April 2025 CU for SharePoint Server Subscription Edition is available for download

8 Comments

1. 

   AI Video Generator
   On 9. April 2025 Permalink

   Thanks for the heads-up about the unified package approach. It definitely streamlines things, though I’m curious if there are any caveats when applying the update in multilingual environments?

   Reply
   1. 

      Stefan Goßner
      On 10. April 2025 Permalink

      Hi, not sure what you mean with multilingual environments? Do you mean multiple language packs installed?

      Reply
2. 

   Laurent LC
   On 10. April 2025 Permalink

   Hi Stefan,

   Not sure what is going wrong but when executing the PSCONFIGUI after binary complete successfully on the farm. On Application server, the following error appears with the PSCONFIGUI

   Failure with secure SharePoint resources.

   It is a critical task. You have to fix before going on

   An exception System.UnauthorizedAccessException has been thrown. Further details: Attempt to execute an unauthorized operation

   When executing in command line for more details.

   The resource ‚C:\Program Files\Microsoft Office Servers\16.0\Logs\‘ type ‚Directory‘ was secured by enabling ‚full control‘ to the security group ‚WSS_ADMIN_WPG‘.

   The resource ‚HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\16.0\Search‘ type ‚RegKey‘ was secured by enabling ‚full control‘ to the security group ‚WSS_ADMIN_WPG‘.‘.

   Failure when trying to secure SharePoint resources.

   An exception System.UnauthorizedAccessException has been thrown. Further details: Attempt to execute an unauthorized operation

   …
   When looking ULS logs some other details appear:

   Unable to write counter value to C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\LOGS\SPAudit_w3wp_352bb666c2bf47d996bbf8da4b8cdd77_7 with exception System.UnauthorizedAccessException:

   The access to ‚C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\LOGS\SPAudit_w3wp_***‘ is denied. System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) à System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, B

   The path of LOGS directory has proper rights (Full Control) for the account executing the PSCONFIGUI/PSCONFIG operation.

   Would you have an idea on how to deal with that ?

   Reply
   1. 

      Stefan Goßner
      On 11. April 2025 Permalink

      This can be caused by anti virus solutions locking the file. Did you exclude the logs directory from AV?

      Reply
      1. 

         Laurent LC
         On 14. April 2025 Permalink

         I thought about it and disabled the AV on all farm servers during the operation but without any changes. I will then specifically exclude the logs directory and start again.
         Thank you for the reply (You can delete the last post – I write another one on that article thinking the first one was not published)
         Thanks again Stefan !

         Reply
         1. 

            Laurent LC
            On 14. April 2025 Permalink

            To complete my feedack: I discovered our EDR solution was preventing ACL modifications on the Windows hosts file. Logs directory was not involved as mentioned previously.
            So “secure resources” part of PSCONFIG operation could not achieve properly. After disabling the security temporarily, the process ended normally !!

            Reply
3. 

   Fred Heath
   On 10. April 2025 Permalink

   Thank you for your great website! It is our go to place each month for reviewing SP updates.
   We have the SPSE February 2025 CU installed on our servers. We skipped the March 2025 CU.
   We have installed the SPSE April 2025 CU on two of our development, single server farm, servers. Both servers had issues when running the PS Config Wizard, on step 9 of 10, when the SP Timer service is attempting to be started, it fails to start due to an incorrect password. The password has not changed and the services were running fine before the CU install/PS Config Wizard. It appears on both servers that PS Config Wizard wiped out or changed the managed passwords within SharePoint. We were able to update the passwords in Windows services and get the PS Config Wizard to complete successfully, but then noticed that several services within Central Administration „Services on Server“ were stopped. Attempts to due to an „error encrypting or decrypting credentials“. We are trying to update the master passphrase and see that there is a One-time timer job definition „Master Passphrase Deployment“ but it does not seem to run/complete. Are there any reports of similar issues?

   Reply
   1. 

      Stefan Goßner
      On 11. April 2025 Permalink

      Hi Fred, I have not heard about such a program. My suggestion would be to open a ticket with Microsoft support to get this analyzed.
      Cheers,
      Stefan

      Reply