I see numerous mentions in different forums that the September patches can cause issues with Remote Desktop Services on Win2016, 2019, 2022 and 2025. Bleepingcomputer.com has an article on it, bleepingcomputer.com/news/microsoft/september-windows-server-updates-break-remote-desktop-services. So far I have not seen anyone confirm that this also affects Citrix servers, but I would assume it does. Does anyone know for sure?

patched my server 2022 images on wednesday and not seen any issues yet in pre prod

Good to hear, thanks for the feedback. I am getting some feedback here now that so far patching has been successful. Though, only time will show if any negative effects will show up over the weekend.

yeah its hard to say until everything is at the same patch levels all our Domain controllers havent been updated yet

Thanks for the info both of yoy, I really appreciate it.

Looks like Citrix is recommending to use the Rollback patches for ALL Oses. I was hoping it would just be Windows 11 - looks like all are affected support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697101 Edit: Doh! @Aaron O'Reilly beat me too it!

Other post few people are saying the KIR is not working and not fixed the issues

I patched our small number of Windows Server 2019 MCS VMs last week and have heard of no problems since. We do nightly reboots of our catalogs which I suppose could mask the problem.

There is a out-of-band released today KB5129235 for W25 https://support.microsoft.com/en-gb/servicing/os/windows-server/2026/09/kb5129235-windows-server-2025-update

It does NOT fix the "Application popup: explorer.exe - System Error : The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application." issue

Well... guess MS has to get back to their vibe-coding and try to fix it again.

Someone got a workaround at the moment?

@Remy, is it Windows 11 you still have an issue with?

Yes.

hows everyone getting on with the out of band update ? just putting it on my images now

Well. It's doesn't fix the issue @c4rm0 😅

We are just starting to rollout!

i am seeing something really weird with this out of band patch. So i opened up the vdisk in R/W mode ran windows update the out of band patch didn't show. The only patches that was listed in windows update was MS Edge and webview2 patches which i installed. I downloaded KB5129237 for server 2022 catalog.update.microsoft.com/Search.aspx?q=KB5129237 and installed and rebooted and sealed. Installing the out of band patch seems to of downgraded my M365 apps install as i noticed the co pilot toggle missing in the backstage view on Outlook (On MEC with reg key set to disable ms office updates) checking appwiz.cpl seems to suggest M365 was mofified /updated/downgraded today but i didnt touch it

That's weird... is it even relevant for M365 apps?

Looks like Citrix updated CTX697101 yesterday, at least adding to the Resolution section. My org is able to get one of the two Windows 11 patches listed through both of our third party patching utilities, but we cannot get KB5129241, that appears to be locked behind Windows Autopatch which we don't have set up. How well have the OOB and hotpatches been working for you all? We've had no issues on server OS's, but Windows 11 is not going so well for us.

i have been able to get all the OOB patches and even get them imported into WSUS