Over a dozen frozen computers today
Posted by bjc1960@reddit | sysadmin | View on Reddit | 57 comments
We have a dozen or more Dell computers that are now freezing. We paused the P.Tue rollout for April but many that have issues are not showing in Intune as having the update. Several have needed bitlocker keys during the reboot. Fresh Start is failing possibly due to the hotpatch issue.
We are set up as remote, so we don't have any in our possession that have the issue. The three I was looking at don't have any events writing the the DeviceEvents table in Log Analytics.
Is anyone has having issues?
BronnOP@reddit
Might be worth using this as an opportunity to delay patches for a week or so if your compliance situation allows for it. Gives Microsoft enough time to fix the patches and for you to a void the issues, we’ve been doing this for years and it’s saved us a lot of hassle.
BrokenByEpicor@reddit
At this point you basically have to, compliance be damned. It's either that or you spend a week scrambling to fix whatever they fucked up this month.
blackjaxbrew@reddit
Something that doesn't get discussed either is productivity loss due to these bugs, cost the company more money that one would think
BrokenByEpicor@reddit
Right, and I don't even know how you would make that right. Like a class action lawsuit again MS where every licenseholder is refunded a certain amount based on their license load at the time of various outages?
That would be a nightmare. Actually it would be a good use case for an LLM if it could be counted on to not fuck it up.
blackjaxbrew@reddit
Ha yea, rofl your username kills me
BrokenByEpicor@reddit
"Epicor" is nearly a curseword at our company.
blackjaxbrew@reddit
We roll patches 1.5 weeks after patch Tues, the amount of bugs that we avoid is wild. Servers are 2.5 weeks out. Look if someone is going to breach us in that time frame we have other issues.
lccreed@reddit
Yeah, windows shouldn't be internet facing at this point anyway - the primary surface where I'd be most concerned about installing day 1.
WeaponsArtist@reddit
Has anyone had any luck with this issue? We're also experiencing something similar. We've found it's when users close their laptop lid (in a meeting) then when they get to their desk to dock up and open the lid, their frozen on a black screen. Almost like a having trouble waking from sleep. Not an issue until 2 weeks ago. Having trouble isolating the responsible update.
Some throw the BitLocker key request and some don't. We're baffled.
bjc1960@reddit (OP)
We have not. We got some updated by brute force, but many are still stuck on March. We have tried installing the MSU directly and it is causing hags. The users are locking up minutes to hours after a hard restart. The users are not closing their lid. We are a Dell shop but a single HP and single Lenovo are affected.
Dell came out with a BIOS for some devices on 4/17, two days after, so we are having affected users update those. There is no rhyme or reason as three affected people have the same computer I do. Some users can't even get the BIOS due to lock-ups.
We can't even get Fresh Start or Wipe to work - those are failing -maybe due to the March release bug for those with hotfix.
i am working on some major logging to help solve. I had to clue the Exec Team too.
---
WeaponsArtist@reddit
Thank you for the update! Dang I didn't realize how deep this issue went... Fresh starts and wipes too, eh? We are a smaller org so we don't turn computers around often, so haven't run into those issues. I will say, I opened Dell Command Update and ran all updates there (I believe there was a new BIOS) as well as made a NIC power management setting change (saw in event viewer on two machines that froze a matching event just before the freeze) related to the Intel AX210 NIC... Netwtw10 Error 6062 and on the two machines I did both update manually via Command Update as well as the NIC change I haven't seen the issue, but that could be dumb luck... Have y'all actually identified the KB associated with this issue popping up? Hate how Intune doesn't give more details about what KBs were installed and when.
bjc1960@reddit (OP)
My crew thinks they have it fixed on one computer with the below
Seems maybe to obvious but we have spent a week doing various attempts to fix, so this may be a result of other fixes we tried.
WeaponsArtist@reddit
Hmmm interesting! Next machine I have brought to me with this issue, I will be trying this! Thanks for sending!
bjc1960@reddit (OP)
This may or may not help - analysis of a DISM log.
● Yes — this is a real lead. The Intel Arc Software orphan is exactly the kind of upstream rot that can make a subsequent KB5083769 install hang, even if it's not the direct cause. Here's the connection
Why this matters for the KB5083769 freeze:
When DISM processes a cumulative update on Windows 11 24H2+, it enumerates provisioned Appx packages as part of the servicing transaction to figure out what needs updating or migration. If it encounters an orphaned package (registration still present, files missing), it hits
the same 0x80070002 enumeration error your log shows — and depending on the code path, that can:
- Stall the servicing transaction while DISM retries the read
- Cause CBS to hold its session lock longer than it should
- Interact badly with concurrent Appx manager calls (which Dell, Intel, and Windows all run on schedules)
- Not actually fail hard — just make the install much slower, which presents as "frozen"
That matches exactly what we're seeing: DISM enters Phase 6, disappears for 20+ min, people assume it's frozen. Maybe some of those "frozen" devices were actually churning through Appx enumeration errors the whole time.
Your other findings:
- PSv2 probe noise — agreed, ignore. Almost certainly Defender or a compliance baseline scanner. Not worth chasing during this patch cycle.
- Time_InternalToPublic noise — agreed, benign.
- Truncated RestoreHealth at 14:06:17 on 2026-04-21 — that's almost certainly the manual repair run you did on the device that "may have been fixed." Confirms the repair did proceed past the error chain rather than choking on it.
Concrete action — add an orphaned-Appx pre-flight
Detect orphaned provisioned Appx packages before the DISM install and log which ones are broken. Safe enumeration only, no auto-remove (risk: removing a package that's legitimately present but enumeration failed would break user functionality). Then the tier-2 repair script
does the actual cleanup if needed.
bjc1960@reddit (OP)
The fresh start issue is from March I believe, for those who have hot patch .
We assume our problem is KB5083769.
Do you have Claude code? We are writing scripts to search logs and such. I just deployed a detect/remediate to find
frenswithgeese@reddit
I am also experiencing the black screen issue on multiple models of the Dell desktops, this has been going on a couple months. Vostro 3020, Inspiron 3030, and Pro Desktop QCT1250. They need to be hard reset after returning to a session after a few hours, even though Sleep is explicitly disabled as well as S4 and S5 Sleep, and quick start disabled.
Sovey_@reddit
Possibly this?
https://www.computerworld.com/article/4160481/microsofts-patch-tuesday-release-for-april-is-a-whopper.html
Accurate-Ad6361@reddit
I sometimes wonder why there are no reverse checks before installation.
bjc1960@reddit (OP)
We are able to enter the Bitlocker key and continue but the computer locks up later in the desktop, and reboot again wants the key. We are shutting off hotfix and removing the computers from the ring. The patch is also paused.
man__i__love__frogs@reddit
Confirm if you are using PCR7 before going down that rabbit hole. It would be very odd if you were.
bjc1960@reddit (OP)
Thx. One of the IT team has the issue so I send him the PCR7 thing you linked above. As I said in another reply, we are basically done with the 2023 cert, except for outliers. We had the 65000 error using the standard config to update, but wrote a massive script to force the update in there. We could have changed a setting that broke something. We have the issue on two HP computers, so I am mostly excluding Dell BIOS specific changes.
Fluent_Press2050@reddit
Did the space heaters trip the battery backups in the office? /s
I’d delay patches and wait for a fix.
Happy_Macaron5197@reddit
seeing similar reports from others today, looks like the April hotpatch is causing grief across Dell fleets specifically. the BitLocker prompts during reboot are a red flag that something in the update chain is triggering TPM measurement changes.
few things worth checking — pull the CBS.log directly from the affected machines if DeviceEvents isn't writing, that'll tell you more than Intune will. also check if these devices are Hotpatch-eligible (Arc + MDE enrolled) because Fresh Start reportedly breaks in some hotpatch edge cases this cycle.
for the ones you can't touch remotely, i'd try suspending BitLocker before the next forced reboot attempt if you can push a script via Intune. saves you the key scramble at least.
bjc1960@reddit (OP)
I am pushing a detect/remediate to suspect if the version is < 10.0.26200.8246
bjc1960@reddit (OP)
Thank you. The bitlocker is not a concern so much as the freezing after 10 minutes that makes the computer not usable.
dedjedi@reddit
And you'll still spring for MS licensing when the time comes.
its a cult bob
slippery_hemorrhoids@reddit
You say it like it's easy for anyone to just shift away from microslop bullshit.
bjc1960@reddit (OP)
We have stuff that only runs on Windows. And, "Outlook Separation Anxiety" is strong with this crew.
DarrenOL83@reddit
Mostly HP fleet, and 10% of the workforce have reported freezing that only a hard power off can resolve. Frustrated!
bjc1960@reddit (OP)
more here https://msftnewsnow.com/windows-11-april-2026-update-bugs-crashes-slowdown/
bjc1960@reddit (OP)
Thank you. That implies it is not only me. We have two HP, but are mostly Dell.
I am deploying a detect/remediate to suspect bitlocker for one restart.
MrD3a7h@reddit
Computers frozen? Well thaw them out
bjc1960@reddit (OP)
Tempers are are hot enough to do that if they were really frozen due to temperature.
sneesnoosnake@reddit
People trust MS enough to enable Hotpatching??? Living dangerously
deeprogrammed@reddit
Hotpatching has nothing to do with the timing of updates
sneesnoosnake@reddit
Still want to wait until they crash someone else's environment before applying them myself!
deeprogrammed@reddit
Fair point. You can 'hotpatch' whenever you want though
CPAtech@reddit
So this is only impacting hotpatched devices?
bjc1960@reddit (OP)
That is all we have, so yes. We just cleared that option but the damage may be done. Fresh Start failing too, and Rudy's blog covers that.
St0nywall@reddit
I heard this was a known issue. After patching and the initial reboot, the cert doesn't get updated fast enough and the OS uses some old information that doesn't match bitlocker..
A subsequent reboot will load the proper info and continue booting.
bjc1960@reddit (OP)
we can boot but the computer is not working once logging in. The computer hangs after a but and the user must force power off.
St0nywall@reddit
Do the logs show anything?
bjc1960@reddit (OP)
I am working with the crew to try and get them. The user's don't seem to running long enough. The users are not admin so we need to elevate them and such. Stay tuned
St0nywall@reddit
Remotely connect to the computer using your administrative launched event viewer or see if your RMM has an option for "event viewer" and read the logs yourself. No end user needed at that point.
bjc1960@reddit (OP)
we can get a system stable enough unfortunately as many are down.
CPAtech@reddit
https://www.reddit.com/r/sysadmin/comments/1sl9kpd/patch_tuesday_megathread_april_14_2026/?sort=new
bjc1960@reddit (OP)
I posted in that thread too. The reports of freezing after 10 minutes are getting us. It could be due to Dell updates also
CPAtech@reddit
Is the only change that you pushed the April updates? Did they also pull down BIOS updates?
bjc1960@reddit (OP)
I am not sure. I know I got Dell updates this week and BIOS was not part of mine.
CPAtech@reddit
So you applied both firmware and the April updates before this started?
bjc1960@reddit (OP)
No We did the secure boot fix on 95% of the computers prior. Most should have had the bios update. The problems started on Thur, or yesterday, two days after. The autopatch ring starts 2 days after.
bythepowerofboobs@reddit
No issues here, but our building maintenance is pretty good at HVAC control.
Busterthepug@reddit
I’ve seen dells that recently, for whatever reason, had their paging files set to static with a very low fixed max size, I’d check that out. Also check the driver versions on these devices vs. what the vendor says is recommended. Windows update likes to touch things it shouldn’t
Master-IT-All@reddit
Sounds like your systems updated for Secure Boot certificates.
bjc1960@reddit (OP)
We already did that. We are at 95% compliance except for computers in storage or those on extended outages.
Relevant-Idea2298@reddit
We are Dell and I haven’t seen this (yet at least). Do you push driver updates via WHfB or DCU?
bjc1960@reddit (OP)
Looking up after the UI loads. Everything looks normal and then it freezes and users need to hold the power button down for 30 sec to hard reset