Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday

KB5034127

KB5034127: Cumulative update for Windows Server, version 2019, January 2024. IE mode and touchscreens work more reliably

In short

Fixes several Windows Server 2019 problems, including IE mode becoming unresponsive and touchscreens malfunctioning with multiple monitors. It also addresses 33 security vulnerabilities, including two critical flaws.

Does it affect you? Applies to: Devices running Windows Server 2019.

Build
17763.5329
Security
33 fixed · 2 critical

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 12 changes

Internet Explorer mode

  • IE mode no longer stops responding when you press the left arrow key in an empty text box while caret browsing is on.1

Touchscreens

  • Touchscreens work properly when you use more than one monitor.2

ActiveX scroll bar

  • The ActiveX scroll bar works in IE mode.3

Disk partitions

  • The system no longer might stop responding when space from a deleted partition is added to an existing BitLocker partition.4

Smart card authentication

  • The device no longer shuts down after 60 seconds when you use a smart card to authenticate on a remote system.5

Windows LAPS

  • The LAPS account works when its password is older than the maximum age allowed by device policy.6
    Addresses the Windows Local Administrator Password Solution (Windows LAPS) account failing when the password exceeds the maximum age allowed by device policy.

Kerberos Key Distribution Center

  • Trust referrals no longer return an incorrect error.7
    Fixes the Kerberos Key Distribution Center (KDC) returning KDC_ERR_S_PRINCIPAL_UNKNOWN during trust referrals.

Local Security Authority Subsystem Service

  • A problem that caused the device to enter a restart loop is addressed.8
    Addresses lsass.exe becoming unresponsive and causing a restart loop.

Key Distribution Service

  • The service starts within the required time when LDAP referrals are needed.9
    Addresses the Key Distribution Service (KDS) not starting within the required time when LDAP referrals are needed.

Server Manager

  • Server Manager pop-up text no longer includes the words “Azure Automanage.”10

Group Policy Folder Redirection

  • Administrators can choose a group account from the target domain and apply advanced folder redirection settings in the affected multi-forest deployments.11
    Addresses the issue in multi-forest deployments where a one-way trust with the admin user's domain prevented selecting a target-domain group account. The issue affects ESAE, Hardened Forests, and PAM deployments.

BitLocker

  • MDM services, such as Microsoft Intune, can receive the right data for BitLocker data-only encryption.12
    Addresses incorrect MDM data when the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings are used in the BitLocker CSP node.

Improvement 1 change

Servicing stack

  • The component that installs Windows updates receives quality improvements.13
    Includes servicing stack update 17763.5084.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-01-09
Type
Cumulative update
VersionBuildChannel
2019 17763.5329 General availability

Security

33 vulnerabilities fixed
2 critical 31 important
VulnerabilitySeverityCVSS
CVE-2024-20674
Windows Kerberos Security Feature Bypass Vulnerability
 Critical 8.8
CVE-2024-20700
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 7.5

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 33 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (13)
  1. 1. This update addresses an issue that causes IE mode to stop responding. This occurs if you press the left arrow key when an empty text box has the focus and caret (cursor) browsing is on. support.microsoft.com
  2. 2. This update addresses an issue that affects touchscreens. They do not work properly when you use more than one monitor. support.microsoft.com
  3. 3. This update addresses an issue that affects the ActiveX scroll bar. It does not work in IE mode. support.microsoft.com
  4. 4. This update addresses an issue that affects disk partitions. Your system might stop responding. This occurs if you add space from a deleted partition to an existing BitLocker partition. support.microsoft.com
  5. 5. This update addresses an issue that causes your device to shut down after 60 seconds. This occurs when you use a smart card to authenticate on a remote system. support.microsoft.com
  6. 6. This update addresses an issue that affects the Windows Local Administrator Password Solution (Windows LAPS). The LAPS account does not work. This occurs if the password is older than the age that the maximum age device policy allows. support.microsoft.com
  7. 7. This update addresses an issue that affects the Kerberos Key Distribution Center (KDC). It returns a KDC_ERR_S_PRINCIPAL_UNKNOWN error during trust referrals, which is wrong. support.microsoft.com
  8. 8. This update addresses an issue that causes lsass.exe to stop responding. Because of this, a restart loop occurs. support.microsoft.com
  9. 9. This update addresses an issue that affects the Key Distribution Service (KDS). It does not start in the time required if LDAP referrals are needed. support.microsoft.com
  10. 10. This update addresses an issue that affects the Server Manager pop-up text. It removes the words “Azure Automanage.” support.microsoft.com
  11. 11. This update addresses an issue that affects Group Policy Folder Redirection in a multi-forest deployment. The issue stops you from choosing a group account from the target domain. support.microsoft.com
  12. 12. This update addresses a known issue that affects BitLocker data-only encryption. A mobile device management (MDM) service, such as Microsoft Intune, might not get the right data. support.microsoft.com
  13. 13. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 13 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake