Originally published Aug. of 2014.  Updated Aug. 2014.

List of Group Policy related hotfixes post SP1 for Windows 7 SP1 and Windows Server 2008 R2 SP1

Applies to:

Windows Server 2008 R2 Service Pack 1
Windows Server 2008 R2 SP1
W2K8 R2 Service Pack 1
W2K8 R2 SP1

Windows 7 Service Pack 1
Windows 7 SP1
Win7 Service Pack 1
Win7 SP1

These updates and hotfixes can help avoid some known issues and may save you a support call.

A hotfix is intended to correct only the problem that is described in the article. You should not apply the hotfix if you have not seen the symptoms.

noteNote: A catch 22, do you install it to try preventing the problem from occurring or do you only install it if you see the problem and have an outage?



noteNote: Some updates are required only under certain circumstances

Note:  You should check http://support.microsoft.com/ for the latest version of the different files.

Note 2:  These are not available in Windows Update.

Note 3:  You can download them without entering your e-mail address and captcha if you are a Microsoft Premier customer and have a http://premier.microsoft.com/ account.

Note 4:  Carefully review the list and decide which might be applicable to your unique environment.

Note 5:  Test in your test and your quality assurance environment.



2590914 Recommended Updates for Group Policy in Windows Client and Server Products

 

 

http://support.microsoft.com/kb/2590914

 

2820927 Current hotfixes for Windows 7 SP1 enterprise clients that have folder redirection enabled

http://support.microsoft.com/kb/2820927

 

 

 

Group Policy related hotfixes after SP1 for Windows 7 and Windows Server 2008 R2:

=======================================================================

2974313 A domain controller freezes when an event subscription manager list is long in Windows 7 and Windows Server 2008 R2

http://support.microsoft.com/kb/2974313   

Update(s):

Winrm.cmd        

Winrm.vbs          

Wsmanconfig_schema.xml          

Wsmanhttpconfig.exe     6.1.7601.22716

Wsmanmigrationplugin.dll            6.1.7601.22716

Wsmauto.dll       6.1.7601.22716

Wsmauto.mof    Not applicable

Wsmplpxy.dll      6.1.7600.16385

Wsmprovhost.exe            6.1.7600.16385

Wsmpty.xsl        

Wsmres.dll          6.1.7600.16385

Wsmsvc.dll          6.1.7601.22716

Wsmtxt.xsl         

Wsmwmipl.dll    6.1.7601.22716

Supersede(s):

2884172 FIX: "Access is denied" error occurs on some source-initiated subscription workgroup computers in Windows 7 or Windows Server 2008 R2

 

2877985 FIX: Locked taskbar moves to the top of the screen in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2877985

Update(s):

Explorer-ppdlic.xrm-ms  

Explorer.exe  6.1.7601.22416 

Explorer.exe  6.1.7601.22416

 

2967567 Cannot access DFS root when the DFS path is offline and you log on to a Windows-based computer for the first time

http://support.microsoft.com/kb/2967567

Update(s):

Cscui.dll  6.1.7601.22699

 

2962059 "RPC Server Unavailable" error when you set up a password and then click Next in Bitlocker To Go in Windows 8.1 or Windows 7

http://support.microsoft.com/kb/2962059

Update(s):

Fveapi.dll  6.1.7601.22664 

Fveapibase.dll  6.1.7601.22666

Supersede(s):

2720568 You cannot enable the BitLocker Drive Encryption feature on a computer that is running Windows 7 or Windows Server 2008 R2

2652246 You cannot enable the BitLocker Drive Encryption feature on a computer that is running Windows 7 or Windows Server 2008 R2

 

2953722 Drive Maps preferences are still displayed in Group Policy RSoP after they are removed or disabled

http://support.microsoft.com/kb/2953722

Note:  Requires additional steps as described in the KB.

 

Update(s):

Gpprefcl.dll         6.1.7601.22649

Grouppolicy.adml            

Mmcsnapins.adml           

Mmcsnapins.admx          

Scripts.adml       

Scripts.adml       

Scripts.adml       

Scripts.admx      

Windows.admx 

Windowsproducts.adml 

Windowsproducts.admx

 

Supersede(s):

2904034 Error code 0x80070003 when a Group Policy preference is applied to Windows 7 clients

2875656 FIX: A shared printer that is mapped successfully with saved credentials is offline in Windows 7 and Windows Server 2008 R2

2869799 Group Policy Preferences incorrectly sets a network printer as default in Windows 7 and Windows Server 2008 R2

2867625 TCP port exhaustion causes key operations to fail when you deploy Group Policy preferences in Windows 7 SP1 or Windows Server 2008 R2 SP1

2864585 DSN is not changed or deleted on client computers when you use Group Policy Preferences to configure it in Windows 7 SP1 or Windows Server 2008 R2 SP1

2693010 Long startup or logon time on a Windows 7-based or Windows Server 2008 R2-based client computer when you apply a Group Policy preference that has OU filtering

2653810 Security group filter in Group Policy Preferences does not remove a user from a group in Windows Server 2008 or in Windows Server 2008 R2

2622802 The Group Policy Client service crashes on a terminal server that is running Windows Server 2008 or Windows Server 2008 R2 when multiple users connect to the server at the same time

2561285 You experience a memory leak or a long domain logon time in Windows Vista, Windows 7, Windows Server 2008 or Windows Server 2008 R2 after you deploy Group Policy preferences to the computer

2551503 A mapped drive that has the non-persistent flag set is displayed as a disconnected drive in Windows 7 or in Windows Server 2008 R2

 

2939180 RDP session freezes when you connect to a remote virtual machine that is running Windows 7 SP1

http://support.microsoft.com/kb/2939180

Update(s):

Rdpcorets.dll  6.2.9200.20978 

Rdpgrouppolicyextension.dll  6.2.9200.20883  

Rdpudd.dll  6.2.9200.20978  

Rdpvideominiport.sys  6.2.9200.16398

Terminalserver-winip.admx 

 

2937429 Group Policy Preferences items take a long time to apply because of full DFS namespace sync

http://support.microsoft.com/kb/2937429

Update(s):

Gpprefcl.dll  6.1.7601.22612

Supersede(s):

2912760 Logon Windows 7 freezes when a GPO setting name contains two consecutive "%" characters

 

2936943 Registry.pol is corrupted after an abnormal termination during the writing process in Windows Server 2012 and Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2936943

Update(s):

Gpedit.dll  6.1.7601.22611

 

2934842 The range of ports is not displayed when a Windows Firewall rule defines a local port range

http://support.microsoft.com/kb/2934842

Update(s):

Microsoft.grouppolicy.reporting.dll  6.1.7601.22613

Supersede(s):

2866693 Wired or Wireless Network GPO setting is not displayed in GPMC report in Windows Server 2008 R2 SP1

2842986 The "Trusted Root Certification Authorities" setting cannot be removed from a GPO in Windows 7 or Windows Server 2008 R2

2642947 "Index was out of range" error message when a Group Policy report is generated in Windows 7 or in Windows Server 2008 R2

2603262 "Index was outside the bounds of the array" error when you use the GPMC snap-in to view the detailed settings of a GPO in Windows Server 2008 R2 or in Windows 7

 

2932119 Incorrect DNS queries cause unnecessary network traffic when you start GPMC or GPUpdate in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2932119

Update(s):

Gpapi.dll              6.1.7601.22613

Gpapi.dll.mui      6.1.7601.22613

Gpmgmt.dll         6.1.7601.22613

Gprsop.dll            6.1.7601.17514

Gpsvc.dll              6.1.7601.22613

Gpsvc.dll.mui      6.1.7601.22613

Supersede(s):

2791372 You cannot edit GPO and the Registry.pol file is not replicated when locked in Windows Server 2008 R2 or Windows Server 2012

2673042 Long startup or logon time when no domain controllers are available on a Windows 7-based or Windows Server 2008 R2-based domain member computer

2568771 "The parameter is incorrect" error message when you try to use GPMC to back up a GPO in Windows 7 or in Windows Server 2008 R2

2553771 GetGPOList function does not return all GPOs in Windows 7, in Windows Server 2008 R2, in Windows Vista or in Windows Server 2008

2550944 Group Policy logon scripts do not run in Windows 7 or in Windows Server 2008 R2

 

2924678 "Trusted Publishers" settings are unmanageable in a Group Policy Object in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2924678

Update(s):

Microsoft.grouppolicy.reporting.dll           6.1.7601.22592

Microsoft.grouppolicy.reporting.resources.dll       6.1.7601.22592

Supersede(s):

2717541 Group policy report displays incorrect information on a computer that is running Windows 7 or Windows Server 2008 R2

 

2922852 Update resolves a problem in which LDAP, Kerberos and DC locator responses are slow or time out with Windows

http://support.microsoft.com/kb/2922852

Update(s):

Bootfix.bin         

Expand.exe.mui 6.1.7601.22582

Netlogon.adml  

Netlogon.admx 

Netlogon.dll       6.1.7601.22582

Netmsg.dll.mui  6.1.7601.22582

Netmsg.dll.mui  6.1.7601.22582

Nlsvc.mof           

Ntdsa.dll              6.1.7601.22582

Ntdsa.mof          

Ntdsai.dll             6.1.7601.22582

 

2920486 Cannot edit Group Policy settings on a site in Windows

http://support.microsoft.com/kb/2920486

Update(s):

L2gpstore.dll  6.1.7601.22553 

Wlangpui.dll  6.1.7601.22553 

 

2917033 An update is available to enable the use of Local ADMX files for Group Policy Editor

http://support.microsoft.com/kb/2917033

Update(s):

Microsoft.grouppolicy.reporting.dll  6.1.7601.22646  

Scrptadm.dll  6.1.7601.22646  

Admtmpl.dll  6.1.7601.22646 

Supersede(s):

2675275 A logoff script is removed incorrectly when you use the GMPC to remove a logon script on a Windows Server 2008 R2-based domain controller

 

2908518 Svchost.exe crashes after you install the RDP 8.0 update in Windows 7

http://support.microsoft.com/kb/2908518

Update(s):

Rdpcorets.dll  6.2.9200.20883

Rdpgrouppolicyextension.dll  6.2.9200.20883  

Rdpudd.dll  6.2.9200.16398 

Rdpvideominiport.sys  6.2.9200.16398  

Terminalserver-winip.admx 

 

2897002 Irrelevant BitLocker DRA certificate information is displayed in a GPO report in Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2897002

Update(s):

Microsoft.grouppolicy.reporting.dll  6.1.7601.22476

Microsoft.grouppolicy.reporting.resources.dll  6.1.7601.22476 

 

2894219 DFS link does not go offline when you access redirected folders from a different site in Windows

http://support.microsoft.com/kb/2894219

Update(s):

Dfsc.sys  6.1.7601.22472

 

2889673 Event ID 502 and logon delay in Windows after you configure the "Network directories to sync at Logon/Logoff time only" Group Policy setting

http://support.microsoft.com/kb/2889673

Update(s):

Shell32.dll  6.1.7601.22477

 

2863374 The BITS bandwidth limitation transitions are not applied to the ongoing transfers in Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1

http://support.microsoft.com/kb/2863374

Update(s):

Qmgr.dll  7.5.7601.22365 

Qmgr.mof 

Supersede(s):

2659493 Bandwidth throttling reverts to the default settings after a Group Policy is updated in Windows 7 or in Windows Server 2008 R2

 

2862565 AppLocker blocks administrators and other high privileged group’s users from executing files on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based computer

http://support.microsoft.com/kb/2862565

Update(s):

Appid-ppdlic.xrm-ms  

Appid.sys  6.1.7601.22382  

Appidapi.dll  6.1.7601.22382  

Appidcertstorecheck.exe  6.1.7601.22382  

Appidpolicyconverter.exe  6.1.7601.22382  

Appidsvc.dll  6.1.7601.22382    

Csrsrv.dll  6.1.7601.22382  

Ntkrnlpa.exe  6.1.7601.22382   

Ntoskrnl.exe  6.1.7601.22382  

Apisetschema.dll  6.1.7601.22382  

Smss.exe  6.1.7601.22382 

Supersede(s):

2568041 You cannot access allowed applications that are managed by AppLocker in Windows 7 or in Windows Server 2008 R2

 

2849027 Internet Explorer 10 security settings are silently applied to client computers when you use GPMC to view the Group Policy Preferences settings in Windows

http://support.microsoft.com/kb/2849027

Update(s):

Gpme.dll  6.2.9200.16384  

Gppref.dll  6.2.9200.20773  

Gpprefbr.dll  6.2.9200.20773 

Gpprefcn.dll  6.2.9200.20773  

Gpregistrybrowser.dll  6.2.9200.16384 

Propshts.dll  6.2.9200.20773 

Supersede(s):

2798787 Name of Group Policy preferences for Internet Explorer are displayed incorrectly in Windows 7 or Windows Server 2008 R2

2738974 Incorrect start time of Group Policy scheduled tasks on a client computer that is running Windows 7 or Windows Server 2008 R2

 

2833914 "Interactive Logon: Smart card removal behavior" Group Policy setting doesn't work as expected in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2833914

Update(s):

Certprop.dll        6.1.7601.22288

Certprop.dll.mui 6.1.7601.22288

Scarddlg.dll         6.1.7600.16385

Scarddlg.dll.mui 6.1.7601.22288

Scardsvr.dll         6.1.7601.22288

Scardsvr.dll.mui 6.1.7601.22288

Sccls.dll 6.1.7600.16385

Sccls.dll.mui        6.1.7601.22288

Scfilter.sys           6.1.7601.22288

Scfilter.sys.mui   6.1.7601.22288

 

2831206 DFS network path goes offline in Windows 7 or Windows Server 2008 R2 when Transparent Caching Group Policy setting is enabled

http://support.microsoft.com/kb/2831206

Update(s):

Cscapi.dll             6.1.7601.22579

Cscdll.dll              6.1.7601.22579

Csc.sys  6.1.7601.22579

Cscmig.dll            6.1.7601.22579

Microsoft-windows-offlinefiles-core-ppdlic.xrm-ms          

Cscsvc.dll             6.1.7601.22579

Microsoft-windows-offlinefiles.mof         

Supersede(s):

2761645 Access Denied error message when a user tries to access a redirected folder share or a home drive share on a computer that is running Windows 7 or Windows Server 2008 R2

2715922 multiple users are logged on to a computer that is running Windows 7 or Windows Server 2008 R2

2714030 A new file that has the same file name as a ghost file can be created without displaying a prompt on a Windows 7-based or Windows Server 2008 R2-based client computer

2610379 The Folder Redirection policy does not work if a previous user sets a redirected folder to an offline mode in Windows 7 or in Windows Server 2008 R2

 

2824491 Cached credentials are always used when you run an elevated task in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2824491

Note:  There is a registry key that you also have to enable.

Update(s):

Authui.dll             6.1.7601.22296

Authui.ptxml      

Appinfo.dll          6.1.7601.22296

Consent.exe       6.1.7601.22296

Supersede(s):

2558990 You cannot use the arrow keys to scroll through the text in the legal notice that is displayed at startup in Windows 7 or in Windows Server 2008 R2

 

2810177 Excessive network traffic after you enable the Background Sync and Transparent Caching Group Policy settings in Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2810177

Update(s):

Microsoft-windows-offlinefiles.mfl 

Microsoft-windows-offlinefiles.mof 

Cscsvc.dll  6.1.7601.22244 

 

2809808 Takes longer than expected to log off from a Windows Server 2008 R2 SP1-based RDS server remotely

http://support.microsoft.com/kb/2809808

Update(s):

Wsepno.dll  7.0.7601.22244 

 

2801453 Delay during IPsec renegotiation on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2801453

Update(s):

Bfe.dll  6.1.7601.22214 

Fwpuclnt.dll  6.1.7601.22214 

Ikeext.dll  6.1.7601.22214 

Networksecurity-ppdlic.xrm-ms 

Nshwfp.dll  6.1.7601.22214 

Wfp.mof 

 

2799904 Folder Redirection policy is not applied to a network share after you update a Group Policy in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2799904

Update(s):

Shell32.dll  6.1.7601.22230

Supersede(s):

2771101 Folder redirection policy fails after you redirect a folder to a different sub folder in Windows 7 or Windows Server 2008 R2

 

2797136 Mapped printers are not added to a client computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2797136

Update(s):

Win32spl.dll  6.1.7601.22215 

Win32spl.dll  6.1.7601.22215 

Supersede(s):

2748246 "The Specified port is unknown" error message when you use GPP to deploy printers to a computer that is running Windows

 

2783429 High CPU utilization when you use the Print Management snap-in to add a printer in Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2783429

Update(s):

Printui.dll  6.1.7600.21377 

Printui.dll  6.1.7601.22169 

 

2775511 An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1

Update(s):

http://support.microsoft.com/kb/2775511

 

2769372 Windows Remote Assistance fails in Windows 7 SP1 or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2769372

Update(s):

Wksprt.exe         6.1.7601.22131

Mstsc.exe            6.1.7601.22131

Mstsc.mof          

Aaclient.dll          6.1.7601.22131

Aaclient.mof      

Mstscax.dll          6.1.7601.22131

Mstscax.mof     

Tsgqec.dll            6.1.7601.22131

Aaclient.dll.mui  6.1.7601.22131

Aaclient.mfl       

Mstscax.dll.mui  6.1.7601.22131

Mstscax.mfl       

Tsgqec.dll.mui    6.1.7601.22131

 

2768494 You cannot log on to a Windows 7-based or Windows Server 2008 R2-based client computer after you disable AES encryption for Kerberos authentication

http://support.microsoft.com/kb/2768494

Update(s):

Cryptdll.dll  6.1.7601.22130 

 

2765067 The "Network access: Named Pipes that can be accessed anonymously" Group Policy setting cannot be saved if you delete all listed named pipes by using the GPMC in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2765067

Update(s):

Wsecedit.dll  6.1.7601.22124 

 

2755625 Event ID 4097 is not logged as expected when you cannot install an ActiveX control from a website to a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2755625

Update(s):

Axinstsv.dll          6.1.7600.21334

Axinstui.exe        6.1.7600.16385

Axinstsv.dll          6.1.7601.22124

Axinstui.exe        6.1.7600.16385

 

2751386 Group Policy settings and preferences are applied to a roaming profile user who logs on to two Windows 7-based or Windows Server 2008 R2-based client computers

http://support.microsoft.com/kb/2751386

Update(s):

Profprov.dll         6.1.7601.17514

Profsvc.dll           6.1.7601.22103

Profsvc.ptxml    

Userprofilewmiprovider.mof       

Supersede(s):

2673347 Home directory settings that you defined in Group Policy are not applied on a Windows 7 SP1-based or Windows Server 2008 R2 SP1-based VDI client

2600484 Certain user folders are absent from the user profile in Windows 7 or in Windows Server 2008 R2 if the folders are excluded from the roaming profile

 

2738898 Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows Server 2008, in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2738898

Update(s):

Sysclass.dll          6.1.7600.21338

Sysclass.dll          6.1.7601.22128

Wpdbusenum.dll               6.1.7600.21338

Wpdbusenum.mof          

Wpdfs.mof         

Wpdbusenum.dll               6.1.7601.22128

Wpdbusenum.mof          

Wpdfs.mof         

Wpd_ci.dll           6.1.7600.21338

Wpd_ci.mof       

Wpd_ci.dll           6.1.7601.22128

Wpd_ci.mof

 

2728738 You experience a long logon time when you try to log on to a Windows 7-based or a Windows Server 2008 R2-based client computer that uses roaming profiles

http://support.microsoft.com/kb/2728738

Update(s):

Profprov.dll  6.1.7601.22382 -> newer in 2751386

Profsvc.dll  6.1.7601.22382  -> newer in 2751386

Mrxsmb10.sys  6.1.7601.22382  

Mrxsmb20.sys  6.1.7601.22382  

Mrxsmb.sys  6.1.7601.22382 

 

2712331 Duplicate SID information is added to the MachineLaunchRestriction registry entry when you update the Offer Remote Assistance Group Policy setting in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2712331

Update(s):

Raserver.exe  6.1.7600.21212 

Rendezvoussession.tlb  6.1.7600.16385  

Raserver.exe  6.1.7601.21992  

Rendezvoussession.tlb  6.1.7600.16385 

 

2691156 The first two bytes of the DWORD registry value for a Group Policy are cleared unexpectedly on a computer that is running Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 R2 SP1

http://support.microsoft.com/kb/2691156

Update(s):

Scesrv.dll  6.1.7601.21980 

 

2660114 "Do not turn off system power after a Windows system shutdown has occurred" Group Policy setting does not work in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2660114

Update(s):

Ntkrnlpa.exe  6.1.7601.17761  

Ntoskrnl.exe  6.1.7601.17761  

Ntkrnlpa.exe  6.1.7601.21897 

Ntoskrnl.exe  6.1.7601.21897 

 

2647582 You cannot update the Group Policy settings on a Windows Server 2008 R2-based RD Session Host server if IP Virtualization is applied

http://support.microsoft.com/kb/2647582

Update(s):

Tsvipcli.dll  6.1.7601.21865 

 

2647409 Remote Desktop Services sessions are not kept alive as expected in Windows Server 2008 R2

http://support.microsoft.com/kb/2647409

Update(s):

Pci.sys  6.1.7601.21866 

Termdd.sys  6.1.7601.21866

Volmgr.sys  6.1.7601.21866

Termsrv.dll  6.1.7601.21866

 

2636585 Proquota.exe uses incorrect profile quota Group Policy settings in Windows Vista, in Windows 7, in Windows Server 2008 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2636585

Update(s):

Proquota.exe  6.1.7601.21927

 

2575946 "Limit the size of the entire roaming user profile cache" Group Policy setting does not work in Windows Server 2008 R2

http://support.microsoft.com/kb/2575946

Update(s):

Sessenv.dll  6.1.7601.21772 

 

2575866 RSoP shows a red X on the icons for registry settings in 64-bit Windows Vista, in 64-bit Windows 7, in 64-bit Windows Server 2008 or in 64-bit Windows Server 2008 R2

http://support.microsoft.com/kb/2575866

Update(s):

Scecli.dll  6.1.7601.21864

 

2562672 Computer stops responding if the smart card is removed during hibernation in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/2562672

Update(s):

Winlogon.exe  6.1.7601.21756

 

2549067 A user who has administrator permission can delete printers on a computer that is running Windows 7 or Windows Server 2008 R2 after you deploy the "Prevent deletion of printers" Group Policy

http://support.microsoft.com/kb/2549067

Update(s):

Bwcontexthandler.dll  1.0.0.1    

Fdprint.dll  6.1.7601.21899