Share via


Resolved issues in Windows 10 Enterprise LTSC 2021

Find information on recently resolved issues for Windows 10 Enterprise LTSC 2021. To find a specific issue, use the search function on your browser (CTRL + F for Microsoft Edge). For immediate help with Windows update issues, click here if you are using a Windows device to open the Get Help app or go to support.microsoft.com. Follow @WindowsUpdate on X for Windows release health updates. If you are an IT administrator and want to programmatically get information from this page, use the Windows Updates API in Microsoft Graph.


Resolved issues

SummaryOriginating updateStatusDate resolved
The April 2025 Windows RE update might show as unsuccessful in Windows Update
Users might observe installation failure while trying to install the WinRE update which resolves after device restarts.
N/A
KB5057589
2025-04-08
Resolved
KB5063523
2025-07-08
10:00 PT
Windows 10 might repeatedly display the BitLocker recovery screen at startup
After installing the May 2025 update (KB5058379), Windows 10 might start to the BitLocker recovery screen.
OS Build 19044.5854
KB5058379
2025-05-13
Resolved
KB5061768
2025-05-19
10:00 PT
August 2024 security update might impact Linux boot in dual-boot setup devices
This issue might impact devices with dual-boot setup for Windows and Linux when SBAT setting is applied
OS Build 19044.4780
KB5041580
2024-08-13
Resolved
KB5058379
2025-05-13
10:00 PT
Devices might boot into BitLocker recovery with the July 2024 security update
This issue is more likely to affect devices that have the Device Encryption option enabled
OS Build 19044.4651
KB5040427
2024-07-09
Resolved
KB5041580
2024-08-13
10:00 PT
CrowdStrike issue impacting Windows endpoints causing an error message
Affected systems might restart repeatedly and require recovery operations in order to restore normal use.
N/A

Resolved External
2024-08-05
16:07 PT
Apps show "Open With" dialog when right-clicking on Taskbar or Start menu icons
You might experience this when right-clicking an app icon shown in your Taskbar or Start menu to execute a task.
OS Build 19044.4412
KB5037768
2024-05-14
Resolved
KB5040427
2024-07-09
10:00 PT

Issue details

May 2025

Windows 10 might repeatedly display the BitLocker recovery screen at startup

StatusOriginating updateHistory
Resolved KB5061768OS Build 19044.5854
KB5058379
2025-05-13
Resolved: 2025-05-19, 10:00 PT
Opened: 2025-05-16, 08:58 PT

We are aware of a known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. On these systems, installing the May 13, 2025, Windows security update (KB5058379) might cause lsass.exe to terminate unexpectedly, triggering an Automatic Repair. On devices with BitLocker enabled, BitLocker requires the input of your BitLocker recovery key to initiate the Automatic Repair.

Affected devices then enter one of two states:

  1. ​Some devices might make several attempts to install update KB5058379 before Startup Repair successfully rolls back to the previously installed update.
  2. ​Startup Repair might experience a failure that creates a reboot loop, which again initiates an Automatic Repair, returning the device to the BitLocker recovery screen.

Consumer devices typically do not use Intel vPro processors and are less likely to be impacted by this issue. This issue ONLY applies to the affected platforms listed below.

Additional symptoms reported on affected devices include:

  • ​Event ID 20 might appear in the Windows Event Viewer in the System event log, with the following text: "Installation Failure: Windows failed to install the following update with error 0x800F0845: 2025-05 Cumulative Update for Windows 10 22H2 for x64-based Systems (KB5058379)."
  • ​Event ID 1074 might appear in the System event log, with the text: "The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code -1073740791."

Resolution:

This issue was resolved in the out-of-band (OOB) update KB5061768, which is only available via the Microsoft Update Catalog.  If your organization uses the affected platforms and hasn’t yet deployed the May 13, 2025, Windows security update, or if KB5058379 failed to install, we recommend you apply this OOB update instead.

If your device has already installed the May 2025 Windows security update and is unable to start Windows:

  1. ​To start Windows, temporarily disable Intel VT for Direct I/O (also known as VTD or VTX) and Intel Trusted Execution Technology (TXT) in your BIOS / UEFI settings. This step will require entering your BitLocker recovery key.
  2. ​Install update KB5061768 via the Microsoft Update Catalog.
  3. ​After restarting Windows, return to your BIOS / UEFI settings and re-enable Intel VT for Direct I/O (also known as VTD or VTX) and TXT. (This step will require entering your BitLocker recovery key.)

Important: Microsoft Support doesn't have the ability to retrieve, provide, or recreate a lost BitLocker recovery key. For help finding your BitLocker recovery key, see Find your BitLocker recovery key.

Affected platforms:

  • ​Windows 10, versions 22H2; Windows 10 Enterprise LTSC 2021
  • ​Server: None
Back to top

April 2025

The April 2025 Windows RE update might show as unsuccessful in Windows Update

StatusOriginating updateHistory
Resolved KB5063523N/A
KB5057589
2025-04-08
Resolved: 2025-07-08, 10:00 PT
Opened: 2025-04-11, 17:03 PT

After installing the April 2025 Windows Recovery Environment update [KB5057589], you might see the following error message in the Windows Update settings page: 0x80070643 – ERROR_INSTALL_FAILURE. This error message is not accurate and does not impact the update or device functionality. The Windows Recovery Environment (WinRE) is a recovery environment that can repair common causes of unbootable operating systems.

This error is observed when the device installs the WinRE update when there is another update in a pending reboot state. Although the error message suggests the update did not complete, the WinRE update is typically applied successfully after the device restarts. Windows Update might continue to display the update as failed until the next daily scan, at which point the update is no longer offered and the failure message is cleared automatically.

Resolution:

The ERROR_INSTALL_FAILURE error message that was previously observed with KB5057589 installed before 2 PM PT on April 21, 2025 has been resolved with the Windows update released July 8, 2025 (KB5063523). We recommend you install the latest update for your device as it contains important improvements and issue resolutions. 

Please note: This update does not remove the incorrect error message which might still appear in the Windows Update History page. 

Users who installed KB5057589 after 2 PM PT on April 21, 2025, should not observe the incorrect error message about the install failure. If the update is already installed, it will not be offered again, and the status of this update can be verified with the Dism /Online /Get-Packages command. 

Affected platforms:

  • ​Client: Windows 10, version 22H2; Windows 10, version 21H2
  • ​Server: Windows Server 2022
Back to top

August 2024

August 2024 security update might impact Linux boot in dual-boot setup devices

StatusOriginating updateHistory
Resolved KB5058379OS Build 19044.4780
KB5041580
2024-08-13
Resolved: 2025-05-13, 10:00 PT
Opened: 2024-08-21, 18:33 PT

After installing the August 2024 Windows security update, (KB5041580) or the August 2024 preview update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device. Resulting from this issue, your device might fail to boot Linux and show the error message “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.”

The August 2024 Windows security and preview updates apply a Secure Boot Advanced Targeting (SBAT) setting to devices that run Windows to block old, vulnerable boot managers. This SBAT update will not be applied to devices where dual booting is detected. On some devices, the dual-boot detection did not detect some customized methods of dual-booting and applied the SBAT value when it should not have been applied.

IMPORTANT: This known issue only occurs with the installation of the August 2024 security and preview updates. The September 2024 security update and later updates do not contain the settings that caused this issue.

Resolution: This issue was resolved by Windows updates released May 13, 2025 (KB5058379), and later. We recommend you install the latest update for your device as it contains important improvements and issue resolutions, including this one.

Note: On Windows-only systems, after installing the September 2024 or later updates, you can set the registry key documented in CVE-2022-2601 and CVE-2023-40547 to ensure the SBAT security update is applied. On systems that dual-boot Linux and Windows, there are no additional steps necessary after installing the September 2024 or later updates.

Affected platforms:

  • ​Client: Windows 11, version 23H2; Windows 11, version 22H2; Windows 11, version 21H2; Windows 10, version 22H2; Windows 10, version 21H2; Windows 10 Enterprise 2015 LTSB
  • ​Server: Windows Server 2022; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012
Back to top

July 2024

Devices might boot into BitLocker recovery with the July 2024 security update

StatusOriginating updateHistory
Resolved KB5041580OS Build 19044.4651
KB5040427
2024-07-09
Resolved: 2024-08-13, 10:00 PT
Opened: 2024-07-23, 13:57 PT

After installing the July 2024 Windows security update, released July 9, 2024 (KB5040427), you might see a BitLocker recovery screen upon booting your device. This screen does not commonly appear after a Windows update. You are more likely to face this issue if you have the Device Encryption option enabled in Settings under Privacy & Security -> Device encryption. Resulting from this issue, you might be prompted to enter the recovery key from your Microsoft account to unlock your drive.

Resolution: This issue was resolved by Windows updates released August 13, 2024 (KB5041580), and later. We recommend you install the latest update for your device as it contains important improvements and issue resolutions, including this one.

If you install an update released August 13, 2024 (KB5041580) or later, you do not need to use a workaround for this issue. If you are using an update released before August 13, 2024, and have this issue, your device should proceed to start up normally from the BitLocker recovery screen once the recovery key has been entered. You can retrieve the recovery key by logging into the BitLocker recovery screen portal with your Microsoft account. Detailed steps for finding the recovery key are listed here: Finding your BitLocker recovery key in Windows.

Affected platforms:

  • ​Client: Windows 11 version 23H2, Windows 11 version 22H2, Windows 11 version 21H2, Windows 10 version 22H2, Windows 10 version 21H2, Windows 10 Enterprise 2015 LTSB
  • ​Server: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008
Back to top

CrowdStrike issue impacting Windows endpoints causing an error message

StatusOriginating updateHistory
Resolved ExternalN/A

Last updated: 2024-08-05, 16:07 PT
Opened: 2024-07-19, 07:30 PT

Microsoft has identified an issue impacting Windows endpoints which are running the CrowdStrike Falcon agent, developed by CrowdStrike Holdings. Following updates released and delivered by CrowdStrike on July 18, 2024, devices running the Falcon agent may encounter an error message on a blue screen and experience a continual restarting state.

Affected systems might restart repeatedly and require recovery operations in order to restore normal use.

Updated July 25, 2024: Microsoft released further guidance on Windows resiliency: Best practices and the path forward. Read more about how we are working in close cooperation to improve resiliency across the Windows ecosystem and explore best practices you can use to support resiliency in your organization.

Updated July 22, 2024: Microsoft has released a third mitigation option for this issue impacting Windows clients and servers. If devices are unable to recover with the two previous options mentioned below, IT admins can use PXE to remediate. See the revised New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints for detailed instructions on prerequisites and configurations to use PXE Recovery.

Updated July 21, 2024: As a follow-up to the CrowdStrike Falcon agent issue impacting Windows clients and servers, Microsoft has released an updated recovery tool with two repair options to help IT admins expedite the repair process. Based on customer feedback, this new release includes a new option for recovery using safe boot, the option to generate ISO or USB, a fix for ADK detection when the Windows Driver Kit is installed, and a fix for the USB disk size check. See the revised New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints for detailed instructions on using the signed Microsoft Recovery Tool.

Updated July 20, 2024: Microsoft has released KB5042426, which contains step-by-step guidance for Windows Servers hosted on-premises that are running the CrowdStrike Falcon agent and encountering a 0x50 or 0x7E error message on a blue screen. We will continue to work with CrowdStrike to provide the most up-to-date information available on this issue. 

A new USB Recovery Tool is available to help IT admins expedite the repair process. The new tool can be found in the Microsoft Download Center. Read more about the new recovery tool and usage instructions at New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints.

Updated July 19, 2024: A new Knowledge Base article, KB5042421, with additional step-by-step guidance for Windows 11 and Windows 10 clients is now available. We will continue to work with CrowdStrike to provide up-to-date mitigation information as it becomes available.

To mitigate this issue ahead of additional resolution options, you can follow these steps:

  1. ​Start Windows into Safe Mode or the Windows Recovery Environment.
  2. ​Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
  3. ​Locate the file matching “C-00000291*.sys” and delete it.
  4. ​Restart the device.
  5. ​Recovery of systems requires a Bitlocker key in some cases.

For Windows Virtual Machines running on Azure follow the mitigation steps in Azure status.

Additional details from CrowdStrike are available here: Statement on Windows Sensor Update - CrowdStrike Blog.

Affected platforms:

  • ​Client: Windows 11, version 23H2; Windows 11, version 22H2; Windows 11, version 21H2; Windows 10, version 22H2; Windows 10, version 21H2; Windows 10 Enterprise LTSC 2019
  • ​Server: Windows Server 2022; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1; Windows Server 2008 SP2
Back to top

June 2024

Apps show "Open With" dialog when right-clicking on Taskbar or Start menu icons

StatusOriginating updateHistory
Resolved KB5040427OS Build 19044.4412
KB5037768
2024-05-14
Resolved: 2024-07-09, 10:00 PT
Opened: 2024-06-17, 09:45 PT

Following installation of the Windows update released April 23, 2024 (KB5037768)and updates released after that, certain apps might display an "Open With" dialog box asking, "How do you want to open this file?". You might experience this issue when you place your mouse on an app icon shown in your Taskbar or Start menu and right-click on the app to execute a task in that app. Resulting from this, you might see the “Open With” dialog box instead of the execution of the selected task.

This issue was reported by Teams, new Outlook for Windows, and Snip & Sketch users. This issue can also affect other applications attempting to right-click on its icon to find a context menu with a list of tasks.

Workaround: Although the "Open With" dialog prevents the use of the tasks available from the right-click context menu, it's likely that those same operations can be performed by making the application interface visible, and navigating the application interface and menus.

Resolution: This issue was resolved in updates released July 9, 2024 (KB5040427) and later. We recommend you install the latest security update for your device. It contains important improvements and issue resolutions, including this one.

Affected platforms:

  • ​Client: Windows 10, version 22H2; Windows 10, version 21H2
  • ​Server: None
Back to top

Report a problem with Windows updates

To report an issue to Microsoft at any time, use the Feedback Hub app. To learn more, see Send feedback to Microsoft with the Feedback Hub app.

Need help with Windows updates?

Search, browse, or ask a question on the Microsoft Support Community. If you are an IT pro supporting an organization, visit Windows release health on the Microsoft 365 admin center for additional details.

For direct help with your home PC, use the Get Help app in Windows or contact Microsoft Support. Organizations can request immediate support through Support for business.

View this site in your language

This site is available in 11 languages: English, Chinese Traditional, Chinese Simplified, French (France), German, Italian, Japanese, Korean, Portuguese (Brazil), Russian, and Spanish (Spain). All text will appear in English if your browser default language is not one of the 11 supported languages. To manually change the display language, scroll down to the bottom of this page, click on the current language displayed on the bottom left of the page, and select one of the 11 supported languages from the list.