Microsoft is releasing emergency patches to address an issue with local audit logon policies in Active Directory Group Policy, affecting various Windows versions including Windows 11 and Windows Server editions. The problem involves a reporting error where audit logon/logoff events may not appear as enabled in the Local Group Policy Editor, despite being active. The updates released include:
- Windows 11, versions 23H2 and 22H2 (KB5058919)
- Windows Server 2022 (KB5058920)
- Windows 10 Enterprise LTSC 2019 and Windows Server 2019 (KB5058922)
- Windows 10 LTSB 2016 and Windows Server 2016 (KB5058921)
- Azure Stack HCI, version 22H2 (KB5058920)
These patches are not security updates and are intended for affected organizations only. They can be downloaded from the Microsoft Update Catalog. The current updates are cumulative, meaning previous updates do not need to be installed first. Microsoft notes that home users are unlikely to be affected by this issue.