Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Out-of-band update
Out-of-band

KB5091572

KB5091572: Cumulative update for Windows Server, version 2016, April 2026. PAM domain controllers recover from startup failures

In short

Fixes startup problems on Windows Server 2016 domain controllers with multi-domain forests using PAM after the April 14 update. It is available only from the Update Catalog.

Does it affect you? Applies to: Devices running Windows Server 2016. The update package is for x64 systems.

Build
14393.9062
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

Domain controllers (known issue)

  • Fixes startup problems that could affect domain controllers in multi-domain forests using PAM after installing the April 14, 2026 security update and restarting.1
    The issue could cause LSASS to stop responding, leading to repeated restarts and preventing authentication and directory services.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5087537

    Remote Desktop security warnings might not display correctly

    The security warning shown when opening Remote Desktop files might display incorrectly, with overlapping text or partly hidden buttons, when multiple monitors use different display scaling settings. Updates released on and after May 12, 2026, such as KB5087537, resolve this issue.2

    Resolution Fixed in KB5087537

    Install KB5087537 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-04-19
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5082198, KB5078938, KB5075999, KB5073722
+18 earlier KB5074974, KB5071543, KB5068864, KB5070882, KB5066836, KB5065427, KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5087537
VersionBuildChannel
2016 14393.9062 General availability

Security

No vulnerabilities are listed for this update.

Updated components

14 files changed since the previous update for the same versions.

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. Fixed: After installing the April 14, 2026, (KB5082198) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. support.microsoft.com
  2. 2. After installing this update, the security warning that appears when opening Remote Desktop (RDP) files might not display correctly in some cases. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake