IIS websites

Winsage
December 19, 2025
Microsoft released an out-of-band update (KB5074976) on December 19 to address Message Queuing (MSMQ) errors caused by December 2025 security updates. These updates have led to operational disruptions in business applications and IIS websites, particularly on systems running Windows 10 22H2, Windows Server 2019, and Windows Server 2016, which received updates KB5071546, KB5071544, and KB5071543. Users reported issues such as inactive MSMQ queues, IIS sites generating "insufficient resources" error messages, and applications unable to write messages to queues. The problems stem from modifications in the MSMQ security model, which altered permissions for the system folder C:WindowsSystem32msmqstorage, requiring MSMQ users to have write access typically reserved for administrators. Systems with full administrative rights do not experience these issues. Microsoft is investigating the matter but has not provided a timeline for a resolution.
Winsage
December 15, 2025
Microsoft has acknowledged issues related to the December 2025 security updates affecting Message Queuing (MSMQ) functionality on Windows 10 22H2, Windows Server 2019, and Windows Server 2016 systems. The updates KB5071546, KB5071544, and KB5071543 have caused problems such as inactive MSMQ queues, IIS sites showing “insufficient resources” errors, and applications unable to write messages to queues. These issues stem from modifications in the MSMQ security model, which now requires users to have write access to the C:WindowsSystem32msmqstorage folder, a privilege typically reserved for administrators. Systems with full administrative rights do not experience these problems, but this workaround is impractical for many enterprises. Microsoft is investigating the situation without a specified timeline for a resolution. Administrators may consider rolling back the updates, which poses its own security risks. In April 2023, Microsoft had warned about a critical vulnerability in MSMQ (CVE-2023-21554) that risked remote code execution attacks.
Winsage
October 21, 2025
Microsoft released an out-of-band update to fix a significant issue with its Windows 11 security update (KB5066835) that rendered essential USB devices non-functional in the Windows Recovery Environment (WinRE). This fix was distributed to all Windows 11 users six days after the initial update. The flaw affected versions 24H2 and 25H2 of Windows 11 and Windows Server 2025. Users are advised to avoid resetting their PCs or entering recovery mode until further notice. Additionally, the October update has other known issues, including problems with smartcard authentication, challenges in playing protected content with certain DVD and BluRay applications, failed updates using shared network folders, and potential loading failures for IIS websites. Microsoft has resolved the smartcard authentication issue but has not yet addressed the IIS website problem. In recent months, Microsoft has faced multiple bugs associated with its updates, including SSD malfunctions in August and a "latent code issue" in its Intune software in April. Last year, a bug led to unexpected upgrades for older Windows Server versions, causing system crashes, and Microsoft had to retract a preview of a Windows 11 update due to identified problems.
Winsage
October 20, 2025
The October Patch Tuesday release from Microsoft on October 14, 2025 (KB5066835) addressed over 170 security vulnerabilities but introduced a glitch affecting the Windows Recovery Environment (WinRE), rendering USB devices non-functional for navigation. This issue impacts Windows 11 versions 25H2 and 24H2, as well as Windows Server 2025. Microsoft is aware of the problem and is working on a resolution. A workaround involves using an older PS/2 keyboard or mouse. Other reported issues include IIS websites failing to load on local machines and a malfunctioning File Explorer preview window for cloud or internal network files, with Microsoft acknowledging the IIS issue and working on a fix.
Winsage
October 18, 2025
Microsoft has identified a bug affecting HTTP/2 localhost connections and IIS websites after recent Windows security updates, specifically the Windows 11 KB5066835 Patch Tuesday update and the September KB5065789 preview update. Users have reported connection reset errors, such as ERRCONNECTIONRESET and ERRHTTP2PROTOCOL_ERROR, impacting applications like the Duo Desktop app and Visual Studio debugging. The issue is linked to a bug in the HTTP.sys web server used by ASP.NET Core, which can be triggered by various factors including device restarts and update installations. Microsoft has provided steps for resolution, including checking for updates and restarting devices. For non-managed devices, an automatic resolution through Known Issue Rollback (KIR) is available, while enterprise-managed devices require IT administrators to implement KIR group policies. A permanent fix is expected in a future Windows update.
Winsage
October 18, 2025
Microsoft has acknowledged that the Windows 11 update KB5066835 is causing significant disruptions, particularly affecting localhost (127.0.0.1) HTTP/2 connections, preventing locally hosted applications from connecting to the network. Installation of the October 2025 Patch Tuesday update may fail due to error codes including 0x800f0922, 0x800f0983, 0x800f081f, 0x80071a2d, and 0x800f0991. A bug is obstructing File Explorer's document previews in the Preview pane, citing security concerns. Compatibility issues have arisen with certain Logitech peripherals, rendering them non-functional, and users are reporting unresponsive mouse and keyboard inputs in the Windows Recovery Environment (WinRE). Despite being a mandatory security update, KB5066835 has introduced features like repositioning on-screen volume indicators and enhancing File Explorer's context menu loading speed, but these enhancements have disrupted critical functionalities. Microsoft is rolling out an emergency patch to resolve localhost-related problems, which may take over 48 hours to appear. A workaround for localhost issues involves modifying the Windows Registry to disable HTTP/2. File Explorer's preview issue can be addressed by unblocking files using PowerShell or modifying the registry. Logitech's specialized features have stopped working for some users, and keyboard and mouse inputs are unresponsive in WinRE after the update. Users can disable WinRE and replace the WinRE image as a potential fix, but this is recommended only for IT administrators.
Winsage
October 17, 2025
Microsoft has acknowledged that the Windows 11 24H2 and 25H2 updates are causing disruptions for IIS websites due to a conflict in the Windows HTTP stack driver (HTTP.sys), resulting in “ERRCONNECTIONRESET” errors for localhost loopbacks and IIS connections. The issue affects devices with updates released on or after September 29, including KB5066835 and KB5065789, impacting server-side applications reliant on HTTP.sys and leading to failed IIS websites or blank pages. The problem may vary based on internet connectivity, system timing, or update installation order. Microsoft is working on a permanent solution and has advised IT administrators to implement a known issue rollback (KIR) through Group Policy to restore stability. Additionally, Microsoft has lifted an upgrade block on Windows 11 24H2 devices that was due to a conflict with a third-party driver.
Search