796647 Memory leak occurs in the Spoolsv.exe process after you run an application that performs WMI queries in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2796647/

2790804 Cache files are not deleted on a WebDAV client computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2790804/

2800213 High CPU usage during DST changeover in Windows Server 2008, Windows 7, or Windows Server 2008 R2
http://support.microsoft.com/kb/2800213/

2780102 "0x0000003B" Stop error when a Remote Desktop Connection Broker and a Windows 7 SP1 or Windows Server 2008 R2 SP1-based computer are in an RDS farm
http://support.microsoft.com/kb/2780102/

2772695 Task Category information is not displayed correctly in Event Viewer on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2772695/

2770436 You cannot scan data by using a USB 3.0 scanner that is connected to a Windows 7 or Windows Server 2008 R2-based computer
http://support.microsoft.com/kb/2770436/

2769359 Print job fails when the printer driver isolation feature is set to isolated or shared mode in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2769359/

2795616 Lines in EMF file don't display correctly on a remote computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2795616/

2768494 You cannot log on to a Windows 7-based or Windows Server 2008 R2-based client computer after you disable AES encryption for Kerberos authentication
http://support.microsoft.com/kb/2768494/

2866695 An application stops responding when a file has a circular reference in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2866695/

2831206 DFS network path goes offline in Windows 7 or Windows Server 2008 R2 when Transparent Caching Group Policy setting is enabled
http://support.microsoft.com/kb/2831206/

**2765546 **Icons are not displayed correctly on the taskbar in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2765546/

2743155 Application crashes when it uses the BitmapImage class to optimize images in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2743155/

2740317 You can’t use IXSSO to query an Index Server catalog after you install hotfix 2698365 in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2740317/

2824546 Incorrect DHCP packet is sent when DHCP client receives a DHCP offer on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based computer
http://support.microsoft.com/kb/2824546/

2732673 "Delayed write failed" error message when .pst files are stored on a network file server that is running Windows Server 2008 R2
http://support.microsoft.com/kb/2732673/

2780444 "0x0000012E" Stop error occurs when an application sends a 12-byte SCSI opcode to an iSCSI target in Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2780444/

2719594 "0x00000050" Stop error in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2719594/

2718841 "0xc0000005" error message and Windows Explorer stops responding on a computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2718841/

2710594 Memory leak when a file system minifilter driver calls the FltCreateSystemVolumeInformationFolder function in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2710594/

2707157 WebIO component uses its own DNS cache to resolve an FQDN in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2707157/

2807716 Error message when you try to map a drive to a network share in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2807716/

2836814 Incorrect result is returned when an application runs an LDAP query against Active Directory in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2836814/

2903590 Packets may be sent from unexpected NIC on Multihomed Computer in Windows 7 and Windows Server 2008 R2
http://support.microsoft.com/kb/2903590/
NOTE: This would not apply to VDI VMs that only have 1 vNIC configuration.  Also, this fix is settings only, no binaries to install.

2883492 SEC_E_INTERNAL_ERROR error when a 32-bit application calls the SChannel implementation of the InitializeSecurityContext function in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2883492/
NOTE: This fix is only for 64-bit Windows.

2830145 SID S-1-18-1 and SID S-1-18-2 can't be mapped on Windows 7 or Windows Server 2008 R2-based computers in a domain environment
http://support.microsoft.com/kb/2830145/

2799603 High CPU usage when you enable the High Precision Event Timer in the 32-bit version of Windows 7 SP1
http://support.microsoft.com/kb/2799603/
NOTE: This fix is only for 32-bit Windows.

2875501 FIX: The ExitProcess() function may not return the correct value in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2875501/

2882822 Update adds ITraceRelogger interface support to Windows Embedded Standard 7 SP1, Windows 7 SP1 and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2882822/

2824491 Cached credentials are always used when you run an elevated task in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2824491/

2842986 The "Trusted Root Certification Authorities" setting cannot be removed from a GPO in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2842986/

2750841 An IPv6 readiness update is available for Windows 7 and for Windows Server 2008 R2
http://support.microsoft.com/kb/2750841/

2786464 Hotfix enables the configuration of the TCP maximum SYN retransmission amount in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2786464/

2796764 The "New" option in the shortcut menu is missing for the root folder of a redirected drive in Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2796764/

2853952 Loss of consistency with IDE-attached virtual hard disks when a Hyper-V host server experiences an unplanned restart
http://support.microsoft.com/kb/2853952/

2797789 You cannot overwrite an exported event log file by using the Wevtutil.exe tool in Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012
http://support.microsoft.com/kb/2797789/

2826910 Secondary dump data is limited to 256 MB in Windows 7 and Windows Server 2008 R2
http://support.microsoft.com/kb/2826910/

2830598 Multiple mount points can be moved when there is a file is opened inside the mount point in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2830598/

2896146 Packet loss occurs when MTU is below 576 and PMTU discovery is enabled on your Windows 7 SP1 or Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2896146/EN-US