Microsoft has officially acknowledged that the April 2025 security update is preventing Windows 11 systems from upgrading to version 24H2 when using Windows Server Update Services (WSUS).
The issue affects organizations attempting to deploy the latest feature update across their enterprise environments.
According to Microsoft’s Windows Release Health Dashboard, devices that installed the April monthly security update (KB5055528) released on April 8, 2025, are encountering failures when attempting to download Windows 11 version 24H2 through WSUS.
The company confirmed this issue following widespread user reports on various online platforms, including Reddit and Microsoft’s community website.
“As part of this issue, the download of Windows 11 24H2 does not initiate or complete,” Microsoft explained in their support documentation.
“Windows updates log can show error code 0x80240069, and further logs might include text similar to ‘Service wuauserv has unexpectedly stopped'”.
The problem specifically impacts IT administrators who use WSUS to manage and distribute updates across their business networks.
WSUS allows administrators to defer, selectively approve, and schedule updates for specific devices or groups throughout an organization.
Microsoft has emphasized that home users are unlikely to experience these update problems since WSUS is typically deployed only in business and enterprise environments.
On May 5, 2025, Microsoft announced a mitigation using Known Issue Rollback (KIR) for enterprise-managed devices. IT administrators can resolve the issue by installing and configuring a special Group Policy available for download.
The company has provided two separate packages for Windows 11 version 23H2 and Windows 11 version 22H2 systems.
The special Group Policy can be found in Computer Configuration > Administrative Templates > Group Policy name after installation.
Detailed instructions for deploying and configuring these special Group Policies are available in Microsoft’s documentation on how to use Group Policy to deploy a Known Issue Rollback.
For administrators who prefer an alternative approach, a registry-based workaround has also been discovered. This involves creating a .reg file with specific entries to modify the Windows registry with administrator permissions.
Microsoft is continuing to investigate the root cause of the problem and has promised to provide additional updates when more information becomes available.
The issue affects client platforms Windows 11 version 23H2 and Windows 11 version 22H2, but no server platforms are impacted.
The next regular patch cycle is expected on May 13, 2025, which may deliver a permanent fix for this issue.
Microsoft has pushed out an emergency, out-of-band Windows 11 update after its September Patch Tuesday…
CDR is the runtime, real-time half of cloud security: while CSPM tells you what’s misconfigured,…
Your SaaS estate M365, Salesforce, Workday, Slack, hundreds of others is a sprawl of misconfigurations,…
DSPM finds sensitive data you didn’t know you had, classifies it, maps who can reach…
Open-source packages are meant to save developers time. In the GemStuffer campaign, that trust became…
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the…