Microsoft Warns April Update Can Trigger Windows Domain Controller Reboot Loops

· Original article ↗

Summary

Microsoft says April 2026 update KB5082063 can cause LSASS crashes and reboot loops on some Windows domain controllers using Privileged Access Management. Administrators should contact Microsoft Support for mitigation.

Key points

  • After installing KB5082063, affected non-Global Catalog domain controllers using Privileged Access Management may experience LSASS crashes and repeated restarts.
  • The restarts can prevent authentication and directory services from functioning, potentially making the domain unavailable.
  • Affected systems include Windows Server 2025, 2022, 23H2, 2019, and 2016; newly set-up domain controllers and servers processing authentication early in startup may also be at risk.
  • Microsoft is working on a fix and advises administrators to contact Microsoft Support for Business for mitigation.
  • Separately, Microsoft is investigating KB5082063 installation failures on some Windows Server 2025 systems and reports that some devices may prompt for a BitLocker recovery key.

Article Details

Event Type
Known issue caused by the April 2026 Windows security update KB5082063
Impact
Some non-Global Catalog domain controllers in environments using Privileged Access Management may experience LSASS crashes and repeated restarts, preventing authentication and directory services from functioning and potentially making the domain unavailable. Some Windows Server 2025 devices may also fail to install the update or prompt for a BitLocker key.

Vendors

Products

Related Articles