Microsoft Patched Windows Server 2025 Restart Bug that Disconnects AD Domain Controller

Microsoft has resolved a critical bug in Windows Server 2025 that caused Active Directory Domain Controllers to improperly manage network traffic after system restarts, resulting in service disconnections and application failures. The comprehensive patch, identified as KB5060842, was deployed on June 10, 2025, addressing infrastructure stability concerns that had been affecting enterprise environments since the […] The post Microsoft Patched Windows Server 2025 Restart Bug that Disconnects AD Domain Controller appeared first on Cyber Security News.

Jun 12, 2025 - 19:20

Microsoft Patched Windows Server 2025 Restart Bug that Disconnects AD Domain Controller

Microsoft has resolved a critical bug in Windows Server 2025 that caused Active Directory Domain Controllers to improperly manage network traffic after system restarts, resulting in service disconnections and application failures.

The comprehensive patch, identified as KB5060842, was deployed on June 10, 2025, addressing infrastructure stability concerns that had been affecting enterprise environments since the operating system’s general availability in November 2024.

The resolved issue specifically affected how Windows Server 2025 handled domain firewall profiles after restart operations, creating a cascading effect that disrupted Active Directory Domain Controller functionality.

Windows Server 2025 Restart Bug

When domain controllers experienced restart cycles, the system failed to properly apply domain firewall profiles, resulting in network traffic mismanagement that prevented essential applications and services from establishing proper connections to the AD infrastructure.

This bug represented a significant concern for enterprise administrators managing hybrid cloud environments, particularly given Windows Server 2025’s positioning as Microsoft’s latest Long-Term Servicing Channel (LTSC) release designed for high-performance, AI-capable platforms.

The issue was categorized under the broader umbrella of domain controller network traffic management failures, highlighting the critical nature of proper firewall profile application in maintaining Active Directory service continuity.

Microsoft’s engineering teams worked diligently to identify the root cause, which centered on the improper initialization of domain firewall configurations during the system startup sequence.

The malfunction prevented domain controllers from establishing secure communication channels with client systems and other domain controllers within the Active Directory forest topology.

The restart bug created substantial operational challenges for organizations relying on Windows Server 2025 for their Active Directory infrastructure.

When domain controllers failed to properly manage network traffic post-restart, authentication services, group policy distribution, and directory replication processes experienced significant disruptions.

This resulted in user authentication failures, inability to access domain resources, and potential security vulnerabilities due to improper firewall profile enforcement.

The technical manifestation involved the domain firewall profiles not being correctly applied during the domain controller initialization process, causing the system to default to more restrictive network configurations that blocked legitimate Active Directory communication protocols.

Essential services, including Kerberos authentication, LDAP queries, and DNS resolution, experienced intermittent failures, particularly affecting environments with multiple domain controllers where replication synchronization became compromised.

The bug’s impact was strong in environments implementing advanced security configurations and those utilizing Windows Hello for Business in Key Trust mode, where additional authentication complexities compounded the connectivity issues.

Administrative Recommendations

Microsoft officially resolved the issue through KB5060842, which was released on June 10, 2025.

The patch specifically addresses the domain firewall profile initialization sequence, ensuring proper network traffic management following domain controller restart operations.

Organizations utilizing Windows Server 2025 in production environments are strongly advised to implement this critical update immediately to maintain Active Directory service reliability.

The resolution timeline demonstrates Microsoft’s commitment to addressing infrastructure-critical issues within the Windows Server 2025 platform, which serves as the foundation for many enterprise hybrid cloud deployments.

Administrators should verify patch installation success by monitoring domain controller restart cycles and confirming proper Active Directory service functionality post-implementation.

Microsoft recommends implementing comprehensive monitoring solutions to detect similar network traffic management issues and establishing regular restart testing protocols to ensure continued Active Directory infrastructure stability across Windows Server 2025 deployments.

Automate threat response with ANY.RUN’s TI Feeds—Enrich alerts and block malicious IPs across all endpoints -> Request full access

The post Microsoft Patched Windows Server 2025 Restart Bug that Disconnects AD Domain Controller appeared first on Cyber Security News.