Microsoft’s April patch puts Windows domain controllers into reboot loops — third known issue from KB5082063 is affecting Windows Server 2016 through 2025

Microsoft has acknowledged that the recent Windows Server security update, specifically the April 2026 patch KB5082063, has caused significant disruptions for some enterprise domain controllers. According to a recent entry on the release health dashboard, this patch has led to continuous reboot cycles in non-Global Catalog domain controllers utilized in Privileged Access Management (PAM) deployments. As a result, Active Directory authentication and directory services have become unavailable on the affected servers.

Reports indicate that the installation of KB5082063 may also fail entirely on a subset of Windows Server 2025 systems, further complicating the situation for IT administrators. This is not the first time that April security updates have caused issues for Windows Server domain controllers; in fact, this marks the third consecutive year of such disruptions. In March 2024, Microsoft had to issue an emergency out-of-band fix after that month’s Patch Tuesday resulted in outright crashes of domain controllers. The following April patch cycle then introduced complications with NTLM authentication, necessitating unplanned restarts of domain controllers, which were subsequently addressed in a May 2024 rollout. Last June, another correction was released to resolve Active Directory authentication issues stemming from the April 2025 security update.

Current Options for Administrators

As the situation unfolds with the LSASS crash following the pattern of previous years, administrators are left with limited options while awaiting a resolution. With KB5082063 still available on the release channel and no patch date announced, IT teams can consider the following strategies:

  • Delay the installation of the April update until further notice.
  • Isolate a test domain controller to validate the behavior of the patch before implementing it across the broader network.
  • Engage with Microsoft Support through the Business support channel to obtain mitigation steps tailored to their specific cases.

As enterprise admins navigate these challenges, the focus remains on finding effective solutions while Microsoft continues its investigation into the reported issues. The ongoing pattern of post-deployment failures underscores the importance of thorough testing and contingency planning in managing critical IT infrastructure.

Winsage
Microsoft's April patch puts Windows domain controllers into reboot loops — third known issue from KB5082063 is affecting Windows Server 2016 through 2025