Microsoft has walked back its claim that October's Patch Tuesday update fixed a nasty Always On VPN bug, and separate problems from the same KB5127648 release are still knocking laptops off office Wi-Fi networks and silencing USB headsets. If your Windows PC started acting strangely after mid-October updates, you are not imagining it — and you are not alone.
The VPN 'fix' that wasn't
On October 21, Microsoft reversed course on one of the headline items in its October 2026 cumulative updates. Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates.
The symptoms are easy to recognize. When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed. In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'
Microsoft returned the issue's status from Resolved to Mitigated and said a resolution for this issue is planned to be included in an update to be released in the coming weeks. In the meantime, Microsoft shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.
Work and school Wi-Fi dropping off after KB5127648
A separate but related mess is hitting laptops that connect to managed office or school networks. Some laptops at offices, schools, and universities are dropping off their Wi-Fi after installing KB5127648. The machine looks connected, or connects briefly and then loses access, with no clear error message shown. Some devices won't connect at all.
The problem is specific to managed networks where you log in with a username and password: a work account or school login rather than a Wi-Fi passphrase. These use a standard called WPA2-Enterprise. The authentication fails with error 0x80070285, though Windows doesn't surface that to the user.
The update flips a setting called BlockNtlmv1SSO from 'audit' to 'enforce' on PCs where Credential Guard is off and nobody has set the value by hand. That blocks an old sign-in method (MS-CHAPv2) that a lot of office networks still lean on, and it isn't only Wi-Fi. Wired Ethernet logins and some work VPNs can fail the same way. If your office laptop suddenly can't reach the company network, this is a likely culprit — and something our laptop repair shop can diagnose quickly.
USB headsets and speakers going silent
The same update is also killing audio on a lot of older peripherals. You install the update and your USB headset stops working. Or your USB desk speakers, or the little USB sound card dongle you bought years ago. No sound at all. The volume slider does nothing, and the sound settings are greyed out or the device has vanished from the list.
It hits anything using the older USB Audio Class 1.0 standard, which covers a lot of older and cheaper kit: USB headsets from a few years back, plug-in sound cards, some of the audio interfaces musicians use for recording, and plenty of USB speakers. Windows 10 and Windows 11 (24H2, 25H2 and 26H2) are all affected.
Some USB Audio Class 1.0 devices can lose sound or display a Code 10 error. Microsoft marks the issue as mitigated, but says some remaining symptoms require further attention.
What to try before replacing anything
If your Windows PC suddenly can't reach the office network, lost VPN access, or dropped audio after a mid-October reboot, don't buy a new headset or router yet. Check Windows Update history for KB5127648 and note the install date — if the problems started right after, the update is the suspect, not your hardware. Microsoft has not pulled the update, so uninstalling it is a short-term option but will leave you missing October's security fixes.
For the VPN and Wi-Fi issues, workarounds generally require registry edits or network-policy changes that are easy to get wrong. If you also start seeing unexpected pop-ups, slowdowns, or browser redirects at the same time, treat it as a separate issue and get a malware scan done — update bugs and infections can look similar from the user's side.
What This Means for York, PA
York-area small businesses running Windows 11 laptops on company Wi-Fi or Always On VPN are the most exposed to these October bugs. If you're seeing sign-in failures or dead USB audio on a shop or office PC, bring it in to York Computer Repair at 2069 Carlisle Rd — we can confirm whether KB5127648 is the cause and apply the right workaround without wiping your machine.