The Update BureauWindows 10 Enterprise LTSC 2021 · Release Health
Known issues in Windows 10 Enterprise LTSC 2021
Problems Microsoft has confirmed for this version, from its official release health notes. 14 still open or mitigated.
Active known issues
Open & Mitigated-
Apps might become unresponsive when saving files to cloud-based storage
Some apps might freeze or show errors when opening or saving files in cloud storage. Outlook might also hang when PST files are stored on OneDrive.
How to apply the workaround WorkaroundKB5078131 addresses this issue.
-
SMBv1 protocol connectivity
After KB5065429, shared files and folders might be unreachable over SMBv1 on NetBIOS over TCP/IP. The issue can affect a client or server with the September 2025 security update; SMBv2 and SMBv3 are not affected. KB5066198 resolves it.
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Defer KB5065429 on affected systems until a fix is released.
-
Update delay with deferral policies
Some devices in organizations using quality-update deferral policies might receive the June 2025 security update later than expected because its metadata timestamp is June 20, 2025, although it was released on June 10. This affects update timing, not quality or applicability.
How to apply the workaround WorkaroundOrganizations using Windows Autopatch can create an expedite policy; otherwise, admins can adjust deployment rings or deferral settings to reduce the delay.
Step-by-step workaround instructionsShow steps Hide steps2 stepsStep-by-step procedure- If the organization uses Windows Autopatch, create an expedite policy to bypass deferral settings and deliver the update immediately.
- Alternatively, adjust deployment rings or deferral configurations to reduce the delay window.
-
Noto fonts
CJK text might look blurry or unclear at 96 DPI in Chromium-based browsers, including Microsoft Edge and Google Chrome. Increasing display scaling improves clarity.
How to apply the workaround WorkaroundIncrease display scaling to improve clarity; users can also report Noto CJK font issues through Google's GitHub repository.
-
Noto fonts issue
CJK text might look blurry in Chromium-based browsers at 96 DPI (100% scaling).
How to apply the workaround WorkaroundIncrease display scaling to improve text clarity.
-
Microsoft Copilot
On some devices, Microsoft Copilot might be removed and unpinned from the taskbar. Microsoft says the issue is fixed and affected devices are being restored.
How to apply the workaround WorkaroundReinstall the app from the Microsoft Store and pin it to the taskbar.
-
Open Secure Shell service
On some devices, the Open Secure Shell service might fail to start, blocking SSH connections. Microsoft says it is investigating whether Home or Pro devices are affected.
How to apply the workaround WorkaroundThe page says KB5052077 addresses this issue.
-
USB Printer Issue
Some USB-connected dual-mode printers might print random text and data, often starting with “POST /ipp/print HTTP/1.1”. This is more likely when the printer is turned on or reconnected.
How to apply the workaround WorkaroundThe page says KB5053643 addresses this issue.
-
System Guard Runtime Monitor Broker service
Event Viewer might show a System Guard Runtime Monitor Broker service error on devices with updates released January 14, 2025, or later. The error should not affect performance, features, or device security; KB5055612 addresses it.
How to apply the workaround WorkaroundDo not manually start or configure the service, or uninstall or remove it.
-
Citrix
Organizations with Citrix Session Recording Agent 2411 might see the January 2025 security update fail and roll back. Home users are not expected to be affected.
How to apply the workaround WorkaroundInstall Citrix Session Recording Agent version 2503 or newer; Citrix released version 2503 on April 28, 2025.
-
After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device
A Windows-and-Linux dual-boot device might fail to start Linux and show a Secure Boot policy violation. The September 2024 update and later updates do not contain the settings that caused the issue; later updates include additional improvements.
How to apply the workaround WorkaroundInstall the September 2024 Windows security update or a later update. Dual-boot devices need no additional steps after installing one of those updates.
-
After installing KB5036892, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
After installing KB5036892, changing a user account profile picture might fail with error 0x80070520. Microsoft says the issue has very limited or no impact for this Windows version.
How to apply the workaround WorkaroundContact Windows support if you encounter the issue.
-
Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen
Copilot in Windows (in preview) is not supported when the taskbar is positioned vertically on the left or right side of the screen.
How to apply the workaround WorkaroundWait for the new Copilot experience, which is gradually rolling out to devices with KB5039299 or later; it may arrive over the next few months.
-
Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Window…
On devices using more than one monitor, desktop icons might move between monitors or become misaligned when using Copilot in Windows (in preview).
How to apply the workaround WorkaroundWait for the new Copilot experience, which is gradually rolling out to devices with KB5039299 or later; it may arrive over the next few months.
Recently resolved
Fixed in latest updates-
USB Audio Class 1.0 devices with error Code 10 or no output
Some USB Audio Class 1.0 devices might show Code 10, produce no sound, or have unresponsive volume controls or sound settings. KB5131085 resolves the remaining symptoms; KB5129238 resolved the 8-channel and 3D audio symptoms earlier.
How to apply the workaround WorkaroundFor 8-channel or 3D audio problems, some customers reported restoring sound by switching to 2-channel mode.
-
File History might stop working after installing September 2026 Windows update
Some people using File History might be unable to create or update backups. A connected backup drive might still appear to need reconnecting, and old files might show no previous version.
Resolution Fixed in KB5126651Install KB5126651 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Remote Desktop Services might stop responding after September 2026 security update
Some organizations might see Remote Desktop connections fail, sign-in problems, or servers hang. KB5129239 resolves this issue.
Resolution Fixed in KB5129239Install KB5129239 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key
Some devices might ask for the BitLocker recovery key on the first restart after installing KB5082200. The issue affects devices with a specific BitLocker and PCR7 configuration and is addressed by KB5122878.
How to apply the workaround Group PolicyRemoving the policy lets BitLocker use the Windows-selected default PCR profile.
Step-by-step instructions, command & download kitShow steps & kit Hide steps & kit3 steps cmd.exe · Administrator Instructions (.txt)Step-by-step procedure- In Group Policy Editor or Group Policy Management Console, set
Configure TPM platform validation profile for native UEFI firmware configurationstoNot Configured. - Run
gpupdate /forceto apply the policy change. - If BitLocker is enabled on the C: drive, suspend it and then resume it to update the bindings.
> gpupdate /force> manage-bde -protectors -disable C:> manage-bde -protectors -enable C:
- In Group Policy Editor or Group Policy Management Console, set
-
OneDrive shortcut in file explorer might not work in administrator mode
The OneDrive shortcut might not work in File Explorer when it runs as administrator. KB5099538 resolves this issue.
Resolution Fixed in KB5099535Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Deleting from recycle bin displays an internal file name
The confirmation dialog might show an internal file name when you permanently delete one item from the Recycle Bin. KB5099538 resolves this issue.
Resolution Fixed in KB5099535Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Microsoft Office applications might fail to open from certain third-party apps
Some third-party apps might fail to open Microsoft Office apps or documents. KB5099538 resolves this issue.
Resolution Fixed in KB5099535Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Remote Desktop security warnings might not display correctly
With multiple monitors set to different display scaling, the Remote Desktop security warning might show overlapping text or partially hidden buttons. Updates released on and after May 12, 2026, such as KB5087538, resolve the issue.
Resolution Fixed in KB5087538Install KB5087538 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Some devices with Virtual Secure Mode enabled might fail to shut down or hibernate
Some PCs with Virtual Secure Mode enabled might restart instead of shutting down or hibernating. KB5075912 addresses this issue.
Resolution Fixed in KB5075904Install KB5075904 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Connection and authentication failures in Azure Virtual Desktop and Windows 365
Credential prompts for some Azure Virtual Desktop and Windows 365 connections failed. KB5077795 or a later update resolves the issue.
Resolution Fixed in KB5077795Install KB5077795 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Message Queuing (MSMQ)
In enterprise or managed environments, MSMQ queues could become inactive, IIS sites could fail with resource errors, and applications could be unable to write to queues. The issue was resolved by KB5074976 and later out-of-band updates.
Resolution Fixed in KB5074976Install KB5074976 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
An incorrect "End of Support" message might appear in Settings
On Windows 10, version 22H2 Pro, Education, or Enterprise editions enrolled in ESU with an ESU product key, and on Enterprise LTSC 2021 and IoT Enterprise LTSC 2021, Settings might incorrectly say that Windows has reached end of support. The issue affects only the displayed message and is resolved by KB5068781.
Resolution Fixed in KB5068781Install KB5068781 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
This update might fail to install with error 0x800f0922
On some commercial Windows 10 ESU devices activated through Windows subscription activation in the Microsoft 365 admin center, KB5068781 might fail to install with error 0x800f0922. Installing KB5072653 resolves the issue and allows deployment of KB5068781.
Resolution Fixed in KB5072653Install KB5072653 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Autopilot Enrollment Status Page (ESP)
On Windows 10, version 22H2 build 19045.6332, the Autopilot Enrollment Status Page might not load during setup. Users might reach the desktop before policies and apps are installed. KB5066198 resolves this issue.
Resolution Fixed in KB5066198Install KB5066198 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Unexpected User Account Control (UAC) prompt when doing MSI repair operations
Standard users might see unexpected User Account Control (UAC) prompts during some MSI repair and related operations. KB5065429 resolves this unexpected-prompt issue; it does not mean that all MSI repair prompts are removed, because the security change requires administrator credentials for these operations.
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Network Device Interface streaming performance issue
Using Network Device Interface (NDI) to stream or transfer feeds between PCs might cause delays or uneven audio and video performance, especially with Display Capture enabled on the source PC. KB5065429 resolves this issue.
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Reset and recovery issue
Resetting or recovering a device might fail when using Reset my PC, Fix problems using Windows Update, or RemoteWipe CSP. KB5063709 resolves this issue.
Resolution Fixed in KB5066187Install KB5066187 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Microsoft Changjie Input Method Editor
The Microsoft Changjie IME for Traditional Chinese might fail to form or select words, ignore the spacebar, show incorrect output, or display its conversion candidate window incorrectly. This issue is resolved by updates released on and after August 12, 2025, including KB5063877.
Resolution Fixed in KB5063871Install KB5063871 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Windows Emoji Panel
Windows Emoji Panel search might fail even though the panel still opens and emojis can be selected manually. This issue is resolved by updates released on and after July 22, 2025, including KB5062649.
Resolution Fixed in KB5062649Install KB5062649 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Surface Hub v1
After installing KB5060533 on Windows 10, version 22H2, Surface Hub v1 devices might fail to start with a Secure Boot Violation error. Surface Hub 2S and Surface Hub 3 are not affected. This issue is fixed by KB5063159; Surface Hub v1 users should install that update instead.
Resolution Fixed in KB5063159Install KB5063159 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
BitLocker recovery screen
On devices with Intel TXT enabled on 10th-generation or later Intel vPro processors, KB5058379 might cause lsass.exe to terminate unexpectedly and trigger Automatic Repair. With BitLocker enabled, this can lead to a recovery-key prompt or, in some cases, a reboot loop. KB5061768 and later updates resolve the issue; consumer devices are less likely to be affected.
Resolution Fixed in KB5061768Install KB5061768 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
The Windows Event Viewer might display an error related to SgrmBroker.exe, on devices that have installed Windows updates released January 14, 2025, or later
Event Viewer might show a System event 7023 error related to SgrmBroker.exe after installing updates released January 14, 2025, or later. It does not affect device performance, functionality, or security, and KB5055612 addresses it.
Resolution Fixed in KB5055612Install KB5055612 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections
On a limited number of enterprise, IoT, and education devices, the OpenSSH service might fail to start and block SSH connections. KB5052077 addresses the issue.
Resolution Fixed in KB5052077Install KB5052077 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After installing this security update, you might experience issues with USB audio devices
USB audio devices might stop working after this security update, preventing audio playback. The issue is more likely with USB 1.0 audio driver-based DACs and is addressed by KB5050081.
Resolution Fixed in KB5052000Install KB5052000 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After installing this security update, you might experience issues with USB cameras
After this security update, a device might not recognize that its USB camera is on. KB5050081 addresses the issue.
Resolution Fixed in KB5050081Install KB5050081 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Devices that have certain Citrix components installed might be unable to complete installation of the January 2025 Windows security update
Devices with Citrix Session Recording Agent version 2411 might fail to complete the January 2025 security update and revert to their previous updates. Citrix Session Recording Agent version 2503 or newer resolves the issue.
Resolution ResolvedMicrosoft has resolved this issue in a subsequent update. No manual workaround is required after updating.
-
After installing KB5043131 or later, you might observe that apps such as Quick Assist, Microsoft Teams, Windows Narrator, etc
Apps that request
UIAccess=truemight fail to start for non-admin users; KB5046613 addresses the issue.Resolution Fixed in KB5046613Install KB5046613 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After installing KB5040525, you might experience a black screen when you login to Azure Virtual Desktop (AVD)
After installing KB5040525, some Azure Virtual Desktop users might see a black screen at sign-in and be unable to log out. KB5045594 or a later update, together with one of the resolution options in KB5048864, resolves the issue; both actions are required.
Resolution Fixed in KB5045594Install KB5045594 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After installing KB5040525, or subsequent updates, a small subset of Azure Virtual Desktop customers using multi-session hosts (AVD) may experience the following issues: - An extended 10-to-30-minu…
A small subset of Azure Virtual Desktop multi-session customers might see a 10-to-30-minute black screen after sign-in and single sign-on failures in Outlook or Teams. KB5045594 or a later update plus an option from KB5048864 is required to resolve the issue.
How to apply the workaround WorkaroundInstall KB5045594 or a later update and apply one of the options in KB5048864; both actions are required.
-
After installing the July 9, 2024, Windows security update, you might see a [BitLocker recovery](https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recov…
After installing the July 9, 2024 security update, a BitLocker recovery screen might appear when you start the device. This is more likely if Device Encryption is enabled in Settings; you might need the recovery key from your Microsoft account. KB5041578 resolves the issue.
Resolution Fixed in KB5041580Install KB5041580 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After you install KB5034203 (dated 01/23/2024) or later updates, some Windows devices that use the [DHCP Option 235](https://learn.microsoft.com/tr…
Some devices using DHCP Option 235 to find Microsoft Connected Cache nodes might be unable to use those nodes and instead download updates and apps from the public internet. This issue is resolved by KB5040525.
Resolution Fixed in KB5040525Install KB5040525 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Certain apps might display an "Open With" dialog box asking, "How do you want to open this file?"
Certain apps might show an “Open With” dialog instead of running a task selected from the app's taskbar or Start menu icon. KB5039299 addresses this issue.
Resolution Fixed in KB5039299Install KB5039299 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later
VPN connections might fail after installing the April 9, 2024 update or later updates. KB5037768 addresses this issue.
Resolution Fixed in KB5037768Install KB5037768 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Using the FixedDrivesEncryptionType or [SystemDrivesEncryptionType](https://nam06.safelinks.protec…
In some MDM environments, the BitLocker “Require Device Encryption” status might incorrectly show error 65000 when the specified drive-encryption policies are enabled and set to full encryption or used space only. KB5034203 addresses this reporting issue; drive encryption and reporting of other issues are not affected.
Resolution Fixed in KB5034203Install KB5034203 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
No known issue matches these filters.