New update of Windows Server causes many serious errors

The latest Windows Server updates have caused headaches for administrators. After the update, the server system encountered serious problems such as domain controller automatically restarting, Hyper-V not running, and not being able to access the ReFS volume until the update was removed.

Windows domain controller keeps restarting by itself

The most serious problem that new updates cause is that the Windows domain controller keeps restarting itself. The server goes into an endless Windows launch cycle and then restarts after a few minutes.

As reported by multiple sources, this issue affects all versions of Windows Server that are still supported by Microsoft.

An administrator shared that he saw the LSASS.exe process take up all the CPU resources on the server and then stopped working.

Since LSASS is a necessary process for Windows to function properly, the operating system will restart itself when the process stops working.

New update of Windows Server causes many serious errors Picture 1

Hyper-V not running

In addition to the constant reboots, administrators reported that after installing the update, Hyper-V was no longer working on the servers. This bug mainly affects Windows Server 2012 R2. Some unverified reports suggest that it affects newer versions of Windows Server as well.

Because Hyper-V does not start, when trying to run a virtual machine the user will receive the following error message:

"Virtual machine xxx union not be started because the hypervisor is not running".

Microsoft's recently released updates fix four Hyper-V vulnerabilities (CVE-2022-21901, CVE-2022-21900, CVE-2022-21905, and CVE-2022-21847) and could be the source of the problem. generate error.

Unable to access ReFS file system

Finally, administrators reported that Windows Resilient File System (ReFS) volumes were no longer accessible or shrunk as RAW (unformatted) after installing updates.

Resilient File System (ReFS) is a proprietary file system from Microsoft. It is designed for high availability, data resiliency and high data processing performance for very large storage volumes.

Temporary fix

Unfortunately, at the moment the only way to fix these 3 problems is to remove the updates that have just been installed on your Windows Server.

Administrators can do this using one of the following commands:

- Windows Server 2012 R2: wusa /uninstall /kb: KB5009624 - Windows Server 2019: wusa /uninstall /kb: KB5009557 - Windows Server 2022: wusa /uninstall /kb: KB5009555

However, you should note that removing the above updates will also remove the recent bug fixes and vulnerability patches. Therefore, only uninstall updates if you feel absolutely necessary.

Micah Soto

Update 14 January 2022