KB5060531: Overview with user sentiment and feedback

Overview

KB5060531 is a security update released on June 10, 2025, for Windows 10 Enterprise LTSC 2019, Windows 10 IoT Enterprise LTSC 2019, Windows 10 IoT Core LTSC, and Windows Server 2019. This update brings the OS build to version 17763.7434 and includes important security fixes and quality improvements.The update addresses specific issues in GDI and GDI+ where some characters were rendered wider and paragraph formatting was broken. It also fixes an issue with Windows Hello that prevented users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.Microsoft has identified a known issue with this update where the DHCP Server service might intermittently stop responding after installation, affecting IP renewal for clients. This issue is particularly impactful for server environments where DHCP services are critical for network functionality. Microsoft has indicated that this issue was resolved in subsequent updates released on and after July 8, 2025 (KB5062557).

General Purpose

The primary purpose of KB5060531 is to provide security updates and address specific functionality issues in Windows Server 2019 and related Windows 10 LTSC versions. The update focuses on fixing rendering issues with the Graphics Device Interface (GDI) components, where certain characters were displaying incorrectly with wider rendering and broken paragraph formatting. This would have affected text display in various applications across the system.Additionally, the update resolves an authentication problem with Windows Hello for Business, specifically addressing a scenario where users were unable to sign in using self-signed certificates when implementing the Key Trust model. This fix improves the reliability of enterprise authentication scenarios that rely on Windows Hello for Business.The update also includes the latest servicing stack update (SSU) - KB5058525, which improves the reliability of the update process itself. Microsoft has combined this SSU with the cumulative update to streamline the installation process and mitigate potential issues during future updates. The servicing stack is a critical component responsible for installing Windows updates, so these improvements help maintain system stability during the update process.

General Sentiment

The general sentiment toward KB5060531 is mixed, with significant concerns about its impact on server environments. While the update provides important security fixes and resolves specific issues with text rendering and Windows Hello authentication, the DHCP Server service issue has created substantial problems for system administrators.According to reports from Windows Latest, server administrators have experienced significant disruptions after installing this update, with DHCP clients losing their leases and connectivity issues occurring within 20-50 seconds of booting the server. This has been described as a "very unpleasant irritant" in enterprise environments, leading some administrators to proactively decline the update on their domain controllers that provide DHCP services.The severity of the DHCP issue has prompted some administrators to uninstall the update entirely, despite the security implications of doing so. This represents a difficult trade-off between maintaining network functionality and implementing important security fixes. Microsoft has acknowledged this problem and promised a resolution, but in the meantime, administrators are forced to choose between potential security vulnerabilities and functional network services.

Known Issues

• The DHCP Server service might intermittently stop responding after installing this security update This issue affects IP renewal for clients on the network The DHCP issue can cause clients to lose their leases, potentially disrupting network connectivity The problem typically manifests within 20-50 seconds of booting the server This issue was resolved by Windows updates released on and after July 8, 2025 (KB5062557)* Microsoft recommends installing the latest update for your device as it contains important improvements and issue resolutions

Disclaimer: We take measures to ensure that AI-generated content is of the highest possible quality, but we cannot guarantee its accuracy and recommend that users do their own independent research. Generated on 2025-07-29 02:33 AM

Back to Knowledge Base Catalog