KB5058920: Cumulative update for Windows Server, version 2022, April 2025. Audit policy status display addressed; Citrix update failures have a workaround

The out-of-band update addresses an Active Directory audit-policy display issue and improves the servicing stack. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update.

Does it affect you? Applies to: Devices running Windows Server 2022, x64.

What changes

Improvements 2 changes

Active Directory Group Policy

Enabled logon auditing no longer appears as “No auditing” in local policy.¹
Addresses the display of the “Audit logon events” policy in Local Group Policy Editor or Local Security Policy when auditing is enabled and working.

Servicing stack

The component that installs Windows updates receives quality improvements.²
Includes servicing stack update KB5055668, build 20348.3440.

Known issues

Open Affects: Organizations and IT administrators

Citrix

Devices with Citrix Session Recording Agent version 2411 might be unable to complete installation of the January 2025 Windows security update. Home users are not expected to be affected.³

How to apply the workaround Workaround

Update Citrix Session Recording Agent to version 2503 or newer.³
Open Affects: Everyone

System Guard Runtime Monitor Broker service

Event Viewer might show Event 7023 for SgrmBroker.exe after updates released January 14, 2025, or later. The error is otherwise silent and does not affect performance, functionality, or security; KB5055526 addressed the issue.⁴

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2025-04-11
Classification: Updates
Type: Cumulative update
Restart: Required
Replaces: KB5055526, KB5053603, KB5051979, KB5052819

+16 earlier
KB5049983, KB5048654, KB5046616, KB5047767, KB5044281, KB5042881, KB5041160, KB5040437, KB5041054, KB5039227, KB5037782, KB5036909, KB5037422, KB5035857, KB5034770, KB5034129
Replaced by: KB5059092

Version	Build	Channel
2022	20348.3561	General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 2022

389.9 MB

windows10.0-kb5058920-x64.msu Main update · KB5058920 SHA-1: 262c4540…3c2de0

Updated components

0 files changed since the previous update for the same versions.

Sources

Microsoft Support: KB5058920

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (4)

1. It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected. support.microsoft.com
2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
3. The issue has been resolved in Citrix Session Recording Agent version 2503, released on April 28, 2025, and newer versions. support.microsoft.com
4. This issue is addressed in KB5055526. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake