administrators Archives

Winsage

July 29, 2026

Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole

Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.

Winsage

July 29, 2026

I’ve used these 7 shortcuts in Windows 11 more than anything else — stop using Ctrl+Alt+Del and learn something better

- To create a local account in Windows 11, press Shift + F10 to open Command Prompt and enter the command: start ms-cxh:localonly. User creation is possible, and passwords are optional. - To check battery health, open the Start menu, run Command Prompt as administrator, and enter the command: powercfg /batteryreport /output "C:battery_report.html" to generate a report on the C: drive. - To access Task Manager quickly, right-click the Taskbar and select Task Manager or press Ctrl + Shift + Esc. - To enable Clipboard history, press Windows + V. - To access the desktop, press Windows + D or click the blank Taskbar space to the right of the clock. Pressing Windows + , briefly reveals the desktop. - To move off-screen apps on multiple monitors, press Windows + an arrow key, ensuring the desired app is in focus by pressing Alt + Tab if needed.

Winsage

July 29, 2026

Microsoft Intune Adds macOS Compliance and Samsung Update Controls

Microsoft's July Intune update includes enhancements for IT administrators, such as real-time monitoring of Windows device sync progress, custom compliance settings for macOS, and improved firmware update management for Samsung devices. The Intune admin center now allows real-time monitoring of sync progress for Windows devices, enabling simultaneous updates across various management aspects. Custom compliance settings for macOS enable organizations to define specific compliance requirements beyond Apple's standard checks, allowing for a unified compliance management experience across Windows, Linux, and macOS. The update also enhances Samsung Galaxy firmware management through Samsung Knox E-FOTA, allowing administrators to control firmware version deployment and update schedules. Additionally, the update clarifies that newer Windows Autopilot methods allow provisioning of Windows 11 devices without prior registration.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 29, 2026

Microsoft reportedly using TPM chips to weed out Windows piracy

Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.

Winsage

July 27, 2026

You heard wrong, Microsoft isn’t ending pirated Windows 11 with TPM, and the new rule only affects enterprise KMS servers

On July 22, Microsoft announced the KMS Hardware-Secured requirement, linking Windows volume activation servers to a TPM chip. This initiative is aimed at organizations using Key Management Service (KMS) servers to enhance security by ensuring that KMS hosts verify their identity and integrity through the TPM before activating Windows machines. The motivation behind this requirement is to prevent unauthorized activation methods that exploit fake KMS servers. Organizations are advised to ensure their KMS hosts are certified and that TPM is enabled. The KMS Hardware-Secured measures do not target individual users with pirated copies of Windows, as most current piracy methods do not involve KMS servers. Microsoft has not pursued legal action against minor piracy instances, focusing instead on maintaining user engagement through subscriptions and services.

Winsage

July 26, 2026

Microsoft finally making much needed improvement to Windows 11 downloads and installs

A significant outage recently affected Microsoft, causing a temporary halt in Windows 11 updates through both the Windows Update channel and the Microsoft Update Catalog. Microsoft is leveraging AI technology to identify vulnerabilities within its updates, addressing security challenges. Users often encounter inconsistencies with the Windows Update progress tracker, leading to uncertainty during the download and installation phases. Microsoft has confirmed improvements in the update management process with the latest Windows 11 24H2 and 25H2 Release Preview builds, including enhancements to the Orchestrator and Arbiter logging components. The update enhances the calculation of update progress in Windows Update Settings and introduces changes to the cleanup logic for improved system performance post-update. These enhancements could benefit users with less powerful PCs, addressing concerns about sluggishness after installations.

Winsage

July 25, 2026

BackupChain Expands Hyper-V Backup for Windows Server 2025 as a Veeam Alternative

BackupChain has released an update to its backup and disaster recovery platform for Windows Server and Windows 11 users, introducing features such as faster compression, improved Hyper-V protection, expedited restores, and comprehensive backup validation. The update includes a redesigned deduplication engine that accelerates backup speeds and reduces storage usage. It also features advanced Hyper-V change tracking for efficient incremental backups and is compatible with Windows Server 2016 and later, as well as Windows 10 and 11. Restoration processes have been simplified with single-pass restores, minimizing downtime. Additionally, Deep Verification for VM backups allows for ongoing verification of the backup chain without needing to restore the virtual machine. BackupChain aims to provide robust backup technology tailored for SMBs and IT professionals, positioning itself as an alternative to larger enterprise platforms like Veeam. The latest version is now available.