Microsoft releases Windows Server update fix to fix its April update fixes
(2026/04/20)
- Reference: 1776690906
- News link: https://www.theregister.co.uk/2026/04/20/microsoft_releases_a_windows_server_update_fix/
- Source link:
Microsoft has pushed out an out-of-band update to address the restart loop that hit some Windows Server devices after its April update.
The [1]fix will spare administrators the headache of forced server restarts after installing the April 2026 update. (A reminder that deploying any Microsoft update directly to production without thorough testing is, to put it charitably, a bold life choice.)
[2]Microsoft said of the botched update, "After installing the April 2026 Windows security update (KB5082063) and rebooting, domain controllers (DCs) in environments with multiple domains in the forest that use Privileged Access Management (PAM), might experience LSASS crashes during startup.
[3]
"As a result, affected DCs may restart repeatedly, preventing authentication and directory services from functioning, and potentially rendering the domain unavailable."
[4]
[5]
A Windows domain outage can have serious consequences. Any resource requiring authentication - network shares for example - may become inaccessible.
Microsoft veteran says some 'broken by update' PCs were already doomed [6]READ MORE
The issue affected Windows Server 2016 through 2025, and was serious enough that Microsoft issued an out-of-band update, with hotpatches also available.
The fixes also address failed installations, though a Domain Controller restarting unexpectedly is the likelier source of panicked support tickets from users locked out of critical resources.
[7]Microsoft fixes broken Windows update days after vowing fewer broken updates
[8]Microsoft yanks Windows 11 preview update after install failures
[9]Microsoft veteran says some 'broken by update' PCs were already doomed
[10]Microsoft reaches for yet another out-of-band patch to deal with latest update issue
Only Windows Servers were affected by the restart issue; Windows devices dodged the update bullet this time. But there is a [11]known issue with the April update where "some devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key on the first restart after installing this update."
The problem should affect only enterprise devices.
Out-of-band updates, which should be the exception rather than the norm, have become a way of life for Windows administrators. Microsoft had to issue one in March after [12]breaking app sign-in with a Microsoft account, and it had to put out another out-of-band in April to address the [13]domain controller restart problem.
[14]
Affected users could be forgiven for thinking "out-of-band" is starting to sound a lot like "out of control" as far as Microsoft's quality control is concerned. ®
Get our [15]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#4835
[2] https://learn.microsoft.com/en-gb/windows/release-health/status-windows-server-2025#4833msgdesc
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2026/04/02/chen_windows_updates/
[7] https://www.theregister.com/2026/03/23/emergency_fix_windows_11/
[8] https://www.theregister.com/2026/03/30/microsoft_faulty_windows_update/
[9] https://www.theregister.com/2026/04/02/chen_windows_updates/
[10] https://www.theregister.com/2026/03/31/microsoft_out_of_band/
[11] https://support.microsoft.com/en-gb/topic/april-14-2026-kb5083769-os-builds-26200-8246-and-26100-8246-22f90ae5-9f26-40ac-9134-6a586a71163b
[12] https://www.theregister.com/2026/03/23/emergency_fix_windows_11/
[13] https://support.microsoft.com/en-us/topic/april-19-2026-kb5091575-os-build-20348-5024-out-of-band-4a5a784e-e50a-4358-8093-b1654aecdbd1
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/
The [1]fix will spare administrators the headache of forced server restarts after installing the April 2026 update. (A reminder that deploying any Microsoft update directly to production without thorough testing is, to put it charitably, a bold life choice.)
[2]Microsoft said of the botched update, "After installing the April 2026 Windows security update (KB5082063) and rebooting, domain controllers (DCs) in environments with multiple domains in the forest that use Privileged Access Management (PAM), might experience LSASS crashes during startup.
[3]
"As a result, affected DCs may restart repeatedly, preventing authentication and directory services from functioning, and potentially rendering the domain unavailable."
[4]
[5]
A Windows domain outage can have serious consequences. Any resource requiring authentication - network shares for example - may become inaccessible.
Microsoft veteran says some 'broken by update' PCs were already doomed [6]READ MORE
The issue affected Windows Server 2016 through 2025, and was serious enough that Microsoft issued an out-of-band update, with hotpatches also available.
The fixes also address failed installations, though a Domain Controller restarting unexpectedly is the likelier source of panicked support tickets from users locked out of critical resources.
[7]Microsoft fixes broken Windows update days after vowing fewer broken updates
[8]Microsoft yanks Windows 11 preview update after install failures
[9]Microsoft veteran says some 'broken by update' PCs were already doomed
[10]Microsoft reaches for yet another out-of-band patch to deal with latest update issue
Only Windows Servers were affected by the restart issue; Windows devices dodged the update bullet this time. But there is a [11]known issue with the April update where "some devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key on the first restart after installing this update."
The problem should affect only enterprise devices.
Out-of-band updates, which should be the exception rather than the norm, have become a way of life for Windows administrators. Microsoft had to issue one in March after [12]breaking app sign-in with a Microsoft account, and it had to put out another out-of-band in April to address the [13]domain controller restart problem.
[14]
Affected users could be forgiven for thinking "out-of-band" is starting to sound a lot like "out of control" as far as Microsoft's quality control is concerned. ®
Get our [15]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#4835
[2] https://learn.microsoft.com/en-gb/windows/release-health/status-windows-server-2025#4833msgdesc
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2026/04/02/chen_windows_updates/
[7] https://www.theregister.com/2026/03/23/emergency_fix_windows_11/
[8] https://www.theregister.com/2026/03/30/microsoft_faulty_windows_update/
[9] https://www.theregister.com/2026/04/02/chen_windows_updates/
[10] https://www.theregister.com/2026/03/31/microsoft_out_of_band/
[11] https://support.microsoft.com/en-gb/topic/april-14-2026-kb5083769-os-builds-26200-8246-and-26100-8246-22f90ae5-9f26-40ac-9134-6a586a71163b
[12] https://www.theregister.com/2026/03/23/emergency_fix_windows_11/
[13] https://support.microsoft.com/en-us/topic/april-19-2026-kb5091575-os-build-20348-5024-out-of-band-4a5a784e-e50a-4358-8093-b1654aecdbd1
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aeZNoqyBakEPozTqDZXPLgAAAk4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/
Blackjack
Does anyone uses Windows Server unless forced to? Microsoft was caught using Linux in their own servers after all.
so....
With LSASS crashing in a loop, how does one log in to an affected server to apply said hot fix? Does windows actually have a working "single user" mode, a la *nix (can't remember the run-level but there is/was one and you can also do things with a bootable USB, judcious mounts, and a chroot), that can be used to sort out the mess or does one have to resort to third party tools?