Windows 10 November 2023 Patch Tuesday (KB5032189) out -- here's what's new and what broke

windows 10 patch tuesday promo

It's the second Tuesday of the month, which means it's Patch Tuesday time again. As such, today Microsoft is rolling out the monthly security update (also called "B release") for November 2023 on Windows Server 20H2, and Windows 10 for the latest supported versions, 20H2, 21H2, and 22H2. The new updates are being distributed under KB5032189, bumping up the builds to 19044.3693 and 19045.3693. You can find standalone links to download the new update on the Microsoft Update Catalog at this link here.

The major highlight of the release as usual is security updates for Windows 10.

Highlights

This update addresses security issues for your Windows operating system.

After a couple of weeks without any, known issues are back:

Known issues in this update

Symptom

Workaround

Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment. Affected environments are those with the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies set to enabled and selecting either "full encryption" or "used space only". Microsoft Intune is affected by this issue but third-party MDMs might also pe affected.

Important This issue is a reporting issue only and does not affect drive encryption or the reporting of other issues on the device, including other BitLocker issues.

To mitigate this issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies to not configured.

We are working on a resolution and will provide an update in an upcoming release.

Symptom	Workaround
Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment. Affected environments are those with the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies set to enabled and selecting either "full encryption" or "used space only". Microsoft Intune is affected by this issue but third-party MDMs might also pe affected. Important This issue is a reporting issue only and does not affect drive encryption or the reporting of other issues on the device, including other BitLocker issues.	To mitigate this issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies to not configured. We are working on a resolution and will provide an update in an upcoming release.

Some of the older Windows 10 versions have also received updates today which have been listed below with their respective release notes (KB) linked as well as links to download them at Microsoft's Update Catalog:

Version	KB	Build	Download	Support
1809	KB5032196	17763.5122	Update Catalog	Long-Term Servicing Channel (LTSC)
1607	KB5032197	14393.6452	Update Catalog
1507	KB5032199	10240.20308	Update Catalog

It is noteworthy here that Windows 10 20H2 and Windows 10 1909 reached the end of servicing. Some editions of 21H2 have also reached the end of servicing.