Microsoft Warns KB5082063 Triggers Boot Loops on Some Windows Server DCs

Microsoft has confirmed that April 2026 Windows security update, KB5082063, is causing trouble in enterprise environments. In its Windows release health dashboard, the company mentioned that a new issue is affecting domain controllers (via Bleeping Computer).

The problem apparently appears shortly after installing the update and restarting affected systems. In a separate issue, the same update has reportedly been failing to install on Windows Server 2025 systems with admins encountering 0x800F0983 and 800F0983 errors.

KB5082063 triggers repeated restarts on Windows Server domain controllers

As for the boot loop, Microsoft says that the issues specifically impact non-Global Catalog domain controllers in setups that use Privileged Access Management.

Microsoft, explaining the issue, notes, “After installing the April 2026 Windows security update (KB5082063) and rebooting, non‑Global Catalog (non‑GC) domain controllers (DCs) in environments that use Privileged Access Management (PAM), might experience LSASS crashes during startup. As a result, affected DCs may restart repeatedly, preventing authentication and directory services from functioning, and potentially rendering the domain unavailable. In some environments, this issue can also occur when setting up a new domain controller, or on existing DCs if authentication requests are processed very early during startup.”

The good news is that the issue does not affect consumer versions of Windows. It is limited to enterprise-managed environments running supported Windows Server versions, including Windows Server 2025, 2022, 2019, 2016, and version 23H2.

As of now, there is no permanent fix for this issue. However, Microsoft has confirmed that it is actively working on a resolution, which is expected to arrive in the coming days. Speaking of bugs, it’s worth latest Patch Tuesday updates for Windows 11, KB5083769 & KB5082052, has been confirmed to been incorrectly BitLocker Recovery prompts.