administrators Archives

Winsage

September 19, 2026

Announcing new builds for 18 September 2026

New Windows 11 Insider Preview builds have been released for the Beta and Experimental channels. Notable new features include: - A new animation for the Mouse indicator in the Experimental channel, which can be activated through accessibility settings and kept visible until the escape key is pressed. - A new contrast theme toggle in the Magnifier, also in the Experimental channel, designed to reduce screen glare without altering the appearance of images, charts, and videos. - Updates to the Cloud rebuild feature in the Experimental channel, allowing users to restore their Windows 11 PC to a clean state and sanitize device drives during the process. IT administrators can now configure and initiate Cloud rebuild remotely via the Recovery CSP.

Winsage

September 19, 2026

These 4 built-in Windows tools helped me build a self-healing PC

Windows operating systems include built-in tools for maintaining PCs, allowing users to monitor system health, repair corrupted files, and recover from boot failures with minimal intervention. Task Scheduler automates maintenance tasks by triggering them based on schedules or events, accessible via the Start menu or taskschd.msc. It can activate tasks at fixed intervals, on startup, during idle periods, or in response to Event Viewer entries. Tasks should run with the highest privileges and can be configured to execute regardless of user sign-in status. The Settings tab allows missed tasks to run as soon as possible. DISM (Deployment Image Servicing and Management) is a command-line utility that repairs the component store, essential for installing updates and restoring system files. It offers three inspection levels: CheckHealth, ScanHealth, and RestoreHealth, with the latter requiring an internet connection for downloading replacement files. DISM logs operations in C:WindowsLogsDISMdism.log. SFC (System File Checker) verifies and repairs core operating system files using Windows Resource Protection. The command sfc /scannow checks all protected files, while /verifyonly provides a report without changes. SFC's effectiveness depends on the integrity of the component store, making it essential to run DISM first. Results are logged in C:WindowsLogsCBSCBS.log. Quick Machine Recovery (QMR), introduced in Windows 11, addresses boot failures by connecting to the internet to find solutions when repeated boot failures are detected. QMR is enabled by default on unmanaged devices and can continuously check for fixes. It is designed to respond to widespread issues rather than unique problems and may not work effectively on older hardware or without a network connection. Together, these tools provide a comprehensive approach to system maintenance in Windows 11, ensuring the operating system remains healthy and efficient without additional software.

Winsage

September 18, 2026

Windows 11 Update Can Break Active Directory Trust Relationships

A recent security update from Microsoft, KB5124008, has caused disruptions for organizations using on-premises Active Directory, particularly affecting domain-joined Windows 11 devices with Credential Guard. After installing this update, some devices lost their secure trust relationship with the domain, preventing users from logging in with valid credentials. The issue is linked to Machine Identity Isolation, a security feature that enhances machine account credential protection but requires domain controllers to operate at the Windows Server 2025 Domain Functional Level. Organizations that enabled this feature without meeting the prerequisite may experience trust relationship failures. Microsoft has suggested a workaround to disable Machine Identity Isolation and plans to suspend its enforcement in an upcoming update while improvements are made.

AppWizard

September 18, 2026

Notebooks in Gemini arrive for Google Workspace and Education accounts

Google has rolled out the "Notebooks in Gemini" feature to business and education accounts in Google Workspace, following its integration for regular users that began in April. The feature, previously known as NotebookLM, is now part of the main Gemini interface, allowing users to create interactive learning materials, reports, and slide decks. Workspace administrators can control access to the feature, which must be enabled at the organizational level. Users in the European Economic Area (EEA) do not have access to this feature due to regional restrictions on artificial intelligence applications.

Winsage

September 17, 2026

Microsoft patch gives domain-joined Windows PCs trust issues

Microsoft acknowledged a significant issue affecting Windows 11 versions 24H2, 25H2, and 26H1 related to Active Directory domain logins as of September 16. This issue stems from changes made to Machine Identity Isolation in the September 2026 security update (KB5124008), which may cause Credential Guard-protected machine accounts to lose their secure channel with an on-premises Active Directory domain, preventing users from signing in with valid domain credentials. The update activates Machine Identity Isolation but does not enforce it immediately, and it is only compatible with environments linked to domain controllers operating at the Windows Server 2025 Domain Functional Level (DFL) or higher. Microsoft advised that devices not connected to Windows Server 2025 domain controllers will need to disable Machine Identity Isolation. A workaround involves disabling the feature through Intune, Group Policy, or the Windows Registry, followed by a device restart and repairing the secure channel using the Test-ComputerSecureChannel PowerShell command. Microsoft plans to address this issue in a future update by temporarily halting Machine Identity Isolation enforcement while enhancements are made.

Winsage

September 17, 2026

What Windows 11 KB5129195 fixes

On September 14, 2026, Microsoft released KB5129195, an out-of-band cumulative update for Windows 11 versions 24H2 and 25H2, transitioning systems to build 26100.9457 for 24H2 and 26200.9457 for 25H2. The update addresses several regressions, including failed connections and sign-ins in Remote Desktop Services, host-folder sharing failures in Plan9 file sharing for HCS-managed Linux virtual machines, and failures affecting 8-channel and 3D-audio modes in USB Audio Class 1.0. However, it does not fix ongoing issues with AMD Radeon graphics cards, such as freezes, black screens, and driver timeouts, which have affected various hardware configurations. KB5129195 is available through multiple distribution channels, including Windows Update and WSUS.

Tech Optimizer

September 16, 2026

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results

Iranian state-affiliated cyber actors are targeting dissidents, activists, and journalists using fake AI applications, counterfeit antivirus tools, and fabricated MRI scan results, primarily through a spyware family known as CHOSEN BRICK, which is designed for Windows systems. This campaign has been active since at least 2025 and affects individuals globally, including in the UK, US, and Netherlands. The malware establishes persistence via the Windows Registry Run key and communicates through Telegram, utilizing unique Bot IDs for each victim. CHOSEN BRICK is capable of extensive data collection, including capturing screenshots, recording audio, and stealing email content. Personal information from victims has been found on pro-Iranian leak sites, increasing harassment risks. Security measures should include monitoring for suspicious Registry entries and unusual communications, while users are advised to avoid unsolicited software installations and keep their systems updated. The FBI refers to this malware family as HEAVYGRAM.

Winsage

September 16, 2026

Windows Server 2022 Nears End of Mainstream Support

Organizations using Windows Server 2022 will lose mainstream support on October 13, 2026, although security updates will continue through extended support until October 2031. Customers are encouraged to plan for an upgrade to Windows Server 2025 to avoid potential security vulnerabilities and complications in future migrations. Microsoft recommends early evaluation and testing of Windows Server 2025 to ensure compatibility and smooth transition. Additionally, support for the Azure Edition’s hotpatching capability has been extended to October 2027, providing some customers more time to strategize their migration. However, remaining on Windows Server 2022 means missing out on new features and enhancements.

Winsage

September 16, 2026

Windows Server 2022 reaches end of mainstream support next month

Microsoft has announced that mainstream support for Windows Server 2022 will end next month, transitioning to an extended support phase that lasts until October 2031. Windows Server 2022 was released in September 2021 and will receive its final mainstream support update on October 13, 2026. After this date, it will continue to receive essential security updates at no extra cost until October 14, 2031. Hotpatching for Windows Server 2022 will be available until October 2027 for Datacenter: Azure Edition. Microsoft encourages administrators to upgrade to Windows Server 2025, which began rolling out to Windows Insiders in January 2024 and is expected to be generally available by November 2024. Windows Server 2025 will have mainstream support until November 13, 2029, followed by five years of extended support until November 14, 2034. A 180-day trial of Windows Server 2025 is available through the Microsoft Evaluation Center.

Winsage

September 15, 2026

30 Days Until Windows 11 24H2 Support Ends; Excel Paste Glitch Surfaces Simultaneously

Microsoft announced on September 14 that the Windows 11 24H2 edition, including Home and Pro versions, has only 30 days of support remaining, with a deadline for updates set for October 13, 2026. Users are encouraged to upgrade to version 25H2 or later to continue receiving security updates. The Enterprise and Education editions will have support until October 12, 2027. Users have reported issues from September's security updates, particularly with the Office patch KB5002914, which disrupts the copy-and-paste function in Excel across multiple versions. Microsoft has acknowledged the issue but has not yet released a fix. A temporary workaround involves manually removing the problematic patch, though this also removes the associated security fixes. Additionally, users have experienced connection drops and unresponsiveness in Remote Desktop Services (RDS) across various Windows versions, including Windows 11 26H1 and Windows Server 2012. Microsoft confirmed that related tools may also stop responding, and restarting virtual machines may temporarily restore functionality. USB audio issues have been reported on certain USB Audio Class 1.0 devices across Windows 11 versions, with users experiencing loss of audio output and corrupted sound settings. Switching to 2-channel mode has helped some users, but Microsoft has not provided a timeline for a comprehensive fix. As Windows Server 2012 nears the end of its Extended Security Updates period on October 13, 2026, the RDS issues add pressure on administrators. Users on 24H2 need to prioritize migration to 25H2, while those with the latest updates should be cautious regarding Excel and Remote Desktop functionalities.