IBM Support

Windows Update KB5064081 causes users to be unable to login on Windows 11

Fix Readme


Abstract

Windows update (KB5064081/KB5065426) should not be installed on Windows 11 24H2 with the Verify Privilege Server Suite Agent.

Content

Product Family: Authentication Service
Product: Verify Privilege Server Suite
Known Environments: Windows 11 24H2 using Update optional KB5064081
Issue

There is a serious issue for September Windows update (KB5064081) installed on Windows 11 24H with our Verify Privilege Server Suite Agent. 

This blocks all users from logging into the machine with the Agent.

The Windows Update KB5064081 is an optional preview update for Windows 11 version 24H2, bringing several new features and improvements. Windows Update KB5065426 is monthly cumulative update for Windows 11 version 24H2, which will include the changes introduced in KB5064081. 

See Microsoft Update Catalog for more information from Microsoft (Do not install at this time).

Resolution 
 

Microsoft is working to release an updated Known Issue Rollback (KIR) to address this. Until that time, Server Suite customers should NOT install Windows update KB5064081 or KB5065426.

As a workaround, you can disable the Agent, or uninstall the Microsoft KB (KB5064081/KB5065426).

See Use Group Policy to deploy a Known Issue Rollback - Windows Client | Microsoft Learn for more information about "KIR"

Outstanding issues for Windows 11 24H2 can be found here: Windows 11, version 24H2 known issues and notifications | Microsoft Learn

Cause
Windows Update KB5064081 causes users to be unable to login on Windows 11.
Additional information
We have identified the necessary code changes and implement them in our upcoming series of Rolling and Component updates. The fix is released for the 2025.0.1 version. 
Windows 11 24H2/25H2 and Windows Server 2025 24H2 would be the builds of Windows that are affected based on the presence of certain LSA-related data structure fields in the Windows SDK v10.0.26100.0.Windows 11 23H2 & older should not be affected based on the absence of certain LSA-related data structure fields in the Windows SDK v10.0.22621.0, which is shared by Windows 11 22H2/23H2.

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS2N2U","label":"IBM Security Verify Privilege"},"ARM Category":[{"code":"a8m3p000000UoHvAAK","label":"Troubleshooting"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"All Versions"}]

Document Information

Modified date:
26 September 2025

UID

ibm17244364

Page Feedback