Microsoft Warns April Update Can Trigger Windows Domain Controller Reboot Loops

Summary
Microsoft says April 2026 update KB5082063 can cause LSASS crashes and reboot loops on some Windows domain controllers using Privileged Access Management. Administrators should contact Microsoft Support for mitigation.
Key points
- After installing KB5082063, affected non-Global Catalog domain controllers using Privileged Access Management may experience LSASS crashes and repeated restarts.
- The restarts can prevent authentication and directory services from functioning, potentially making the domain unavailable.
- Affected systems include Windows Server 2025, 2022, 23H2, 2019, and 2016; newly set-up domain controllers and servers processing authentication early in startup may also be at risk.
- Microsoft is working on a fix and advises administrators to contact Microsoft Support for Business for mitigation.
- Separately, Microsoft is investigating KB5082063 installation failures on some Windows Server 2025 systems and reports that some devices may prompt for a BitLocker recovery key.
Article Details
- Event Type
- Known issue caused by the April 2026 Windows security update KB5082063
- Impact
- Some non-Global Catalog domain controllers in environments using Privileged Access Management may experience LSASS crashes and repeated restarts, preventing authentication and directory services from functioning and potentially making the domain unavailable. Some Windows Server 2025 devices may also fail to install the update or prompt for a BitLocker key.
Vendors
Products
KB5082063Microsoft confirmed that after installing the April 2026 security update (KB5082063), some Windows domain controllers using Privileged Access Management are entering restart loops due to LSASS crashes during startup.Windows Server 2016Impacted platforms include Windows Server 2025, Windows Server 2022, Windows Server 23H2, Windows Server 2019, and Windows Server 2016.Windows Server 2019Impacted platforms include Windows Server 2025, Windows Server 2022, Windows Server 23H2, Windows Server 2019, and Windows Server 2016.Windows Server 2022Impacted platforms include Windows Server 2025, Windows Server 2022, Windows Server 23H2, Windows Server 2019, and Windows Server 2016.Windows Server 2025Impacted platforms include Windows Server 2025, Windows Server 2022, Windows Server 23H2, Windows Server 2019, and Windows Server 2016.Windows Server 23H2Impacted platforms include Windows Server 2025, Windows Server 2022, Windows Server 23H2, Windows Server 2019, and Windows Server 2016.
