Hello Neale,
okay, the patches are not directly installed. KIR is “known issue rollback”. If MS has an error within patches they recall the patch with a KIR. wmic is the WMI version of get-hotfix. I am not familiar with Windows 11 and will never use it
But I read, that this is a discontinued tool and not available for Windows 11.
However, it seems you have not the Windows bug with the localhost interface, because you have not the patches installed, it was a try.
I think, a good way to find a solution is wireshark. If you like you can install Wireshark from wireshark.org
Then use a admin console and type:
“C:\Program Files\Wireshark\tshark” -D It shows a list of all network devices. Search for the <id> (the first number) of the loopback adapter and note the id number.
Then type:
“C:\Programm Files\Wiresharkt\tshark” - i <id> -a duration:60 -w <traintasticcapture.pcap>
<traintasticcapture.pcap> is only the filename, add a path, please.
Before you start the recording, start the traintastic server and after it is up, tshark. Then you have a time of 60s (duration) to start the client. tshark ends automatically after 60s. You could extend the time, if it is not enough to record the lost of connection.
This records all traffic of the loopback device (127.0.0.1) to the file traintasticapture.pcap. We could load this file into Wireshark, if you send it to us and analyze what happens with the network connection.
@Reinder: Hope the options for wireshark / tshark are correct, please correct me 
Btw: At MERG forum is a thread where they have problems with MMC and Windows 11.
Greetings, Tom