Windows April security update issues

Microsoft's April security update is causing VPN connections to fail on Windows 11 (versions 23H2, 22H2 and 21H2) and Windows 10 (versions 22H2 and 21H2). 

KB5036893 introduced several improvements to Windows but seems to have broken VPN apps that run off a TPM-backed certificate.  Some who installed the April security update may be locked out of their employer's network.

Microsoft confirms the issue, but has no ETA for a fix. So far, the only workaround is to uninstall this KB. Use the command DISM /online /get-packages to find the name of the April update package (specifically the LCU "cumulative" package) and use the DISM/Remove-Package command line option to begin the uninstall process, downgrading back to the previous Windows version.  Detailed instructions are at the bottom of Microsoft's KB5036893 support page. 

Interestingly, the April updates may also prevent users from changing their Windows profile picture. 

Read more here.