Quick Summary
Microsoft has alerted businesses about a Message Queuing (MSMQ) issue affecting enterprise applications and Internet Information Services (IIS) sites. This problem primarily impacts users with Windows 10 22H2, Windows Server 2019, and Windows Server 2016 who installed specific security updates in December 2025. Affected users may encounter symptoms like inactive MSMQ queues and misleading error messages, prompting Microsoft to recommend contacting their support for temporary mitigation strategies.
The Securityish Brief
Microsoft has identified a known issue with Message Queuing (MSMQ) affecting enterprise users on Windows 10 22H2, Windows Server 2019, and Windows Server 2016. This problem arose after the installation of security updates KB5071546, KB5071544, and KB5071543 released during December 2025 Patch Tuesday. Users are experiencing various symptoms, including inactive MSMQ queues and IIS sites failing with “insufficient resources” errors.
The root cause of this issue is a change in the MSMQ security model that altered permissions on the C:WindowsSystem32MSMQstorage folder. This change requires MSMQ users to have write access to a directory typically restricted to administrators, leading to failures in sending messages via MSMQ APIs.
Microsoft has advised affected IT admins to reach out to their business support team for a temporary workaround while they investigate a permanent fix. The company has not yet provided a timeline for when a resolution will be available.
This situation highlights the importance of monitoring updates and their potential impacts on enterprise applications. Organizations should be aware that such changes can disrupt critical services, especially in managed IT environments.
For users and organizations, this incident serves as a reminder to regularly check for updates and understand the implications of applying security patches. It also underscores the necessity of having a robust support strategy in place to address unexpected issues arising from software updates.
What This Means for Organizations
Organizations should consider reaching out to Microsoft Support to implement the recommended workarounds to mitigate disruptions. Additionally, they may need to evaluate their update management processes to ensure they can quickly respond to similar issues in the future.
As this issue primarily affects enterprise environments, individual users on Windows Home or Pro editions are unlikely to be impacted. However, it is essential for all users to remain vigilant about system updates and potential changes that could affect their applications.
Key Takeaways
- Contact Microsoft Support for guidance on temporary workarounds for the MSMQ issue affecting your organization.
- Monitor your systems for symptoms such as inactive MSMQ queues and IIS errors to identify potential impacts early.
- Review your update management process to ensure you can quickly respond to issues arising from new security patches.
- Educate your IT team about the recent changes to MSMQ permissions to prevent similar disruptions in the future.
- Stay informed about future updates from Microsoft that may address this issue and other potential vulnerabilities.
Key Terms & Concepts
- Message Queuing (MSMQ): In this article, MSMQ refers to a Windows service that facilitates communication between applications over a network.
- Windows Server 2019: Windows Server 2019 is a server operating system developed by Microsoft, primarily used in enterprise environments.
- IIS: IIS stands for Internet Information Services, a web server software created by Microsoft for hosting websites and applications.
Read the original article here: https://www.bleepingcomputer.com/news/microsoft/microsoft-asks-it-admins-to-reach-out-for-windows-iis-failures-fix/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
