Microsoft has released the patches for March 2023. They released Windows 11 KB5023706 and KB5023698 cumulative updates to fix known issues, security vulnerabilities, and performance issues. Windows 10 patches are explained in Windows 10 KB5023696 March 2023 Patch Tuesday post.
The latest Windows 11 KB5023706 and KB5023698 security updates address include improvements. These updates also include Improving the search box experience on the taskbar and energy recommendations. It also includes AI-powered recommended content on the Start menu for Azure AD Joined devices.
The Windows 11 March patches fixed the issue Displays a blue screen during video playback when you set high dynamic range (HDR) on your display. Fixes issue that affects AppV, Provisioning packages, and Azure Active Directory (Azure AD). However, there are some known issues with Windows 11 March 2023 patches, and more details are available in the below section.
To upgrade to Windows 11 22H2, you can use either SCCM or Intune methods. Microsoft releases different KB articles for Windows 11 March 2023 Cumulative Updates (CUs), with KB5023706 and KB5023698 being designated for Windows 11 21H2 and 22H2, respectively.
2 Zero-Day Security Vulnerabilities with Outlook and SmartScreen. Outlook Elevation of Privilege Vulnerability
and SmartScreen Security Feature Bypass Vulnerability. More details on FIX Zero Day Security Vulnerability for Outlook.
- Windows 11 Version Details – Windows 11 21H2 KB5023698 (OS Build 22000.1696)
- Version Details – Windows 11 22H2 KB5023706 (OS Build 22621.1413)
- More Details on Windows 11 version Numbers: Windows 11 Version Numbers Build Numbers Major Minor Build Rev.
How to Seek Windows Updates?
Windows 11 allows you to choose when and how to receive the latest updates to ensure your device runs efficiently and securely. To manage your update preferences and view available updates, simply select “Check for Windows updates”.
Alternatively, you can seek the latest Windows update by accessing the update settings by selecting Start > Settings > Windows Update.
Microsoft releases security updates on “Patch Tuesday,” the second Tuesday of each month at 10:00 AM PST. IT professionals should plan their deployment schedules according to their time zone(s).
New Features of Windows 11 Released with March Patches
HTMD community covered all the new features of the Windows 11 22H2 release in the following blog post. All these features are included in the latest Cumulative Update released on the patch Tuesday, 14th March 2023. Here are the improvements for Windows 11, version 22H2.
| New Features | Details |
|---|---|
| Adds an advanced auto-learning feature for facial recognition | More details are not available yet |
| Improves the search box experience on the taskbar | https://techcommunity.microsoft.com/t5/windows-it-pro-blog/customizing-search-on-the-windows-11-taskbar/ba-p/3730314 |
| Windows now provides energy recommendations | Go to Settings > System > Power & Battery > Energy Recommendation |
| For devices that are joined to Azure Active Directory (AAD), Windows now provides AI-powered recommended content on your Start menu. | On the Start menu, you will find content to help you to prepare for meetings, quickly access files you’re collaborating on, and more. |
| Enhancements to Task Manager | Filtering, More Theme options, Efficiency mode, etc |
| This update implements phase three of Distributed Component Object Model (DCOM) hardening. | See KB5004442. After you install this update, you cannot turn off the changes using the registry key. |
let’s learn some interesting Latest Features of Windows 11 22H2 and its Advanced Features. The 22H2 is a features update for windows 11, the Latest Features Of Windows 11 22H2, and Advanced Features.
You can refer to more details on Windows 11 22H2 and 21H2 enhancements with March 2023 patch Tuesday from February 21, 2023, and February 28, 2023.
Issues Fixed with Windows 11 March Patches
Let’s have a look at the issues that are fixed with Windows 11 March patch Tuesday KBs (KB5023706 and KB5023698). The following table covers both Windows 11 22H2 and 21H2 fixes.
| Fixes with Windows 11 March Patches | Details |
|---|---|
| A date information issue is fixed | It affects the format of dates sent between Windows and some versions of the Heimdal Kerberos library. |
| An issue that affects IE mode is fixed | The text on the status bar is not always visible. |
| Displays a blue screen during video playback issue is fixed | This occurs after you set high dynamic range (HDR) on your display. |
| An issue that affects File Explorer is fixed with March 2023 patches | When you use Shift+Tab or Shift+F6, the input focus does not move. |
| Compatibility issues that affect some printers are fixed | These printers use Windows Graphical Device Interface (GDI) printer drivers. These drivers do not completely adhere to GDI specifications. |
| The software keyboard issue in the OOBE screen is fixed | It does not appear in the Out-of-Box Experience (OOBE) after a Push-button reset (factory reset). |
| Fixes issue that affects AppV | It stops file names from having the correct letter case (uppercase or lowercase). |
| Fixes an issue that affects Microsoft Edge policy | The issue removes conflicting policies for Microsoft Edge. This occurs when you set the MDMWinsOverGPFlag in a Microsoft Intune tenant, and Intune detects a policy conflict. |
| Fixes an issue that affects provisioning packages and Azure Active Directory (Azure AD) | They fail to apply in certain circumstances when elevation is required. Using a provisioning package for bulk provisioning fails. |
| Fixes an issue with Universal Print’s Configuration Service Provider (CSP) | A command prompt window appears when you install a printer. This command prompt won’t appear once you install the KBs. |
Known Issues from Windows 11 KB5023706 and KB5023698
Here you can check the current status of known issues after the last patch update on March 2023 CU for Windows 11 devices. This table offers a summary of current active issues and those issues that have been resolved in the last 30 days.
| Summary | Originating update | Status | Last update |
|---|---|---|---|
| Third-party UI customization apps might cause Windows not to start up | OS Build 22621.1344 KB5022913 2023-02-28 | Investigating | |
| You might receive an error with apphelp.dll from apps using DirectX | OS Build 22621.819 KB5019980 2022-11-08 | Not Resolved | Mitigation is in place |
| Devices with a locale set to Croatia might not utilize the expected currency | N/A | Not Resolved | Workaround is provided |
| WSUS might not offer updates to Windows 11, version 22H2 | N/A | Not Resolved | Mitigation is in place |
| The start menu, Windows Search, and UWP apps might have issues opening | N/A | Investigating | Mitigation is in place |
| Domain join processes may fail with the error “0xaac (2732)“ | OS Build 22621.674 KB5018427 2022-10-11 | Refer to KB5020276 to understand the designed behavior | As per design |
SCCM Windows 11 KB5023706 and KB5023698 Deployment
Learn how to Deploy Windows 11 KB5023706 and KB5023698 March 2023 Cumulative Updates using SCCM/WSUS. You can deploy Windows 11 February 2023 CU KBs using Intune or SCCM.
Using the following methods, you can create a monthly patch package for March 2023. You can also search with Windows 11 LCU for March 2023 KB5023706 and KB5023698. The easiest way is to check from the SCCM admin console.
NOTE! You can verify the Windows 11 versions (OS Builds, 22000.1696, and 22621.1413) by installing March 2023 Latest Cumulative Updates.
- In SCCM Console, Navigate to \Software Library\Overview\Software Updates\All Software Updates.
- You will need to initiate a WSUS Sync from the All Software Updates node (Right-click on the node and initiate the sync).
- Search with the following KB5023706 and KB5023698 Numbers.
- Or you can search with 23-03 Cumulative Update for Windows 11, as shown in the below screenshot.
| Name of Windows 11 patches for March 2023 | KB Articles | Release Date |
|---|---|---|
| 2023-03 Cumulative Update for Windows 11 Version 22H2 for ARM64-based Systems (KB5023706) | 5023706 | 3/14/2023 5:00:00 PM |
| 2023-03 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5023706) | 5023706 | 3/14/2023 5:00:00 PM |
| 2023-03 Cumulative Update for Windows 11 for ARM64-based Systems (KB5023698) | 5023698 | 3/14/2023 5:00:00 PM |
| 2023-03 Cumulative Update for Windows 11 for x64-based Systems (KB5023698) | 5023698 | 3/14/2023 5:00:00 PM |
- How to Create Deploy New Software Update Patch Package Using SCCM | ConfigMgr
- SCCM ADR Automatic Deployment Rule Creation Process
Intune Windows 11KB5023706 and KB5023698 Deployment
Let’s check how to deploy the Windows 11 KB5023706 and KB5023698 March 2023 Patch Tuesday (LCU) Deployment using Intune. You can deploy Windows 11 March CU using Microsoft Intune. The patch deployment process in Microsoft Intune is different from that of SCCM.
I don’t think creating a new patch deployment policy to cater to monthly CU deployments for Windows 11 is mandatory, but you can use the following method to expedite. The existing patch deployment policy will deliver the patches using WUfB (Windows Update for Business).
Read More – Software Update Patching Options with Intune Setup Guide. The 2023.03 version was not available in Intune when we released this post.
You can expedite the Installation of March 2023 quality updates if the device OS version is less than 2023.02. Create expedited update profiles for Quality updates using the following steps.
- Sign in to the Microsoft Intune admin center https://Intune.microsoft.com/
- Navigate Device -> Windows 10 quality Updates.
- Click on + Create Profile.
The following are the Settings for Intune quality update profile for the Windows 11 monthly patching process if you want to expedite the deployment of patches. Otherwise, you can use the standard quality updates policy from Intune.
- Name – Windows 11 March 2023 LCU
- Description— I would recommend adding a detailed description.
- Expedite installation of quality updates if the device OS version is less than 14th March 2023 – 2023.03 B Security Updates for Windows 10 and later
- Number of days to wait before the restart is enforced – 1 Day
More Details on Zero Day Out Of Band Patch Deployment Using Intune MEM Expedite Best Option and Intune Reporting Issue: Expedite Windows Security Patch Deployment.
Windows 11 KB5023706 and KB5023698 Direct Download Links
Let’s manually download the 2023 March Cumulative Update for Windows 11 (KB5023706 and KB5023698) from the Microsoft Update Catalog website. The following tables provide the direct links to download the March 2023 Cumulative Updates for Windows 11.
You can check the Microsoft Update Catalog portal to get the Windows 11 LCUs direct download links to the hotfixes for March 2023 LCU. Check this out Microsoft Update Catalog –https://www.catalog.update.microsoft.com/
Search for updates from the Windows Update Catalog – To download the latest cumulative update (LCU) for your operating system that you want to apply manually. Put the KB article number and click the Search icon.
Note! When using a search for a specific KB article, make sure to avoid any spaces between the letters and numbers in the KB article number. For example, to search for the KB article numbers KB5023706 and KB5023698, enter it as is without any spaces.
| Title | Products | Size | Direct Download |
|---|---|---|---|
| 2023-03 Cumulative Update for Windows 11 for x64-based Systems (KB5023698) | Windows 11 | 320.5 MB | Download |
| 2023-03 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5023706) | Windows 11, version 22H2 | 284.0 MB | Download |
Author
About the Author – Anoop C Nair
Great news!
I am looking for approach to upgrade lesser than 20h2 device in my client environment which are around 2k devices
update KB5023706 casing cire isolation problems in windows security.
Please fix it.