Microsoft confesses April Windows update breaks some VPN connections
- Reference: 1714572014
- News link: https://www.theregister.co.uk/2024/05/01/microsoft_windows_vpn_problems/
- Source link:
The issue affects both the April 2024 security ( [1]KB5036893 for Windows 11, [2]KB5036892 for Windows 10) installations and non-security preview updates.
The security update was released on April 9, and Microsoft [3]admitted that VPNs might malfunction for some users late on April 30. The company did not elaborate on the cause of the issue, stating only that "Windows devices might face VPN connection failures after installing the April 2024 security update or the April 2024 non-security preview update" and it was "working on a resolution."
[4]
The update has not been the smoothest experience for some users. Another known issue in KB5036893 is a problem with changing an account profile picture, which might result in error code 0x80070520 . Microsoft said it was working to fix it, but the issue is still present in [5]KB5036980 , released on April 23.
[6]
[7]
Admittedly, being unable to change a profile picture is less annoying than a potentially broken VPN.
[8]Now all Windows 11 users are getting adverts to 'make the Start menu great again'
[9]Microsoft really does not want Windows 11 running on ancient PCs
[10]Old Windows print spooler bug is latest target of Russia's Fancy Bear gang
[11]Tiny11 Builder trims Windows 11 fat with PowerShell script
Microsoft is no stranger to problems with VPNs after an update. Some users [12]found [13]KB5025305 caused mystery VPN slowdowns, which were mostly dealt with by enabling the Routing and Remote Access Service. While Microsoft did not feel the need to add that issue to its release health dashboard, it did note [14]problems with some Wi-Fi adapters caused by KB5032288 and KB5033375.
No workaround has been published for the issue. We contacted Microsoft for more details and an ETA for the fix but have yet to receive a response.
Microsoft noted that the problem might also occur on its server platforms, from Windows Server 2008 up to the latest Windows Server 2022, as well as Windows 11 (23H2, 22H2, and 21H2), and Windows 10 (22H2 and 21H2). Windows Server 2008 [15]dropped out of extended support in 2020, and Windows Server 2012's extended support ended in October 2023.
[16]
The extra cost option (unless a customer migrates to Azure) of [17]Extended Security Updates (ESU) finally ended on January 10, 2023, for Windows Server 2008 and R2 – although Microsoft kept the lights on until January 9, 2024, for customers running workloads in Azure. ESU will end for Windows Server 2012 and R2 on October 13, 2026. ®
Get our [18]Tech Resources
[1] https://support.microsoft.com/en-gb/topic/april-9-2024-kb5036893-os-builds-22621-3447-and-22631-3447-a674a67b-85f5-4a40-8d74-5f8af8ead5bb
[2] https://support.microsoft.com/en-gb/topic/april-9-2024-kb5036892-os-builds-19044-4291-and-19045-4291-cb5d2d42-6b10-48f7-829a-be7d416a811b
[3] https://learn.microsoft.com/en-gb/windows/release-health/status-windows-11-23h2#3291msgdesc
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZjJnHLen6HtsE7YV8LaXzQAAAMA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://support.microsoft.com/en-gb/topic/april-23-2024-kb5036980-os-builds-22621-3527-and-22631-3527-preview-5a0d6c49-e42e-4eb4-8541-33a7139281ed
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZjJnHLen6HtsE7YV8LaXzQAAAMA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZjJnHLen6HtsE7YV8LaXzQAAAMA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2024/04/24/adverts_windows_11/
[9] https://www.theregister.com/2024/04/23/windows_11_cpu_requirements/
[10] https://www.theregister.com/2024/04/23/russia_fancy_bear_goose_egg/
[11] https://www.theregister.com/2024/04/22/tiny11_builder_update/
[12] https://www.reddit.com/r/meraki/comments/13ermrb/kb5025305_causes_speed_issues_on_l2tpipsec_vpn
[13] https://support.microsoft.com/en-gb/topic/april-25-2023-kb5025305-os-build-22621-1635-preview-2482528b-7e8e-4179-b255-808f484b9c0c
[14] https://www.theregister.com/2023/12/18/windows_patch_wifi_broken/
[15] https://www.theregister.com/2020/01/09/windows_7_server_2008_end_of_support/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZjJnHLen6HtsE7YV8LaXzQAAAMA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[17] https://learn.microsoft.com/en-us/windows-server/get-started/extended-security-updates-overview
[18] https://whitepapers.theregister.com/
Re: Slightly off topic...
" now it just appears to be such a mess under the hood that one mistaken change could result in a bricking "
And not only mistakes by the user. The tortuous mess of code called "windows" is now so obscure even to its developers that increasingly often one fix of some stupid error requires another fix that requires another ...
Re: Slightly off topic...
"Many years ago I could handle editing config.sys and autoexec.bat to free up so many system resources my pc's ran so brilliantly; now it just appears to be such a mess ...
Well, that was back in the dreary days of MSDOS with klunky Windows 3.11 or (to some extent) 95 or 98 or ME. But users wanted, nay demanded (or so we were told) a modern operating system with data stored in a modern self-documenting data registry . Conceptually, you can edit the registry to achieve what you wish. But since there are seventeen zillion entries and no coherent public documentation of the content, you are encouraged to leave registry changes up to the professionals. Of course the pros don't seem to actually understand the system very well either.
The alternative would be to switch to a unix of some sort which for the most part stores configuration in stodgy old text files -- mostly with comment lines that at least try to describe what the settings mean. Caveat -- while unix really is a more sensible alternative than Windows for many people, tuning it tends to be a lot of work. Possible does not mean easy. The other alternative is Apple. Personally I am not now and never have been Apple compatible. But a significant number of people seem to be able to coexist with it in a relatively harmonious manner.
It's only a minor issue (Joke Alert)
I am not seeing any problems with Window 8 and Windows 7 so this is only a minor issue (for me).
Death by 1000 updates
If January's update didn't get you, this month's might.
Don't you dare try another platform though, it's not the industry standard.
"Microsoft noted that the problem might also occur on its server platforms, from Windows Server 2008"
Which is outside of even the most extended-extended support (i.e. running it on Azure). So if you install the patch which wasn't issued anyway, it might cause the listed problem. Right. Gotcha!
Out of curiosity, does this only affect the Windows VPN service, or would it also affect third party VPN software?
Slightly off topic...
but seeing the mention in the article about windows services, can anyone advise me about any reputable sites that will list services under w10 that I can disable? I am only thinking of my gaming machine, not a work one.
Many years ago I could handle editing config.sys and autoexec.bat to free up so many system resources my pc's ran so brilliantly; now it just appears to be such a mess under the hood that one mistaken change could result in a bricking.