"After installing the April 2026 Windows security update (KB5082063) and rebooting, domain controllers (DCs) in environments with multiple domains in the forest that use Privileged Access Management (PAM), might experience LSASS crashes during startup."
"As a result, affected DCs may restart repeatedly, preventing authentication and directory services from functioning, and potentially rendering the domain unavailable."
"The issue affected Windows Server 2016 through 2025, and was serious enough that Microsoft issued an out-of-band update, with hotpatches also available."
"Out-of-band updates, which should be the exception rather than the norm, have become a way of life for Windows administrators."
Microsoft addressed a restart loop issue affecting Windows Server devices following the April 2026 update. The problem caused domain controllers to experience LSASS crashes, leading to repeated restarts and authentication failures. This issue impacted Windows Server versions 2016 through 2025, prompting Microsoft to issue an out-of-band update. The update also included hotpatches to resolve failed installations. While only Windows Servers were affected, there is a known issue with BitLocker recovery keys for some enterprise devices. Out-of-band updates have become increasingly common for Windows administrators.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]