Ethical Hacking News
Microsoft confirms patching issues in restricted Windows networks, urging IT administrators to install group policies using Known Issue Rollback (KIR) to resolve problems with Windows Update in air-gapped and firewalled networks.
Affected devices may be unable to download updates released after February due to changes in download timeout requirements.The issue affects systems running in fully isolated or strictly firewalled networks.This problem does not relate to device integrity, but rather to its ability to download updates from the internet.Microsoft has provided an alternative solution using Known Issue Rollback (KIR) group policies.IT administrators can implement KIR group policies to resolve the issue.
Microsoft has recently confirmed that customers in restricted network environments may encounter issues with Windows Update, specifically after installing the January 2026 optional non-security preview updates. This issue affects systems running in fully isolated, air-gapped networks or strictly firewalled networks.
According to a recent statement from Microsoft, affected devices may be able to download the February monthly Windows security update, but then become unable to use the Windows Update settings to download updates released in March, April, or later months. The issue is attributed to changes in download timeout requirements when starting download operations.
This problem does not relate to device integrity or the device's ability to install Windows updates, but rather to its ability to download updates from the internet via the Windows Update page under Settings. As a result, IT administrators may encounter difficulties when attempting to update their systems through standard means.
However, Microsoft has provided an alternative solution to this issue. By installing one of the following group policies using Known Issue Rollback (KIR), which is a Windows feature that reverses buggy updates delivered via Windows Update, admins can resolve this problem. The required group policies are:
- Windows 11 26H1 KB5083806
- Windows 11 24H2 and Windows Server 2025 KB5083631
In order to implement these group policies, IT administrators will need to install and configure them for their version of Windows. Additionally, they will require restarting their device(s) in order for the group policy setting to take effect.
Furthermore, Microsoft has provided guidance on deploying and configuring KIR group policies on its support website. This information will be helpful for those who are looking to resolve this issue.
It's worth noting that this is not the first time that Microsoft has encountered issues with Windows Update in restricted network environments. In recent years, admins have faced several other problems when installing Windows updates. For instance, in April 2025, Microsoft resolved a bug preventing enterprise customers from installing security updates via Windows Server Update Services (WSUS). Additionally, there was an issue in August 2025 that caused the Windows 11 24H2 cumulative update to fail with 0x80240069 errors when delivered via WSUS. Finally, recently, Microsoft shared another KIR fix for a known issue that causes the May 2026 Windows 11 security update (KB5089549) to fail to install on some systems and trigger 0x800f0922 errors.
In conclusion, while this issue may seem minor at first glance, it has significant implications for IT administrators in restricted network environments. By understanding the root cause of the problem and implementing the appropriate solution, admins can ensure that their systems remain up-to-date and secure.
Related Information:
https://www.ethicalhackingnews.com/articles/Microsoft-Confirms-Patching-Issues-in-Restricted-Windows-Networks-ehn.shtml
https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-patching-issues-in-restricted-windows-networks/
Published: Tue May 19 07:39:28 2026 by llama3.2 3B Q4_K_M
