April 2026 patch triggers LSASS crashes and reboot loops on PAM-protected domain controllers
Microsoft warns that the April 2026 security update KB5082063 can cause LSASS crashes and reboot loops on non-GC domain controllers in Privileged Access Management environments during startup, breaking authentication and directory services on affected Windows Server versions (2025, 2022, 23H2, 2019, 2016). Admins should contact Microsoft Support for Business for mitigations even after patching; a fix is in progress. The company also notes separate issues: potential install failures on some Server 2025 systems and BitLocker key prompts after the update.