Forum Discussion
Windows 10 Restart after Login
lpham did you installed Windows 10 May 2020's updates?
I have several users got the same issue after this month's patches installed.
Exactly the same error message in Event log.
The patches we installed are: KB4551853 & KB4556441
We're still looking for a resolution.
Just noticed if user turn off PC fast start seems not having this issue anymore, not sure if this is a work around.
lpham did you installed Windows 10 May 2020's updates?
I have several users got the same issue after this month's patches installed.
Exactly the same error message in Event log.
The patches we installed are: KB4551853 & KB4556441
We're still looking for a resolution.
Just noticed if user turn off PC fast start seems not having this issue anymore, not sure if this is a work around.
Likely a red herring but kb4551853 Included a patch for CVE-2020-1118 which is the only recent patch making changes to lsass.
Extract: trendmicro blog
"CVE-2020-1118 is a TLS vulnerability that attackers can exploit to perpetrate a denial of service (DoS) attack on the system. With CVE-2020-1118, malicious actors can send a specially crafted request, triggering the system to reboot. If successfully exploited, the attackers may cause the vulnerable system to stop responding, and just about any system could be shut down by an attacker as the flaw affects both TLS clients and servers. Vulnerable systems that can exploit this flaw will cause lsass.exe to terminate, and can potentially cause disruptions in daily business operations."
We also have a number of 1809 users experiencing the issue, some of the reported issues have resolved themselves without intervention.
