It appears that the June updates have caused crashing problems in the Local Security Authority Subsystem Service (LSASS), causing forced reboot on some Windows 10 devices.
LSASS is responsible for enforcing security policy on Windows systems and is used by the system to add entries to the security log, as well as to handle user logons, password , and access token generation.
When the LSASS fails to operate, the user will immediately lose access to all accounts available on the machine, an error will appear and the machine will be forced to restart.
Devices running Windows 10 1809 or newer version are affected
Microsoft explains that LSASS may fail to operate on certain devices, displaying the error:
The known issue was added by Microsoft today to the entries for cumulative updates KB4557957 and KB4560960 that were released as part of update rollup , as well as to the entries for optional updates KB4567512 and KB4567523 that fixed a previous issue that caused printing issues.
While these updates can be applied only to Windows 10 versions 1903 or later, users have also reported that they encounter the same problem with devices running fully updated Windows 10 installations, version 1809.
“We have some machines in our domain that are crashing when logging in,” said one user. They automatically get a message saying, “ computer will automatically restart in a minute,” and then they are forced to reboot. After the reboot, they can log back in and continue working until the next day.”
Microsoft has not yet made any official announcement
Microsoft has not yet officially acknowledged this issue and there is still no official fix for this problem.
Although there is no official fix for this, users who cannot use their devices because of LSASS crashing can get rid of the problem by uninstalling the cumulative updates of June 2020.
Before you uninstall the two cumulative updates, you should first be aware that you are also removing mitigations for security affecting your Windows 10 device.
Microsoft says in the details of the two updates that they can be removed “by selecting View installed updates in the Programs and Features control panel.”
If you still want to proceed with removal, you must follow this procedure:
- Select the start button or Windows desktop search and type update history and select View your Update history.
- In the Settings/View update history dialog box , select Uninstall Updates .
- In the Installed Updates dialog box , find and select KB4560960 or KB4557957 and select the Uninstall.
- Restart your device.
