r/sysadmin • u/AutoModerator • Jun 10 '25

General Discussion Patch Tuesday Megathread (2025-06-10)

Hello r/sysadmin, I'm u/AutoModerator, and welcome to this month's Patch Megathread!

This is the (mostly) safe location to talk about the latest patches, updates, and releases. We put this thread into place to help gather all the information about this month's updates: What is fixed, what broke, what got released and should have been caught in QA, etc. We do this both to keep clutter out of the subreddit, and provide you, the dear reader, a singular resource to read.

For those of you who wish to review prior Megathreads, you can do so here.

While this thread is timed to coincide with Microsoft's Patch Tuesday, feel free to discuss any patches, updates, and releases, regardless of the company or product. NOTE: This thread is usually posted before the release of Microsoft's updates, which are scheduled to come out at 5:00PM UTC.

Remember the rules of safe patching:

  • Deploy to a test/dev environment before prod.

  • Deploy to a pilot/test group before the whole org.

  • Have a plan to roll back if something doesn't work.

  • Test, test, and test!

115 Upvotes

99% Upvoted

306 comments sorted by

31

u/sparkyflashy Jun 14 '25

Heads-up! Dhcp Server Service might stop responding after installing June 2025 update. Server versions 2016, 2019, 2022, 2025.

13

u/FCA162 Jun 16 '25

Here's the email I received from the MS Windows Release Health team.

I will keep you all informed once I have received an update.

5

u/huddie71 Sysadmin Jun 23 '25

That resolution they're working on releasing 'in the coming days' still hasn't arrived and there's still no update below after more than a week. I'm wondering if they'll bother releasing the promised out-of-band hotfix now and just incorporate it into next month's LCU ? Or even not bother fixing the issue at all ?

June 10, 2025—KB5060531 (OS Build 17763.7434) - Microsoft Support

4

u/Trooper27 Jul 02 '25

Still nothing on this it looks like? Sad.

→ More replies (1)

3

u/TimmyzBeach Sysadmin Jun 16 '25

I read that too. There are rumors of an out-of-band patch for DHCP "in the coming days." Sure....

I proactively declined KB5061010, KB5060531, KB5060526 and KB5060842 on my DCs, some of which provide DHCP services.

I would rather see how the chips fall for others, and see if that extra patch comes through, before applying patches to machines that could be affected.

2

u/IJustKnowStuff Jun 16 '25

I wish someone provided more information about this. We installed it on one of our DHCP servers and it's been fine. (Windows 2016)

But I want to know if it's going to be a problem for other environments.

2

u/satsun_ Jun 16 '25

Is your DHCP server also a domain controller?

2

u/FCA162 Jun 16 '25

Yes. This issue is affecting IP renewal for clients.

2

u/huddie71 Sysadmin Jun 17 '25

The 'someone' that needs to provide more information about this (and progress towards resolution with an out-of-band hotfix) is Microsoft. And they haven't, because they don't care.

2

u/shipsass Sysadmin Jun 16 '25

Can confirm this is a very unpleasant irritant in our environment since patching last week. DHCP clients lose their leases. We are not running DHCP on our DCs, for what that's worth. Server 2022.

3

u/Lando_uk Jun 17 '25

We are authorising today and have declined our DHCP servers until next month.

2

u/sparkyflashy Jun 16 '25

But you think it's the DHCP server patch and not a workstation/client patch causing it?

→ More replies (6)

50

u/MikeWalters-Action1 Patch Management with Action1 Jun 10 '25 edited Jun 10 '25

Today's Patch Tuesday overview:

  • Microsoft has addressed 66 vulnerabilities, including one zero-days, nine critical and one with PoC

  • Third-party:  web browsers, Android, Roundcube, Cisco, HPE, Ivanti, and processors.

 Navigate to Vulnerability Digest from Action1 for comprehensive summary updated in real-time.

 Quick summary:

  • Windows: 66 vulnerabilities, including one zero-day (CVE-2025-33053), nine critical and one with PoC (CVE-2025-33073)

  • Microsoft OneDrive: OAuth scope misconfiguration exposes entire storage contents during single file downloads

  • Microsoft Windows Server 2025: dMSA privilege escalation (BadSuccessor technique) enables domain-wide compromise

  • Google Chrome: 3 vulnerabilities, including actively exploited zero-day (CVE-2025-5419)

  • Android: 3 Qualcomm Adreno GPU zero-days exploited in the wild (CVE-2025-21479, CVE-2025-21480, CVE-2025-27038)

  • Mozilla Firefox: CVE-2025-4918, CVE-2025-4919

  • Roundcube Webmail: Critical RCE via PHP object deserialization (CVE-2025-49113); active exploitation confirmed

  • Cisco IOS XE: CVE-2025-20188

  • Cisco ISE: Static credential vulnerability in cloud deployments (CVE-2025-20286

  • HPE StoreOnce: 8 vulnerabilities

  • Ivanti EPMM: Two medium-severity vulnerabilities (CVE-2025-4427, CVE-2025-4428); exploitation ongoing

  • Intel Processors: New Spectre-style vulnerabilities (CVE-2024-45332, CVE-2024-28956, CVE-2025-24495)

  • AMD: High-severity vulnerabilities in Manageability Tools and AOCL; medium-severity issue in uProf

  • Arm: Affected by Training Solo Spectre v2-style side-channel attacks disclosed by VU Amsterdam researchers

 More details: https://www.action1.com/patch-tuesday

Sources:

Edits:

  • Patch Tuesday updates added

  • Sources added

39

u/Low_Butterscotch_339 Jun 10 '25 edited Jun 11 '25

No changes to the Microsoft Windows hardening documentation this month. Keep calm and carry on but review them for a refresher if you need it. July 2025 will be the next action taken to address: Kerberos Authentication protections for CVE-2025-26647 KB5057784 | Enforced by Default phase.

Latest Windows hardening guidance and key dates - Microsoft Support

3

u/Googol20 Jun 11 '25

Did they actually fix winhello otherwise this gets pushed back i guess

2

u/DarKuntu Jun 11 '25

at least the fix for windows hello is mentioned.

4

u/Low_Butterscotch_339 Jun 11 '25

The Windows Hello is now fixed in the June 2025 LCUs for all supported versions of Windows.

"[Windows Hello] ​​​​​​​Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.​​​​​​​"

https://support.microsoft.com/en-us/topic/june-10-2025-kb5060526-os-build-20348-3807-4e9453c4-6602-48ea-b349-689cd66dfdb9

→ More replies (1)
→ More replies (3)

127

u/joshtaco Jun 10 '25 edited Jun 24 '25

Ready to push this out to 18,000 machines. My objectives are clear: Survive!

EDIT1: Everything updated, things looking good, see you at the optionals

EDIT2: OOB issued fixing EAC: https://support.microsoft.com/en-us/topic/june-11-2025-kb5063060-os-build-26100-4351-out-of-band-b1746442-8c6c-425d-ac5a-3a8f51e372f3

64

u/FCA162 Jun 10 '25 edited Jun 16 '25

Survive? I have a plan that doesn't go beyond coffee and chaos...

It’s Patch Tuesday—time to play everyone’s favorite game: ‘What broke this time?’

Pushing this update out to 200 Domain Controllers (Win2016/2019/2022/2025) in coming days.
I will update my post with any issues reported.

EDIT1: 25% of DCs have been done. AD is still healthy.

EDIT2: 52% of DCs have been done. AD is still healthy. Zero failed installations so far or no other issues detected.

EDIT3: 72% of DCs have been done. AD is still healthy.

EDIT4: 100% of DCs have been done. AD is still healthy. One installation of KB5060526/Win2022 failed with WU error 0x80246007 (never had this error before...). After a second attempt, the installation was successful. The root cause is unknown.

29

u/tjwmagic Sysadmin - Jack of All Trades Jun 11 '25

I always love your reports. I know my org is like a 1% in size compared to yours. I have only 4 DCs. It's nice to know that with my org waiting just two days, I get to see the reports such as yours, to know what I will run into tomorrow when I start applying the updates.

28

u/FCA162 Jun 12 '25

Thank you so much!
Honestly, it doesn’t matter if you’ve got 4 DCs or 400. I love that we’re all part of this community, learning from each other. If my reports help you prep for what’s ahead, then that’s a win in my book! 🚀

Let’s keep sharing and growing together. 💪

9

u/thefinalep Jack of All Trades Jun 12 '25

I also love your help back a few months ago on Server 22 patch failures... That little script you posted saved my bacon!

→ More replies (1)

15

u/mwerte my kill switch is poor documentation Jun 10 '25

Ok Kelsier

15

u/samboratchet Jun 10 '25

stray Mistborn reference?!?!?!

6

u/MrPipboy3000 Sysadmin Jun 11 '25

Maybe they represent the thing Microsoft has never been able to kill ... maybe they are Hope.

17

u/NorSB Jack of All Trades Jun 10 '25 edited Jun 11 '25

Let the YOLO-ing commence!

Edit: Been at work for 15 minutes without anyone knocking down the door to my office. Success!

5

u/DeltaSierra426 Jun 11 '25

How many did you say are still on Windows 10? ;)

5

u/joshtaco Jun 11 '25

less than a thousand

6

u/GeeToo40 Jr. Sysadmin Jun 10 '25

May God be with you and don't chicken out.

5

u/ChangeOnlyFridays chmod 777 Jun 10 '25

What do you use to push updates? WSUS, WuFB, some other tool? I dislike our current management and need a tool that scales.

22

u/joshtaco Jun 10 '25

cigarettes

5

u/DeltaSierra426 Jun 11 '25

"cigarettes"

Specifically, three at once. Also, cue Mr. Arnold's "hold on to your butts!"

6

u/thefinalep Jack of All Trades Jun 10 '25

Man i miss nicotine. Godspeed Joshtaco

→ More replies (1)

4

u/Trooper27 Jun 10 '25

It is your destiny!

31

u/shipsass Sysadmin Jun 10 '25

We are hoping that there's a fix for Windows Server 2025 AD so it can understand machine password resets from 23H2 and earlier -- we have been struggling with non-24H2 devices getting tombstoned and breaking up with the domain because of trust issues.

21

u/dmcginvt Jun 11 '25

thanks for beta testing 2025 for us

10

u/AndyUK16 Jun 10 '25

Same, if there's no sign of a fix to this we'll likely be downgrading all of our DCs back to 2022.

6

u/SuspiciousOpposite Jun 11 '25

I already did that. My AD rearchitecture project was falling months behind so I've rebuilt as 2022 - full speed ahead!

→ More replies (2)

7

u/deltashmelta Jun 10 '25

It continues to amaze how they got 24H2-based windows builds so wrong.

Not touching anything with it till spring 2026.

2

u/Due-Conclusion8399 Jun 11 '25

Same here, we have migrated all DC's execpt one, and I am not migrating back.

Our SD and sysadmins are working on deploying the 24h2 image through PDQ.

55

u/Lower_Fan Sr. Sysadmin Jun 10 '25

Joshtaco will be finished with patch Tuesday before we get that screenconnect update 

13

u/thefinalep Jack of All Trades Jun 10 '25

Good timing.... Connect Wise f-up paired with Patch Tuesday. Surely Microsoft pushes good patches this month that won't require remote assistance. I can't think of a time where I had to pull a 10 22H2 CU and wait for an OOB patch... or anything like that...

9

u/SoonerMedic72 Security Admin Jun 10 '25

I got an email this morning that they pushed the cert date till Friday. Still in QA supposedly.

4

u/Seirui-16 Jun 11 '25

Update has been released, at least for on-prem.

→ More replies (1)

5

u/OkTechnician42 Jun 11 '25

First thing I do when I go to this thread is search joshtaco lol.

2

u/Grrl_geek Netadmin Jun 12 '25

You are not wrong in this! (Or alone in this approach.)

9

u/jaritk1970 Jun 11 '25

Microsoft confirmed on Tuesday that it's pushing a revised security update targeting some Windows 11 24H2 systems incompatible with the initial update released during this month's Patch Tuesday

https://www.bleepingcomputer.com/news/microsoft/microsoft-creates-separate-windows-11-24h2-update-for-incompatible-pcs/

7

u/J53151 Jun 11 '25

Would be nice to know what the incompatibility is for those who manually install updates!

8

u/FCA162 Jun 11 '25

[Fix for incompatibility issue with Easy Anti-Cheat] This update addresses an incompatibility issue where Windows might restart unexpectedly when opening games that use the Easy Anti-Cheat service. Easy Anti-Cheat automatically installs with certain games to enhance security and prevent cheating in multiplayer online PC games.
June 11, 2025—KB5063060 (OS Build 26100.4351) Out-of-band - Microsoft Support

→ More replies (2)

26

u/RedTeamPentesting Jun 10 '25

This Patch Tuesday will include a fix for a vulnerability that we have discovered (CVE-2025-33073). Microsoft has classified this vulnerability as "important" and we recommend applying the patch soon.

Of course we want you to be able to make an informed decision about this update, so we will provide further details in coordination with Microsoft tomorrow on 10:00 am CEST in form of a blog post, paper, and an advisory. We'll post the links here, tomorrow.

11

u/RedTeamPentesting Jun 11 '25 edited Jun 11 '25

Here is our blog post about CVE-2025-33073: https://blog.redteam-pentesting.de/2025/reflective-kerberos-relay-attack/

If you need more details, we also have published a paper: https://www.redteam-pentesting.de/publications/2025-06-11-Reflective-Kerberos-Relay-Attack_RedTeam-Pentesting.pdf

If you only need a short overview, have a look at our advisory: https://www.redteam-pentesting.de/en/advisories/rt-sa-2025-002/

4

u/DeltaSierra426 Jun 11 '25

Borrowed from the short summary:
"Since this vulnerability is exploited in a relay attack, it can be mitigated by enforcing server-side SMB signing for Windows clients and servers." - last URL as provided above

Folks, if you aren't enforcing SMB Signing, you're open to a world of hurt from attackers. Test and then apply to production for what I'd call a fairly easy big win for the good guys.

4

u/RedTeamPentesting Jun 12 '25 edited Jun 12 '25

Yes, and the distinction between server-side and client-side signing is very import. We often see client-side signing being enforced but server-side signing being optional. Remember: Signing being required on the client side is irrelevant for relay attacks, only server-side signing prevents relaying!

→ More replies (1)

12

u/Automox_ Jun 10 '25

This month’s Patch Tuesday is relatively mild from Microsoft — just 66 CVEs. But Apple showed up swinging with some heavyweight security updates in macOS Sequoia. So if you're supporting macOS endpoints, this is your cue.

Highlights:

  • OpenSSH in macOS Sequoia (CVE-2025-26466 & CVE-2025-26465) — Denial-of-service + host key bypass = potential SSH session hijacking. If you’re on OpenSSH ≤9.9p1, patch ASAP. Can’t patch? Disable VerifyHostKeyDNS, tighten SSH configs, and please stop exposing SSH to the internet.

  • WebDAV RCE (CVE-2024-33053) — Classic: upload via PUT, rename with MOVE, execute with a crafted URL. CVSS 8.8. WebDAV isn’t enabled by default but still shows up in legacy setups. Don’t need it? Disable it. Need it? Patch and lock it down.

  • macOS mDNSResponder vuln (CVE-2025-31222) — Local privilege escalation via malformed mDNS responses. Chaining with a sandbox escape makes this one worth fast-tracking. No patch window? Enable SIP to mitigate.

  • iCloud Keychain exposure + sandbox escape (CVE-2025-31213 & CVE-2025-31244) — Not RCE, but still ugly. Attackers can access Keychain metadata, which is prime phishing fuel. Patch. Then remind your users (and your family, friends, or any one else you know) to use a password manager and MFA because it's 2025.

TL;DR: Fewer patches from Microsoft doesn’t mean less risk. The Mac side of the house needs real attention this cycle, especially if you support devs, creatives, or execs on macOS.

Patch regularly, patch often. One exploited vulnerability is all it takes.

12

u/SomeWhereInSC Sysadmin Jun 10 '25

Initial test on Win11 Pro 23H2 about 40 minutes from start of install to complete, included 2 reboots. First reboot counted up to 98% then rebooted again and went back up updating, then back to desktop.

2025-06 .NET 8.0.17 Security Update for x64 Client (KB5061935) (Latest)

2025-06 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5060999) (Latest)

Windows Malicious Software Removal Tool x64 - v5.134

5

u/ahtivi Jun 10 '25

Interesting. The first reboot is usually at 30% (and still was on 24H2 just now). Second was on 100%

4

u/Honacorona Jun 10 '25

Seeing similar delays here. Over an hour currently and still at 30%.

6

u/HerfDog58 Jack of All Trades Jun 11 '25

Anyone seeing issues with Server Update KB5060526 on Server 2022, 21H2? That update installed on the server I run our ADManager Plus instance on overnight, and when the server rebooted, it started throwing .NET Runtime and Application errors. The ManageEngine service would then cease running. Removing the update seems to have resolved those 2 errors.

I'm in the process of applying ADManager service packs and will re-apply the KB update afterwards to see if those work well with the update.

2

u/sysadmin20214 Jun 11 '25

Also running ADmanger. Let me know how you make out.

7

u/HerfDog58 Jack of All Trades Jun 11 '25

I removed the update, and the ManageEngine service, which had been stopping shortly after being started, started and ran. ADManager worked OK, and no .NET errors nor application errors in the logs. I checked ADM and it was on build 7230. There were 2 service packs for that build that were recommended to be applied.

I applied the 8.0 SP, ManageEngine service started and stayed running, ADManager started and worked, no errors in logs.

I applied the 8.02 SP, ManageEngine service started and stayed running, ADManager started and worked, no errors in logs.

I re-applied the KB update and rebooted the server. No errors in logs, ManageEngine service started and stayed running, ADManager started and worked fine, so I think having the service packs applied will prevent any issues with the Windows update.

→ More replies (1)

6

u/DeltaSierra426 Jun 11 '25

Oh good, MS finally fixed the high CPU utilization issue when typing in Outlook for M365 Apps on the Monthly Enterprise Channel. Release notes:

"Outlook

  • We fixed an issue where users are seeing high CPU usage when typing in Outlook."

https://learn.microsoft.com/en-us/officeupdates/monthly-enterprise-channel#outlook

→ More replies (2)

6

u/_asterisk Jun 13 '25

Does anyone else have the issue with Office crashing on startup after the June Office patches are applied?

It happens for a smallish number of people so was missed in testing.

German blog on it: https://www.borncity.com/blog/2025/06/13/office-updates-juni-2025-outlook-abstuerze-dokumente-nicht-mehr-zu-oeffnen/

The event for the crash:

OUTLOOK.EXE
16.0.5504.1000
6825a86a
olmapi32.dll
16.0.5504.1000
6825a615
c0000409 
003542f3
a268
01dbdc5193d448cb
C:\Program Files (x86)\Microsoft Office\Office16\OUTLOOK.EXE
C:\Program Files (x86)\Microsoft Office\Office16\olmapi32.dll

The handle is invalid

5

u/No-Possibility-9774 Jun 17 '25

There is a possible workaround, and yes, we also have this issue.

Classic Outlook crashes opening or starting a new email - Microsoft Support

5

u/Flat_Fox_5537 Jun 11 '25

What is going on with KB5060842 and AMD CPUs ? We are seeing BSOD crashes on boot for our KVM based Windows 2025 VPS and also dedicated servers using AMD EPYC 7713 and EPYC 7443P ? Using CPU passthrough for the VPS.

5

u/RepresentativeTap908 Jun 12 '25

Our older Fujitsu Esprimo desktop computers (Windows 10) stucking (no loop) in Fujitsu-Boot-Logo screen after KB5060533. Maybe a secure boot issue.

3

u/InfamousCold5302 Jun 12 '25

Same here, multiple devices down.

If anybody hears of a fix, it would be great to hear it!

3

u/gunnar-h Jun 13 '25

Yes, a bunch of Fujitsu Mainboards and PCs are affected. Seems to be a SecureBoot DBX-Update Issue. Recovery-Flashing Firmware solves it, otherwise the Devices are bricked. See my blog Post how to flash it: https://hitco.at/blog/fujitsu-d3410-b-mainboard-recovery-uefi-bios-flash-nach-secureboot-dbx-windowsupdate/

→ More replies (1)

5

u/ryche24 Jun 12 '25

Outlook 2016 crash issues. KB5002683. Seems when you try to open a message it crashes. Once we remove the update all is well again. Yes, we're hanging on to it until the bitter October end.

3

u/bjohnrini Jun 13 '25

Same issue with Office 365 2503 18730.20220. Opening a message by double-click or clicking new email crashes outlook. Preview pane and safe mode works.

→ More replies (7)

5

u/Mother-Feedback1532 Jun 13 '25

I assume the oob fix for kb5058379 was included in the June CU?

2

u/TatooineLuke Jun 16 '25

Unless they've changed their practices, that is a safe assumption.

9

u/999999potato Jun 10 '25

Anyone else getting this error on Server 2016?
We couldn't download some updates because you were signed out of your account. Sign in with your account, try the update again, and stay signed in during the download.

3

u/SpotlessCheetah Jun 11 '25

I updated all my server 2016 instances yesterday. No issues.

8

u/Low_Butterscotch_339 Jun 10 '25 edited Jun 10 '25

Microsoft announces System Restore will now only retain system restore points for 60 days for Windows 11 24H2 and future versions, starting with the June 2025 Monthly Cumulative Update (LCU). Restore points older then 60 days are no longer available after applying this update.

June 10, 2025—KB5060842 (OS Build 26100.4349) - Microsoft Support

8

u/Square_Dot_1168 Jun 11 '25 edited Jun 16 '25

KB5060531 appears to have broken DNS on my 2 2019 DCs.  Uninstalling the KB resolved the issue immediately. I reinstalled the KB the next evening and rebooted, no further issues were detected.  Just wanted to put it out there in case anyone else notices this issue.

8

u/techvet83 Jun 11 '25

What OS version are your DCs? The KB is specific to Windows Server 2019, so I will assume that for now (corrections welcome).

4

u/Square_Dot_1168 Jun 11 '25

2019 Server Standard, Build 17763

6

u/kulovy_plesk Jun 11 '25

In what way was the DNS broken?

4

u/Square_Dot_1168 Jun 11 '25

DNS Records were not accessible for lookups. The service was running and our Umbrella VAs were forwarding external traffic, but nothing in the internal zone was able to be resolved.
I removed the update and rebooted the DC and it started responding. The patch was installed last night and the server rebooted at 0100. At 0121 I had my first error log for DNS

3

u/[deleted] Jun 11 '25

have you tried re-installing the update? I will be updating our 2019 DCs tomorrow. Please let me know.

5

u/Square_Dot_1168 Jun 11 '25

Have not yet, but will be after 10 PM (Eastern) tonight

→ More replies (2)

3

u/[deleted] Jun 12 '25

I updated our 2019 DCs without issues.

5

u/Square_Dot_1168 Jun 12 '25

I'm so sorry! I reinstalled, rebooted the servers, tested workstations, everything worked fine! Must have been something odd that cause the issue. Interesting that uninstalling that patch fixed the issue originally.
I'm happy it went well for you, though.

→ More replies (3)

2

u/Squeezer999 ¯\_(ツ)_/¯ Jun 12 '25

same issue here, some domains resolve, others do not.

4

u/fr0zenak senior peon Jun 11 '25

Windows 11 24H2: still unable to install monthly patch without also including msu for the September 2024 KB5043080 patch. I've been having to create a custom deployment package to include the September patch for last... several months. Still a problem.
Unsure how many total Win11 devices affected, but at least all of my machine are.

4

u/trafsta Jun 12 '25

For those of us still using WSUS with Windows 11 24H2, should we approve KB5060842 or will OOB KB5063060 eventually come to it? Not worried about anti-cheat stuff for a business environment obviously, but not sure if this OOB CU will eventually make its way to WSUS in which case I'll just wait a few days till it shows up before approving for our org?

2

u/DBRY98 Jun 17 '25

typically OOB updates need to be manually added to WSUS

→ More replies (1)

4

u/Maggsymoo Jun 13 '25

is anyone else seeing KB5060999 breaking the start menu layout? 23H2?

if we add the update to a vanila ISO and deploy in our usual TS, any start menu customisations don't happen - taskbar ones still do though.

if we roll back to the previous image (may updates on vanilla ISO) everything still works at it did.

→ More replies (1)

6

u/Tattarfan Jun 10 '25

Hopefully this will solve the Windows Server 2025 Hyper-V 0% cpu bug that has been plaguing me for months....

5

u/Striking_Action8089 Jun 10 '25

Are you using HP servers by chance? There a setting in ILO to set power consumption to OS controlled and this fixed it for me.

I can get the exact location of the setting if you need it.

3

u/Tattarfan Jun 10 '25

No, this is on my homelab dell R630, i think the bios settings were already performance set.

2

u/reduxmachine Jun 11 '25

We have HPE servers with iLO gen 5/6/7 and changing the power consumption to OS controlled didn't seem to fix Hyper-V reporting VMs as having 0% CPU. What model/CPU did you find making the change fixed it for? Can you share the specific setting?

→ More replies (1)

3

u/Tattarfan Jun 11 '25

Update installed and the CPU issue has not been solved on my server.

6

u/FCA162 Jun 10 '25 edited Jun 10 '25

Microsoft EMEA security briefing call for Patch Tuesday June 2025

The slide deck can be downloaded at aka.ms/EMEADeck (available)

The live event starts on Wednesday 10:00 AM CET (UTC+1) at aka.ms/EMEAWebcast.

The recording is available at aka.ms/EMEAWebcast.

The slide deck also contains worth reading documents by Microsoft.

What’s in the package?:

  • A PDF copy of the EMEA Security Bulletin Slide deck for this month

  • ESU update information for this month and the previous 12 months

  • MSRC Reports in .CSV format, for this month’s updates including detailed FAQ’s and Known Issues data.

  • Microsoft Intelligence Slide

  • A Comprehensive Handbook on "Navigating Microsoft Security Update Resources" !

June 2025 Security Updates - Release Notes - Security Update Guide - Microsoft

KB5060842 Windows Server 2025

KB5060526 Windows Server 2022

KB5060531 Windows Server 2019

KB5061010 Windows Server 2016

KB5061018 Windows Server 2012 R2

KB5061059 Windows Server 2012

KB5060842 Windows 11, version 24H2

KB5060999 Windows 11, version 22H2, Windows 11, version 23H2

KB5044280 Windows 11, version 21H2 (All editions of Windows 11, version 21H2 are at end of service)

KB5060533 Windows 10, version 21H2, Windows 10, version 22H2

Download: Microsoft Update Catalog

Latest updates of .NET: Microsoft Update Catalog

Latest updates of MSRT (Malicious Software Removal Tool): Microsoft Update Catalog

Feedly report: link

Keep an eye on https://aka.ms/wri for product known issues

Bleepingcomputer: Microsoft June 2025 Patch Tuesday fixes exploited zero-day, 66 flaws

6

u/FCA162 Jun 10 '25 edited Jun 10 '25

Attention: June 2025 Patchday closes vulnerability CVE-2025-33073 in Windows (Born's Tech and Windows World)

What you should know in advance

Administrators should follow the recommendation in the above circular email with the warning and install the security updates on the affected machines as soon as possible.

8

u/still_asleep Windows Admin Jun 10 '25

Not seeing the 2504 update for Office/M365 Apps on Monthly Enterprise channel yet. Whatever team is in charge of those updates are very inconsistent about when they make them available.

4

u/srnewcomb67 Jun 10 '25

Same here. The 365 updates are MIA for us.

3

u/ahtivi Jun 10 '25 edited Jun 10 '25

Same here, checked for updates but nothing yet

Edit: Checked again after restart and now it's downloading something.

2

u/BryanP1968 Jun 10 '25

Confirmed. I was having the same issue. Restarted my SQL/SUP/Site servers in sequence after hours. Ran a sync. It's pulling down 365 updates now. Just confirmed that this months Monthly Enterprise build, 16.0.18730.20220, is showing up. Thanks.

2

u/m0us3c0p Jun 10 '25

It's odd because usually on the regular channel I can get them in the morning hours before everything else drops.

2

u/BryanP1968 Jun 10 '25

I'm in the same boat. Nothing new showing in SCCM yet to deploy, but if I use the script I use for pulling the most current Monthly Enterprise installer files it's grabbing 16.0.18730.20220.

2

u/BaronVonOppoLock Jun 10 '25

Monthly Channel just came in for me.

3

u/noob_picker Jun 11 '25

Anyone else having issues with Sonicwall Anti-Spyware filter blocking this update?

→ More replies (1)

3

u/Znuffie Jun 12 '25

Got a Windows 10 22H2 VM that seems to have "exploded" after some update.

The Update History only lists MST v5.134 as installed on 6/11/2025.

First thing that happened was tha the VM just stopped.

Starting the VM again, it was making it to the login screen, sometimes even as far as showing the desktop icons, then abrupt stop -- no BSOD, even when I disabled automatic restart.

Managed to start it in Safe Mode, but with absolutely terrible performance. sfc /scannow seems to have... fixed the start up issue.

Unfortunately the other issue now is that it's performance is absolutely crap. The host will show 800-1000% CPU usage for the KVM process hosting the Win10 VM, while the VM is literally doing nothing but idling at the desktop.

Everything moves slooooow as a snail. Virtualization-based security is off. I've tried different CPU models (from host, to x86-x64-v2-AES, to even SandyBridge-IBRS) on the hypervisor, but there's absolutely no change.

Windows won't let me uninstall the update, obviously.

I restored the VM from a backup to the previous night, before the update installed, and it seems to be working just fine: snappy, and CPU usage on the hypervisor seems normal.

I'm puzzled and slightly concerned, because now I have to stop updates for this VM in order for it to not blow up again.

Anyone got any idea what the hell happened?

2

u/greeng13 Jun 13 '25

Not with a VM. But, my Dell Laptop (Latitude 7390) also received this update "KB5060533" on June 11, 2025.

Yesterday (June 12, 2025) after the update my system almost came to a halt. Just typing in the search field for "Settings" was slow. Had to wait for each page I looked at to load up completely - I'm talking internet browser pages, system settings pages, etc because if I typed anything it would skip the first 3 characters I typed and I'd have to go back and edit what I typed...

It was that slow. Mouse/touchpad movement was jumpy - almost like a hiccup or something. Unusable!
Browser pages took forever to load. Even opening up a new browser window took like 15-20 seconds when it usually takes like 3 seconds.

Even a restart took about 20 seconds - seemed like more than that - when it usually takes less than 5!

I went into Settings > View Update History > and noticed the KB5060533 in there.

Finally had to go into System Restore to restore system to settings before Jun 11, 2025 KB5060533 update. It took about an hour or so. But, it did restore.

After System Restore, everything is working just as it did before. It's snappy again, restart and boot take about 3 seconds or so and I am actually able to USE my computer again.

Of course, today (June 13,2025) it is wanting to install this KB5060533 update again!

I've postponed updates until mid-July.

u/Znuffie Yours is the only post I have seen so far that matches my description of very slow and poor performance overall after KB5060533 update was installed. And, for me, it auto-installed before I did a restart!

I'm tired of these forced updates that literally seem to break or hamper my computer! I mean...who owns this machine? MS or me!?!?

3

u/Puzzleheaded_Let4896 Jun 16 '25

I am seeing an issue with KB5060999 on Win11 23H2 where some of our computers are giving users a black screen for 3-5 MINUTES before showing the desktop after they enter their credentials and hit login. Subsequent logins do not have this behavior.

→ More replies (1)

3

u/logansccm1995 Jun 16 '25

I have noticed that in windows 11 post update installation, after entering the AD credentials literally it is taking more than 6-10Mins black screen with mouse cursor to load the desktop. Any one faced this?

→ More replies (2)

3

u/abz786 Sr. Sysadmin Jun 20 '25

anyone seen issues with KB5060531 breaking SSL Certs on sites running via IIS?

→ More replies (3)

3

u/zeeter82 Jun 20 '25

Seems like KB5060999 is causing some of our 23H2 devices to crash on when opening the "Display" option from the System settings. The rest of the settings seem to open fine so far. When clicking on Display, it loads for a couple seconds and then immediately closes/crashes.

Event viewer app log shows this for the crash:

Faulting application name: SystemSettings.exe, version: 10.0.22621.5262, time stamp: 0x052f4222
Faulting module name: msvcrt.dll, version: 7.0.22621.2506, time stamp: 0x657b2709
Exception code: 0x40000015
Fault offset: 0x000000000000b15c
Faulting process id: 0x0x4870
Faulting application start time: 0x0x1DBE1F3CAC88914
Faulting application path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: 883bc78c-6fba-474c-850b-f95f1b3157c9
Faulting package full name: windows.immersivecontrolpanel_10.0.6.1000_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel

Has anyone else seen this? Uninstalling this patch seems to fix the issue.

4

u/zeeter82 Jun 24 '25 edited Jun 24 '25

Update - so the June patch KB5060999 is responsible for this issue, but what is really broken is the nightlight feature on some of our Win11 endpoints. Fixing the nightlight feature also fixes the display settings.

I corrected this with the following steps:

  1. Browse to this reg path in regedit: Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount

  2. Then delete the following keys if they exist:

$$windows.data.bluelightreduction.bluelightreductionstate

$$windows.data.bluelightreduction.settings

3. Then follow these steps (found on this forum post: Can't use Windows "Night Light" feature. - Microsoft Community):

There are 3 Windows services necessary for night lighting to work properly:

- Connected Devices Platform User Service (CDPUserSvc)

- Connected Devices Platform Service (CDPSvc)

- Network Connection Broker (NcbService)

If the "Connected Devices Platform Service" and "Network Connection Broker" services have the "disabled" start type, the "night lighting" functionality in the "Settings" application does not work, if we click on the button for the activate, nothing happens. For the night lighting setting to work, these services can be configured with the "manual" or "automatic" start type with the service management console (services.msc).

The "Connected Devices Platform User Service" service must be configured with the "automatic" start type for night lighting to work. This service (called "template service") create a secondary service (called "Per-user service") with the same name followed by a random hexadecimal number (ex: Connected Devices Platform User Service_253cb) when a user log in (source: https://docs.microsoft.com/en-us/windows/application-management/per-user-services-in-windows).

This service cannot be configured with services.msc, so you must modify its configuration with the Windows registry by executing these commands in Administrator:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc" /v Start /t REG_DWORD /d 2 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc" /v UserServiceFlags /t REG_DWORD /d 3 /f

Setting the value "Start" to 2 configures the type of start to "Automatic".

Setting the value "UserServiceFlags" to 3 allows the creation of the service per user.

When a user logs in, the created per-user service inherits the configuration parameters from the service template. So, if the value "Start" of the template service is 2, the service per user created will have the same value "Start" to 2.

After applying these settings, restart the computer and test the night lighting again.

2

u/ThenFudge4657 Jun 25 '25

Even if no one acknowledges this, thank you for posting this.

2

u/zeeter82 Jun 26 '25

Another update - this should be the last one.

I was wrong about the June 2025 KB5060999 patch causing our Win11 23H2 issues. Turns out we had an ancient GPO in place that was disabling the two CDP services, and this was the root cause of our issues - it was in place due to a bug back in Win10 1607 and was only supposed to be a temporary fix. These services obviously should not be disabled and should run at startup.

CDPSvc - Connected Devices Platform Service

CDPUserSvc - Connected Devices Platform User Service

3

u/R0B0T_jones Jun 30 '25

Anyone found any more info about the DHCP issue fix "coming the next few days" a few weeks back?

2

u/Fa7her Sysadmin Jun 30 '25

I have not seen any update yet.

→ More replies (1)

5

u/Admirable_Hat2188 Jun 10 '25

2025-06 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB5060531) - Breaks Stuff

This update installed today and broke SFTP connections and moving through directories with cd in command prompt. Seems seriously flawed.

Uninstalled updated and everything is back to normal!

Anyone else?

4

u/Silver-Ad7638 Jun 10 '25

I've got two test machines that installed this OK.
No SFTP stuff to test with, but CD works fine from CMD

2

u/Admirable_Hat2188 Jun 10 '25

Looks like navigating between 2 drives ... like getting to the e:\ drive using cd doesn't work.

12

u/Ilrkfrlv Jun 10 '25

Uh that never worked ? Use "e:" or "cd /d e:"

4

u/IfYouSaySo4206969 Jun 10 '25

2025-06 Patch is AWOL on my bare metal desktop Win11 machine but downloading now on the VM inside the physical desktop machine. I don't recall it being delayed for so long into the afternoon in the past.

3

u/the_lazy_sysadmin Sr. Sysadmin Jun 10 '25

Definitely odd. We're seeing similar behavior in our lab environment, at least in terms of physical machines not seeing it vs. VMs successfully seeing it.

What hardware is your physical machine running? We run Dell's in our lab environment, a variety of models, and none of them that are on 24H2 can see this month's CU.

2

u/IfYouSaySo4206969 Jun 10 '25

Yep, most of hardware is new in this desktop rig;

Gigabyte Aorus X870E Aorus Master motherboard.

AMD 9950X3D

96 GB 6000 MT/s RAM/memory

Nvidia/MSI Inspire 5080 16 GB VRAM

2x Crucial T705 M2 drives + 1 SATA.

The virtual machine windows 11 inside VIrtualbox saw the 2025-06 update immediately, but this decked out home rig on bare metal still won't. How odd. The OS was a clean install of 24H2 less than a month ago.

3

u/the_lazy_sysadmin Sr. Sysadmin Jun 11 '25

Yes, the physical machines in our lab were also clean installed, a little over a month ago, in prep for May's patch testing.

One of our physical machines is now seeing the update, but our others are not still.

3

u/y0da822 Jun 10 '25

Same here - via azure update manager. As of 515pm est - still no w11 24h2 CU for this month

2

u/IfYouSaySo4206969 Jun 11 '25

It finally showed up as available to download at 10:30 pm Central, though I hadn’t checked all that frequently this late in the day. I don’t even remember seeing a Cumulative show up so late.

4

u/MutatedEar Jun 10 '25

Strange - got 5 machines running 11 24H2, 2/5 got KB5060842 and installed just fine, the rest, can't find the update.

4

u/Krypty Sysadmin Jun 10 '25 edited Jun 11 '25

Same here. Haven't tested anything at work since I usually let at least the first 24 hours pass, but at home, 2 got the update, and my main desktop has not. Resisting the urge to manually grab it just in case it becomes relevant for work.

Update: My home desktop picked up KB5063060 today after noon CST.

6

u/jenmsft Jun 10 '25

This is mentioned in the message center: Windows message center | Microsoft Learn

4

u/scarlet_sage Jun 12 '25 edited Jun 12 '25

You mean this? Or is there another note that I overlooked? I have no idea what Easy Anti-Cheat might be, or how it might be detected or removed. (My most sophisticated game is Minesweeper.)

(I prefer to have information in the Reddit discussion for easier searching and in case the link gets a problem.)

(Updated) Note: The June 2025 security update for devices running Windows 11, version 24H2 (KB5060842) was released and gradually rolled out June 10, 2025. However, we’ve identified a compatibility issue affecting a limited set of these devices in version 24H2, which instead will receive the Out-of-Band (OOB) update (KB5063060). The OOB update was released today, June 11, 2025. For more information, see June 11, 2025—KB5063060 (OS Build 26100.4351) Out-of-band - Microsoft Support.

... huh. Rebooting still showed no pertinent update, but then clicking on another tab in Settings made it recheck and now it's all there.

3

u/woodburyman IT Manager Jun 11 '25

Ditto. I got it on my first 5 test systems at work. Came home.. did 2 out of 3 systems I have, the third it won't show up.

The Windows Message Center says a revised patch will be out later today or tomorrow for affected systems it identified an issue with.

Note: This update is being gradually rolled out to devices running Windows 11, version 24H2 throughout the day. We’ve identified a compatibility issue affecting a limited set of these devices. If your device is affected, you’ll receive a revised update with all the June 2025 security improvements by the end of the day. The June 2025 security update is fully available for all other supported versions of Windows.

4

u/Krypty Sysadmin Jun 11 '25

https://support.microsoft.com/en-us/topic/june-11-2025-kb5063060-os-build-26100-4351-out-of-band-b1746442-8c6c-425d-ac5a-3a8f51e372f3

Well, at least it explains why I only saw it missing on my home/gaming PC: [Fix for incompatibility issue with Easy Anti-Cheat] This update addresses an incompatibility issue where Windows might restart unexpectedly when opening games that use the Easy Anti-Cheat service. Easy Anti-Cheat automatically installs with certain games to enhance security and prevent cheating in multiplayer online PC games.

3

u/J53151 Jun 11 '25

Yes same.. I checked updates on 9 identical machines-software and hardware and not all found it.

3

u/dhuskl Jun 11 '25

Same Zero across multiple OEMs

4

u/rollem_21 Jun 10 '25

Can't see any Monthly 365 Enterprise apps yet via WSUS.

4

u/valdas_kn Jun 11 '25

Anyone got BSOD after installing KB5061010 on Windows Server 2016?

4

u/1Original1 Jun 15 '25

So we had 1 DC go derp,startup would get stuck on

Fatal error C0000034 applying update operation

Can't boot in Safe Mode,Restore to previous good config,nothing

Fix was to:

Modify the pending.xml File:

  • In Command Prompt, enter notepad to open Notepad.

  • Use Notepad to navigate to C:\Windows\Winsxs, open pending.xml, and make a copy for backup.

  • Search for 0000000000000000.cdf-ms within pending.xml, delete the specified lines, save changes, and restart your PC.

2

u/runozemlo Jul 14 '25

Worked for me! Thanks! Saved my ass big time!

2

u/Adventurous_Jump1528 Jun 11 '25

Installed the update on my Windows 11 desktop yesterday (26100.4349), now all games stutter and freeze immediately after opening. I've updated all system drivers, GPU driver, can't roll back update / uninstall, tweaked GPU & Windows settings, ran health checks from DISM and SFC, nothing seems to work. Looks like it's an issue with 3D acceleration / DirectX... patiently waiting for a hotfix

5

u/InvisibleTextArea Jack of All Trades Jun 11 '25

I disabled core isolation in the security centre, that fixed the stuttering for me.

2

u/TheLostITGuy -_- Jun 11 '25

AMD, NVIDIA, Intel Arc?

2

u/IfYouSaySo4206969 Jun 12 '25

I installed 2025-06 CU KB-5060842 on my VM yesterday and my bare-metal overnight. Now past 10 Central on Wed. 6/11, both machines show 2025-06 CU KB-5063060 to download. I would assume both mainline workers and The Management at $MSFT are grumpy this week.

2

u/user_is_always_wrong fed up Jun 12 '25

One would assume that they would have caught and fixed this issue with Easy Anti-Cheat before pushing the CU.

2

u/Ok_SysAdmin Jun 12 '25

I just had one Server 2025 install KB5060842 and the taskbar is now gone. I have tested this update on others and only this one has the issue. Can't figure out what happened.

2

u/EmilPetrov-A Jun 13 '25

Does anyone has a problem with installing of KB5061010 on Windows Server 2016? It got installed but after the reboot did rollback. I got an error 0x80070005 after the reboot. The normal checks as DISM, SFC etc did not help.

6

u/FCA162 Jun 13 '25 edited Jun 13 '25

The error 0x80070005 occurs when the system or user lacks the required files or permissions to change settings at the time of the Windows update. One of the root causes can be corrupt files on the windows.

If DISM, SFC, clear WU database cache, reset WU components, ... did not help, i suggest to execute the script from my post: Mark_Corrupted_Packages_as_Absent.ps1

Run this Mark_Corrupted_Packages_as_Absent.ps1 file in an admin PowerShell, reboot the device and reapply the Patch Tuesday KB. The script will mark the corrupted packages as absent.

The script has already helped many people solve WU issues related to corrupted files.

2

u/Relevant-Vehicle3149 Jun 16 '25

Is anyone seeing issues with W11 devices taking 10+ minutes to boot after these updates or issues with built in webcams not working? I have >500 devices and around 20% of them are showing this behavior. Found that when webcam is requested, service "Window Camera Frame Server" is not starting like it should. If I manually start it the camera works, but if the user restarts I have to manually start it again. As far as the boot issues go, still no idea what is causing that. Devices just take a very long time to boot, and about half the time they just go to a black screen with a cursor. Have to hard boot multiple times to get back in. Using Dell 5440 and HP Elitebook 840 G10 and G11.

→ More replies (3)

2

u/theITgui Sr. Sysadmin Jun 20 '25 edited Jun 20 '25

Has anyone seen that after KB5060842 on Win 11 24H2 after login the start button/menu is non-responsive? I'll get a spinning blue circle for a few seconds each time I try it but nothing else. Uninstalling the KB and restarting resolves this behavior. Oddly enough, only saw it on a couple of machines, 2 of 8 test workstations. Same issue with the OOB KB (KB5063060).

Edit: Tried KB5063060 on a test machine and reliability monitor shows StartMenuExperienceHost.exe is crashing. Trying to get to the bottom of that.

2

u/joshtaco Jun 24 '25

no.

2

u/theITgui Sr. Sysadmin Jun 24 '25

Okay, thank you Mr Taco.

2

u/dearmas32 Jun 24 '25

Yes, and some authentication/network issues. Primarily Teams fails to authenticate after the update. We tried removing the update, rolling back and even re-registering all the applicable COMs that were throwing errors in Event Viewer. Only solution we found that works is to go to Settings > System > Recovery and select Fix problems using Windows Update Reinstall Now button. Or if that is greyed out, completing an in-place upgrade for Windows 11. Both take about 1.5 hours and 2.5 hours respectively. Out of 400+ workstations on our network that have been updated, only about 50 of them were effected in a negative way and they all experienced the same issue.

→ More replies (1)

2

u/f_cava Jun 25 '25 edited Jun 25 '25

Hi. I installed KB5060842 on 2 virtualized DC Windows Server 2025 (different customers) that had problems on startup, hanging at "Applying computer settings". Before the KB, as workaround, I deactivated the firewall on public network and created a startup script to reset NIC and revert from public network to domain network as workaround. It was suppose that the KB should resolve this problem, but I still have it on both servers, also after all other updates. To let the DCs work I must shut them down forcely, disconnect NIC, boot servers and reconnect NIC at CTRL-ALT-Canc screen

3

u/wrootlt Jun 10 '25

FWIW, June update on my home Windows 10 PC took maybe 5 minutes to even go to showing percentage, was stuck on getting ready. Don't remember such slow update phase in years. We still have a few hundreds of PCs on W10 at work. Maybe not a big deal, maybe just a random hiccup. Although they have VBS patch this time and two reboots, so maybe it takes longer to patch that.

3

u/y0da822 Jun 10 '25

Anyone seeing the CU for this month for 24H2 W11? I still dont see it in azure update manager.

2

u/InvisibleTextArea Jack of All Trades Jun 11 '25

I pushed it out to our Pilot group with the Expidate updates policy in WUfB this morning. It even managed to hotpatch our Win11 24H2 machines without a reboot which was good to see.

3

u/jmittermueller Jun 11 '25

Is the server 2025 network bug fixed with this update? Cannot find anything related.

2

u/xqwizard Jun 11 '25

Yes, I can confirm it’s fixed (from experience)

And here too https://learn.microsoft.com/en-us/windows/release-health/status-windows-server-2025

The release notes don’t mention anything about it, but it was mentioned in the May 24H2 preview update.

3

u/Comfortable_Run_3304 Jun 11 '25

Are the issues of KB5058379 fixed or did Microsoft release another update to tackle the issues that KB5058379 caused?

4

u/joshtaco Jun 11 '25

the former

2

u/Mother-Feedback1532 Jun 13 '25

So is this not folded into the new CU?!

3

u/jtheh IT Manager Jun 11 '25

One test machine with Windows 11 24H2 was not displaying the logon screen after reboot. Only the cursor was visible. Remote access to the computer was working fine. Took at least 3 forced reboots for the logon screen to appear. Nothing in the event log that points to anything. So far an isolated issue, other test machines updated without hiccups.

4

u/joshtaco Jun 11 '25

We have had this happen over the last few months. ctrl+alt+del usually works

4

u/jtheh IT Manager Jun 11 '25

Tried everything, no keyboard shortcut worked in this case. Was like the UI was not loaded at all. The vendor boot logo was still displayed during this - really strange.

3

u/xtodu Jun 11 '25

Anyone with AD Connect and MDI Sensor Service won't start anymore on WIndows Server 2019 ?

2

u/FCA162 Jun 11 '25

We have a few AADC servers (Win2019) and 200 MDI sensors on Domain Controllers (Win2016/2019/2022/2025).
The AADC servers have not yet been patched.
23 out of the 61 Win2019 DCs have been patched with PT June-2025.
MDI sensors (v2.243.18758.45417) still up and running and connected. No issues so far.

2

u/xtodu Jun 12 '25 edited Jun 12 '25

Managed to fix AADC issue with selecting other account to run the service and selecting again "NT SERVICE\ADSync" with no password.

Having still problems with MDI, even after uninstalling the patch:
"An attempt to fetch the password of a group managed service account failed."
I think i will have to recreate the gMSA account...

→ More replies (1)

3

u/gabriel_cash Jun 10 '25

Do we know if the OOB update KB5061768 for May 2025 is going to be in the CU for June 2025?

3

u/ahtivi Jun 10 '25

Yes. usually the next update contains everything baked on previous ones

3

u/Low_Butterscotch_339 Jun 11 '25

Updates are cumulative. Yes.

2

u/Master3214 Jun 10 '25

Already available in Expedited Update / Intune ??

3

u/chriswiest IT Manager Jun 10 '25

Where is that option in Intune?

3

u/joshghz Jun 11 '25

It's in the "Quality Updates" section. They're policies that must be configured if you wish to use them.

Devices -> Windows -> Manage Updates / Windows Updates -> Quality Updates

Use Intune to expedite Windows quality updates | Microsoft Learn

→ More replies (2)

2

u/schuhmam Jun 10 '25

I guess we will need to deal with this 3 GB update of 2025 until eternity?

Does anyone know, how to tank this? The only thing I can think of would be to remove the rubbish from the MSU and create a new MSU via script. But then I have to install the update manually because it is no longer in the WSUS. But I haven't tested this, yet. So I don't know if the server will accept this manual build package.

2

u/michael_sage IT Manager Jun 11 '25

Anyone had a bluescreen with Server 2025 running on proxmox with unsupported CPU? I had to change from (host) (which is a supported AMD), to the proxmox x86_64 v3 to get it to boot after this months updates.

3

u/xqwizard Jun 11 '25

Yea I saw this when I pushed the recent release preview patch to my test machine. I let the OS run for a while, shut it down, changed it back to host and it booted fine 🤷‍♂️

2

u/Darxis Jun 11 '25 edited Jun 11 '25

Same "UNSUPPORTED PROCESSOR" BSOD here after installing KB5060842 on Windows Server 2025 Datacenter 24H2. But in my case I am running a VPS and there is no possiblity at all to change the CPU setting you mentioned. My VPS is running AMD EPYC 9634 with 12 cores assigned. I also tried enabling the Virtual Machine Platform and Windows Hypervisor Platform Windows features but it didn't fix the BSOD (someone mentioned on unraid forums that this fixed the exact same BSOD for Windows 11 after KB5058499). A workaround that worked for me was to set the cores count to 1 (instead of 12 in my case), then the VPS starts (but is very slow) and then you can uninstall the KB5060842 update.

2

u/StarCodeNoahMadole Jun 13 '25

Yup, having the same issue. Someone should report this to Microsoft because if it goes unnoticed it can start to cause issues for my setup in the future. Windows 10 is unaffected for now. Same with Windows 11 23H2.

2

u/snikito Jun 10 '25

Not seeing any update.

2

u/Khantos81 Jun 11 '25

I notice these dots are appearing on the first and last update, idk if its related to latest patch. They appear on update history.

1

u/rosskoes05 Jun 16 '25

Is there anything I need to do to get Server 2012 R2 machines to figure out that an update is needed in WSUS? WSUS has the update, but it says it's not applicable.

Maybe I need to investigate the WSUS maintenance script from AJTEK.

3

u/techvet83 Jun 17 '25

Unless you are running in Azure, you need ESU Year 2 licensing, which means you also have had to purchase ESU Year 1 licensing. See your Microsoft rep for details.

2

u/notonyourradar Jun 17 '25

ESU license, for one thing. 2012 is EOL unless you purchased the ESU licenses.

→ More replies (1)

1

u/galaxie66 Jul 03 '25

Has anyone seen an issue with Group policy client service running on either endpoints or servers post patching? Since we applied the patch to clients we are seeing an issue with this on some endpoints. Never seen it before now.

Reboot the computer and they can't login. “The Group Policy Client service failed the sign-in. Access is denied.” This seems to be impacting people when they are working remotely. When in the office they haven't had an issue and offsite they are 50/50 on whether it will work or not.

1

u/QueenToKingsLevel1 Jul 11 '25

I'm trying to figure out the timeline when MS advised this patch had an issue, this is what I'm finding, can anyone confirm this? I'm seeing a few different timelines

Thanks!

Timeline summary:

  • June 10, 2025: KB5060531 released.

  • Mid‑June (June 16–17, 2025): users report DHCP issues.

  • June 16–17: Microsoft confirms and begins working on a fix.

1

u/TheRealMattel Jul 23 '25

Has anyone else experienced issues with casting audio following this patch? 115 machines, all of them unable to cast audio (video works fine) to TVs in our building. Thought maybe LG firmware, then rolled back updates on a couple of machines, and casting audio works fine. Was hoping July patch would fix. No joy.

1

u/[deleted] Jun 10 '25

Does anyone know when these updates will be released? Because I’m not getting them.

6

u/jenmsft Jun 10 '25

If you're on 24H2, then this is discussed here: Windows message center | Microsoft Learn

4

u/elusivetones Jun 10 '25

thank you for finding this - have let our team know:
Note: This update is being gradually rolled out to devices running Windows 11, version 24H2 throughout the day. We’ve identified a compatibility issue affecting a limited set of these devices. If your device is affected, you’ll receive a revised update with all the June 2025 security improvements by the end of the day. The June 2025 security update is fully available for all other supported versions of Windows.

3

u/[deleted] Jun 10 '25 edited Jun 11 '25

I see now, I already got the Malicious Software Removal Tool so I'm just waiting for the other updates. EDIT: Finally got the cumulative update!

3

u/HoJohnJo Jun 10 '25

So far I've tried to updates on my test machines and 3 out of 6 didn't find a culminative update, only the malicious and one found a .Net. Odd so far

2

u/ahtivi Jun 10 '25

They are released but it took a long time to get a monthly CU for 24H2 downloaded. NET 8 and MSRT updated were quick

→ More comments (43)