The Update BureauKB5058921: Cumulative update for Windows Server, version 2016, April 2025. Audit policy status display issue addressed
In short
Addresses a display issue where enabled logon and logoff auditing can appear disabled in local policy settings on Windows Server 2016.
Does it affect you? Applies to: Devices running Windows Server 2016.
Microsoft publishes separate notes for this KB for Windows 10.
What changes
Fix 1 change
Active Directory Group Policy
Verified in package
-
Enabled logon and logoff auditing can appear disabled in local policy settings; this update addresses the display issue.1
Addresses the issue where Audit Logon/Logoff events in local policy might not show as enabled, even when they are enabled and working as expected. The Local Group Policy Editor or Local Security Policy might show "Audit logon events" with Security Setting "No auditing".
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-04-11
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5055521, KB5053594, KB5052006, KB5049993
- Replaced by
- KB5058383
| Version | Build | Channel |
|---|---|---|
| 2016 | 14393.7973 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
x64
2016
1.6 GB
Updated components
168 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Secure Boot | 5 |
| Graphics and display | 4 |
| Hyper-V and virtualization | 4 |
| Search | 4 |
| File Explorer and shell | 3 |
| Kernel | 3 |
| Networking | 3 |
| Settings | 2 |
| Security and sign-in | 1 |
| Storage and file systems | 1 |
Verified in package: changed files confirm Active Directory Group Policy.
Sources
Updated
Cited passages from Microsoft's official notes (1)
-
1.
It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake