Microsoft's April patch puts Windows domain controllers into reboot loops — third known issue from KB5082063 is affecting Windows Server 2016 through 2025

Microsoft says the April 2026 Windows Server update KB5082063 can trigger LSASS crashes on some non-Global Catalog domain controllers.

The issue affects PAM deployments across Windows Server 2016 through 2025, potentially causing reboot loops and breaking Active Directory authentication.

For managed enterprise environments, the bug can take critical identity and directory services offline until mitigations are applied or the update is avoided.

Microsoft is investigating the problem and directing admins to support and release health guidance for updates, including possible recovery steps such as BitLocker key access.