KB5034203: Cumulative update for Windows 10, version 22H2, January 2024. Printer setup issue addressed; richer weather comes to the lock screen

Addresses an issue that could make some single-function printers install as scanners and begins rolling out interactive weather on the lock screen.

Does it affect you? Applies to: Devices running Windows 10, version 22H2, on x86, x64, and Arm64.

What changes

Fixes 14 changes

Printers

Addresses an issue that could make some single-function printers install as scanners.¹

Internet Explorer shortcut

For: Devices managed by a policy that removes the shortcut

Addresses an issue where the Internet Explorer shortcut reappears after a policy removes it.²

Windows Management Instrumentation

Addresses a caching issue that can cause the CurrentTimeZone value to be wrong.³
The affected WMI property is CurrentTimeZone.

Event records

Addresses an issue that stops XPath queries from matching values in event records.⁴
The issue affects queries on FileHash and other binary fields.

BitLocker

For: Devices managed by an MDM service

Addresses incorrect encryption data being reported to mobile device management services.⁵
Affects BitLocker data-only encryption when FixedDrivesEncryptionType or SystemDrivesEncryptionType is configured in the BitLocker CSP node.

Code Integrity Module

Addresses an issue that can make the device stop responding.⁶
The affected module is ci.dll.

Remote Desktop

Addresses an issue that can open a new Remote Desktop session instead of reconnecting to an existing one.⁷

RemoteApps

Addresses an issue where a keyboard language change fails to apply to RemoteApps in some scenarios.⁸

Windows LAPS

For: Devices using Windows LAPS

Addresses an issue where Post Authentication Actions run at restart instead of at the end of the grace period.⁹
The affected feature is Windows Local Administrator Password Solution (LAPS) Post Authentication Actions (PAA).

Active Directory

For: Devices making Active Directory bind requests to IPv6 addresses

Addresses failed bind requests to IPv6 addresses when the requestor is not joined to a domain.¹⁰

LocalUsersAndGroups CSP

For: Devices using the LocalUsersAndGroups CSP

Addresses an issue that stops group membership processing when a group cannot be found.¹¹

Cloud files

Addresses an issue where cloud files might still be deleted even when the cloud provider vetoes the deletion request.¹²

MSIX applications

For: Devices using MSIX App Attach with a CimFS image

Addresses issues that can prevent MSIX applications from opening or make the host stop responding.¹³
This can occur when MSIX App Attach uses a CimFS image.

Group Policy Folder Redirection

Addresses an issue that can prevent administrators from choosing a group account from the target domain and applying advanced folder redirection settings.¹⁴
Affects multi-forest deployments where the target domain has a one-way trust with the admin user's domain, including ESAE, Hardened Forests, and PAM deployments.

Improvements 4 changes

Digital Markets Act compliance

Gradual rollout

Changes to support Digital Markets Act compliance roll out gradually to Windows 10, version 22H2 PCs in the European Economic Area.¹⁵
The changes are intended to bring these PCs into compliance by March 6, 2024.

Windows Kernel Vulnerable Driver Blocklist

The vulnerable driver blocklist gains entries for drivers at risk of BYOVD attacks.¹⁶
The quarterly update adds drivers to DriverSiPolicy.p7b.

UEFI Secure Boot

UEFI Secure Boot systems can opt to add a renewed signing certificate.¹⁷
The certificate is added to the Secure Boot DB variable; see KB5036210 for details.

Active Directory Users & Computers

The snap-in now uses a stronger default certificate mapping.¹⁸
The default is X509IssuerSerialNumber instead of the weaker x509IssuerSubject mapping.

New feature 1 change

Lock screen

Gradual rollout

A richer, interactive weather experience is coming to the lock screen over the coming weeks. Hovering over the weather shows more information; selecting the card opens the full forecast in MSN Weather in Microsoft Edge after you sign in. If Lock screen status is already set to Weather, no action is needed; if it is set to None, the new experience is on by default.¹⁹
Lock screen status remains available with Windows spotlight, Picture, or Slideshow personalization.

Removal 1 change

Windows Backup

For: Users of enterprise-managed devices

The Windows Backup app no longer appears in the user interface on enterprise-managed devices.²⁰

Known issues

Resolved Affects: Organizations and IT administrators Resolved by KB5040525

After you install KB5034203 (dated 01/23/2024) or later updates, some Windows devices that use the [DHCP Option 235](https://learn.microsoft.com/tr…

After KB5034203 or later updates, some devices using DHCP Option 235 to find Microsoft Connected Cache nodes might be unable to use those nodes and instead download updates and apps from the public internet. IT administrators might also see increased download traffic on their internet routes. KB5040525 addresses this issue.²¹

Resolution Fixed in KB5040525

Install KB5040525 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Open Affects: Everyone

Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Window…

On Windows devices using more than one monitor, desktop icons might move unexpectedly between monitors or become misaligned when using Copilot in Windows (in preview). A new Copilot experience is gradually rolling out and is expected to address the issue.²²

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Open Affects: Everyone

Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen.

Copilot in Windows (in preview) is not currently supported when the taskbar is vertical on the right or left side of the screen. A new Copilot experience is gradually rolling out and is expected to address the issue.²³

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Resolved Affects: Everyone Resolved by KB5034763

Some eligible Windows 10 might receive a 0xd0000034 error when attempting to upgrade to Windows 11 from Windows Update.

Some eligible Windows 10 devices might receive error 0xd0000034 when upgrading to Windows 11 through Windows Update. KB5034763 addresses this issue.²⁴

Resolution Fixed in KB5034763

Install KB5034763 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-01-23
Classification: Updates
Type: Cumulative update
Restart: Required
Replaced by: KB5034843

Version	Build	Channel
22H2	19045.3996	General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 22H2

789.8 MB

windows10.0-kb5034203-x64.msu Main update · KB5034203 SHA-1: 14f2cba1…6517e7

Arm64 22H2

813.8 MB

windows10.0-kb5034203-arm64.msu Main update · KB5034203 SHA-1: f7de131f…7745ee

x86 22H2

434.1 MB

windows10.0-kb5034203-x86.msu Main update · KB5034203 SHA-1: 334191b7…538c39

Sources

Microsoft Support: KB5034203

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (24)

1. This update addresses an issue that affects some single-function printers. They might install as a scanner. support.microsoft.com
2. This update addresses an issue that affects an Internet Explorer shortcut. After you use a policy to remove it, the shortcut reappears. support.microsoft.com
3. This update addresses an issue that affects Windows Management Instrumentation (WMI). A caching issue occurs. The issue causes CurrentTimeZone to change to the wrong value. support.microsoft.com
4. This update addresses an issue that affects XPath queries on FileHash and other binary fields. It stops them from matching values in event records. support.microsoft.com
5. A mobile device management (MDM) service, such as Microsoft Intune, might not get the right data. support.microsoft.com
6. This update addresses an issue that affects the Code Integrity Module (ci.dll). This issue stops your device from responding. support.microsoft.com
7. This update addresses an issue that stops you from reconnecting to an existing Remote Desktop session. Instead, you get a new one. support.microsoft.com
8. This update addresses an issue that occurs when you change the keyboard language. The change fails to apply to RemoteApps in some scenarios. support.microsoft.com
9. The actions occur at restart instead of at the end of the grace period. support.microsoft.com
10. Bind requests to IPv6 addresses fail. This occurs when the requestor is not joined to a domain. support.microsoft.com
11. It stops processing group memberships if it cannot find a group. support.microsoft.com
12. When a cloud provider vetoes a deletion request, the files might still be removed. support.microsoft.com
13. They do not open, and, in some cases, they make the host unresponsive. This occurs when they use MSIX App Attach with a CimFS image. support.microsoft.com
14. The issue stops you from choosing a group account from the target domain. Because of this, you cannot apply advanced folder redirection settings to that domain. support.microsoft.com
15. These changes will gradually roll out to Windows 10, version 22H2 PCs in the EEA to be compliant by March 6, 2024. support.microsoft.com
16. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
17. It adds a renewed signing certificate to the Secure Boot DB variable. You can now opt for this change. support.microsoft.com
18. By default, the snap-in now uses a strong certificate mapping of X509IssuerSerialNumber. It does not use the weak mapping of x509IssuerSubject. support.microsoft.com
19. The coming weeks will bring a richer weather experience to your lock screen. This includes dynamic, interactive weather updates. support.microsoft.com
20. This update affects the Windows Backup app. It will no longer show on the user interface of enterprise-managed devices. support.microsoft.com
21. IT administrators also see increased download traffic on their internet routes. support.microsoft.com
22. Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows (in preview). support.microsoft.com
23. Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen. support.microsoft.com
24. This issue is addressed in KB5034763. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 24 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake