Microsoft has addressed a significant issue affecting Windows Server 2025 that rendered certain domain controllers unreachable following a restart. This malfunction caused disruptions in applications and services reliant on these servers.
In April, Microsoft acknowledged that the problem stemmed from affected servers reverting to the default firewall profile instead of the designated domain network profile after a restart. Consequently, these servers struggled to manage network traffic correctly, making them inaccessible to other devices on the network or allowing access through normally blocked network ports.
The company has released a fix in the KB5060842 security update as part of the June 2025 Patch Tuesday updates. This update restores proper functionality to Windows Server 2025 domain controllers by addressing the network traffic processing issues that arose post-restart.
For administrators who cannot immediately apply this update, Microsoft has provided a temporary workaround. By using the PowerShell command Restart-NetAdapter, they can manually restart the network adapter on the affected servers. However, this solution must be repeated after each server restart until the official update is installed, as the issues reoccur with each reboot.
Additionally, Microsoft has fixed another problem related to Windows Hello, where some users were unable to log in after applying a previous security update (KB5055523) from April 2025. Another issue linked to the same update, impacting authentication for systems using Credential Guard and the Kerberos PKINIT pre-authentication protocol, was resolved earlier in April.
For more information about Microsoft and Windows Server 2025, you can visit the related links below: