{"id":23242,"date":"2022-02-04T06:57:51","date_gmt":"2022-02-04T05:57:51","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=23242"},"modified":"2022-02-04T06:57:51","modified_gmt":"2022-02-04T05:57:51","slug":"windows-server-2019-is-update-kb5010791-causing-a-boot-loop","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/02\/04\/windows-server-2019-is-update-kb5010791-causing-a-boot-loop\/","title":{"rendered":"Windows Server 2019: Is Update KB5010791 causing a Boot Loop?"},"content":{"rendered":"

\"Update\"[German<\/a>]Question for the administrators of Windows Server 2019 systems: What are your experiences regarding the January 11, 2022 updates and boot loops. On Domain Controllers, the boot loops are well known, but Microsoft has released out-of-band updates with a fix. But I have now received reports that a Windows Server 2019 running stably so far with update KB5009557 had forced the servers into a boot loop with update KB5010791.<\/p>\n

Windows Server Boot Loop<\/h2>\n

\"\"The security updates of January 11, 2022 has caused serious issues. My blog post Microsoft Microsoft Januar 2022 Patchday Revisions (2022\/01\/14)<\/a> provides an overview of these issues – details can be found in the posts linked at the end of the article, if applicable. <\/p>\n

Specifically on Windows Server, domain controllers were forced into a boot loop (see Windows Server: January 2022 security updates are causing DC boot loop<\/a>). As of Jan. 17 and Jan. 18, 2022, Microsoft then submitted out-of-band updates to address the issues. For Windows Server 2019, out-of-band update KB5010791 has been available since Jan. 18, 2022 (see Out-of-band Updates for Windows Server 2019 fixes Jan. 2022 Patch day issues (Jan. 18, 2022)<\/a>). <\/p>\n

However, these updates then did not fix all patch day issues that occurred. It's also stupid that some of the updates were not offered via Windows Update – on the other hand, they were installed automatically on Windows machines despite optional classification. In the blog post Status of January 2022 security updates from Microsoft (2022\/01\/25)<\/a>. <\/p>\n

Boot loop due to update KB5010791<\/h2>\n

Now German blog reader Holger M. emailed me on February 2, 2022, reporting a boot loop due to update KB5010791 on their Windows Server 2019 instances. Holger wrote: <\/p>\n

We applied the KB5010791 to all Windows Server 2019 last night. The update KB5009557 [dated 11\/1\/2022] was running on these servers, except for the DCs, since 17\/01 without any problems. Today around 11am the file server went into a boot loop and booted 6 times in a few minutes interval. KB5010791 seems to be faulty again …<\/p><\/blockquote>\n

So means that the original update KB5009557 from 11\/1\/2022 ran without problems on Windows Server 2019, unless it was acting as a domain controller. In contrast, the fix update KB5010791 from 1\/18\/2022 (see Out-of-band Updates for Windows Server 2019 fixes Jan. 2022 Patch day issues (Jan. 18, 2022)<\/a>) causes a boot loop on this server. Holger mentioned several machines running Windows Server 2019 and sent me the following excerpt from the error message:  <\/p>\n

\n
Protokollname: Application\nQuelle:     Microsoft-Windows-Wininit\nDatum:    02.02.2022 11:23:06\nEreignis-ID:   1015\nAufgabenkategorie:Keine\nEbene:         Fehler\nSchl\u00fcsselw\u00f6rter: Klassisch\nBenutzer:      Nicht zutreffend\nComputer:      *****\nBeschreibung:\n\nEin kritischer Systemprozess C:\\Windows\\system32\\lsass.exe ist fehlgeschlagen mit den Statuscode c0000005. Der Computer muss neu gestartet werden.\nEreignis-XML:\n<Event xmlns=\"http:\/\/schemas.microsoft.com\/win\/2004\/08\/events\/event\">\n<System>\n<Provider Name=\"Microsoft-Windows-Wininit\" Guid=\"{206f6dea-d3c5-4d10-bc72-989f03c8b84b}\" EventSourceName=\"Wininit\" \/>\n<EventID Qualifiers=\"49152\">1015<\/EventID>\n<Version>0<\/Version>\n<Level>2<\/Level>\n<Task>0<\/Task>\n<Opcode>0<\/Opcode>\n<Keywords>0x80000000000000<\/Keywords>\n<TimeCreated SystemTime=\"2022-02-02T10:23:06.826509700Z\" \/>    <EventRecordID>23987<\/EventRecordID>\n<Correlation \/>\n<Execution ProcessID=\"0\" ThreadID=\"0\" \/>\n<Channel>Application<\/Channel>\n<Computer>***<\/Computer>\n<Security \/>\n<\/System>\n<EventData>\n<Data>C:\\Windows\\system32\\lsass.exe<\/Data>\n<Data>c0000005<\/Data>\n<\/EventData>\n<\/Event>\n<\/pre>\n<\/blockquote>\n
The event log (it's in German) has the following entries regarding the error: <\/p>\n
\n
Protokollname: Application\nQuelle:        Application Error\nDatum:         02.02.2022 11:23:04\nEreignis-ID:   1000\nAufgabenkategorie: (100)\nEbene:         Fehler\nSchl\u00fcsselw\u00f6rter: Klassisch\nBenutzer:      Nicht zutreffend\nComputer:      ****\n\nBeschreibung:\nName der fehlerhaften Anwendung: lsass.exe, Version: 10.0.17763.2213, Zeitstempel: 0xcb5bd01a\n\nName des fehlerhaften Moduls: msv1_0.DLL, Version: 10.0.17763.2458, Zeitstempel: 0xfa73c4ac\n\nAusnahmecode: 0xc0000005\nFehleroffset: 0x00000000000027e1\nID des fehlerhaften Prozesses: 0x2dc\n\nStartzeit der fehlerhaften Anwendung: 0x01d8181e8f68b510\nPfad der fehlerhaften Anwendung: C:\\Windows\\system32\\lsass.exe\nPfad des fehlerhaften Moduls: C:\\Windows\\system32\\msv1_0.DLL\nBerichtskennung: 1ea3bc96-f018-4f8b-b8da-839e5266bed0\n\nVollst\u00e4ndiger Name des fehlerhaften Pakets:\nAnwendungs-ID, die relativ zum fehlerhaften Paket ist:\nEreignis-XML:\n<Event xmlns=\"http:\/\/schemas.microsoft.com\/win\/2004\/08\/events\/event\"><System>\n<Provider Name=\"Application Error\" \/>\n<EventID Qualifiers=\"0\">1000<\/EventID>\n<Level>2<\/Level>\n<Task>100<\/Task>\n<Keywords>0x80000000000000<\/Keywords>\n<TimeCreated SystemTime=\"2022-02-02T10:23:04.998430300Z\" \/><EventRecordID>23985<\/EventRecordID>\n<Channel>Application<\/Channel>\n<Computer>****<\/Computer>\n<Security \/>\n<\/System>\n<EventData>\n<Data>lsass.exe<\/Data>\n<Data>10.0.17763.2213<\/Data>\n<Data>cb5bd01a<\/Data>\n<Data>msv1_0.DLL<\/Data>\n<Data>10.0.17763.2458<\/Data>\n<Data>fa73c4ac<\/Data>\n<Data>c0000005<\/Data>\n<Data>00000000000027e1<\/Data>\n<Data>2dc<\/Data>\n<Data>01d8181e8f68b510<\/Data>\n<Data>C:\\Windows\\system32\\lsass.exe<\/Data><Data>C:\\Windows\\system32\\msv1_0.DLL<\/Data>\n<Data>1ea3bc96-f018-4f8b-b8da-839e5266bed0<\/Data>\n<Data><\/Data>\n<Data><\/Data>\n<\/EventData>\n<\/Event><\/pre>\n<\/blockquote>\n
Further confirmations<\/h2>\n
In the meantime I have received further confirmations to my post<\/a> in a German Facebook admin group. Jan S. writes:  <\/p>\n
We experienced this error with a VM. Complete restore from backup helped …<\/p><\/blockquote>\n
And Patrick K. also made corresponding observations: <\/p>\n
Bootloop… Had this yesterday in a terminal farm..the whole thing has then built up to the point that 2 of the servers had to be reinstalled.<\/p><\/blockquote>\n
Anyone of you with similar experiences? <\/p>\n
Similar articles:
<\/strong>Patchday: Windows 8.1\/Server 2012 R2 Updates (January 11, 2022), boot loop reported<\/a>
Patchday: Windows 10 Updates (January 11, 2022)<\/a>
Patchday: Windows 11 Updates (January 11, 2022)<\/a>
Patchday: Updates for Windows 7\/Server 2008 R2 (January 11, 2022)<\/a><\/p>\n
Windows Server: January 2022 security updates are causing DC boot loop<\/a>
Windows VPN connections (L2TP over IPSEC) broken after January 2022 update<\/a>
Windows Server 2012\/R2: January 2022 Update KB5009586 bricks Hyper-V Host<\/a>
Microsoft patch day issues Jan. 2022: bugs confirmed, but updates not pulled<\/a><\/p>\n
Microsoft Microsoft Januar 2022 Patchday Revisions (2022\/01\/14)<\/a>
Windows Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)<\/a>
Windows 10\/Server: Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)<\/a>
Out-of-band Updates for Windows Server 2019 fixes Jan. 2022 Patch day issues (Jan. 18, 2022)<\/a>
Windows 7\/8.1; Server 2008R2\/2012R2: Out-of-band Updates with Fixes for Jan. 2022 Patch day Issues (2022\/01\/17)<\/a><\/p>\n
Review: Fix for Windows IPSec VPN Connection Issues<\/a>
Out-of-Band Updates for Windows (Jan. 17\/18, 2022) doesn't fixes ReFS Issues complete<\/a>
Review: Fix for Hyper-V Host Startup Problem in Windows (January 2022)<\/a><\/p>\n
Access lock bug caused by Microsoft Office updates (January 11, 2022)<\/a>
Windows 10: Outlook search broken again or fixed by Microsoft? (Jan. 2022)<\/a>
Status of January 2022 security updates from Microsoft (2022\/01\/25)<\/a>
Windows 10 \/ Windows Server Preview Update (Jan. 25, 2022)<\/a><\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
[German]Question for the administrators of Windows Server 2019 systems: What are your experiences regarding the January 11, 2022 updates and boot loops. On Domain Controllers, the boot loops are well known, but Microsoft has released out-of-band updates with a fix. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,22,2],"tags":[166,2700,195,1498],"class_list":["post-23242","post","type-post","status-publish","format-standard","hentry","category-issue","category-update","category-windows","tag-issues","tag-patchday-1-2022","tag-update","tag-windows-server-2019"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/23242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=23242"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/23242\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=23242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=23242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=23242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}