Microsoft December 2025 Security Updates Disrupt MSMQ Functionality on IIS

Microsoft's December 2025 security update has introduced a compatibility issue affecting Message Queuing (MSMQ) functionality across Windows Server and client environments.

The update, identified as KB5071546 (OS Build 19045.6691), released on Mon, Dec 9, 2025, has impacted organizations relying on MSMQ for inter-application communication, especially in Internet Information Services (IIS) deployments.

Organizations are experiencing critical failures in their messaging infrastructure. MSMQ queues are becoming inactive, causing IIS sites to fail with "Insufficient resources to perform operation" errors. Applications attempting to write to message queues encounter failures, while system logs display misleading error messages regarding insufficient disk space or memory despite available resources.

The most concerning symptom involves errors such as "The message file 'C:\Windows\System32\msmq\storage*.mq' cannot be created" when attempting to create message files. Clustered MSMQ environments under heavy load are particularly vulnerable to these disruptions, potentially affecting critical business operations across multiple servers.

Microsoft has identified the root cause as recent changes to the MSMQ security model and NTFS permissions applied to the C:\Windows\System32\MSMQ\storage folder. The update implemented stricter permission controls, now requiring write access to this directory for standard MSMQ operations. However, this folder remains restricted to administrators by default, creating an access conflict that prevents applications from writing messages to queues.

This permission mismatch represents a significant oversight, as it breaks existing functionality without providing clear mitigation paths for affected users. The issue impacts Windows 10 version 22H2 and Windows Server environments including Windows Server 2019 and Windows Server 2016. Microsoft confirmed the issue on Thu, Dec 12, 2025, at 17:13 PT, indicating awareness shortly after user reports surfaced.

Microsoft is actively investigating the issue and has committed to providing updated information as the investigation progresses. Organizations experiencing MSMQ failures should evaluate temporary workarounds while awaiting an official patch. Administrators should monitor Microsoft's security update portal for resolution details and patch availability.

This incident underscores the importance of comprehensive testing before deploying security updates in production environments, particularly for systems relying on specialized messaging infrastructure.

Based on reporting by GBHackers.