NewApp Digest
search bot

DirectAccess

Windows KDC Proxy RCE Vulnerability Let Attackers Control The Server Remotely
Winsage
March 5, 2025

Windows KDC Proxy RCE Vulnerability Let Attackers Control The Server Remotely

A critical remote code execution vulnerability, designated as CVE-2024-43639, has been identified in Microsoft’s Windows Key Distribution Center (KDC) Proxy. This flaw arises from an integer overflow due to a missing validation check for Kerberos response lengths, allowing unauthenticated remote attackers to execute arbitrary code with the privileges of the target service. The vulnerability specifically affects KDC Proxy servers and was addressed in a November 2024 security update by implementing necessary length validation checks. Organizations using remote authentication services reliant on the KDC Proxy, such as RDP Gateway or DirectAccess, are particularly at risk. Immediate patching is advised, and monitoring for potential exploitation attempts is recommended.
Windows 11 takes small step to fix the horrible new Outlook app
Winsage
November 15, 2024

Windows 11 takes small step to fix the horrible new Outlook app

Microsoft has released Windows 11 Build 27749 to Insiders in the Canary Channel. This update includes a new shortcut for the Narrator tool, allowing users to copy the last spoken text with "Narrator key + Control + X," and enables Narrator to automatically read emails in the new Outlook app. The build can be installed via the Windows 11 Settings app, but no Software Development Kit (SDK) is provided for this or any builds in the 27xxx series. Fixes in this build include resolving excessive spacing in the File Explorer navigation pane, correcting RAW image display issues, adding a search box to the auto-hiding taskbar, updating the mouse pointer location feature for high DPI monitors, addressing Narrator performance issues, fixing unnecessary announcements by Narrator, and correcting text scaling settings in some dialogs. Additionally, the Task Manager bug showing zero counts for apps and processes has been fixed, along with audio issues on certain devices, a crash-causing blank entry in Privacy settings, and various issues affecting Git functionality and domain joining for Insiders using Arm PCs.
Windows 11 Canary build 27749 brings fixes for File Explorer, taskbar, Task Manager and more
Winsage
November 14, 2024

Windows 11 Canary build 27749 brings fixes for File Explorer, taskbar, Task Manager and more

Windows build 27749 is being rolled out to Windows Insiders in the Canary Channel, focusing on fixes rather than new features. Key updates include: - Narrator: A new shortcut for copying the last spoken phrase to the clipboard and automatic reading of email contents in the new Outlook app. - File Explorer: Resolved excessive spacing in the navigation pane and fixed incorrect display of portrait mode RAW images. - Taskbar & System Tray: The taskbar now shows a search box instead of an icon when set to "Search box." - Input: Updated mouse pointer location visibility for high DPI monitors. - Task Manager: Fixed an issue showing zero apps and processes. - Audio: Prevented certain audio devices from setting volume to 100% upon boot or waking from sleep. - Other Fixes: Addressed issues affecting Git functionality on Arm PCs, KERNELMODEHEAP_CORRUPTION bugcheck, domain joining, and DirectAccess connectivity. Known bugs include an error affecting Windows Hello PIN and biometrics for users transitioning to the Canary Channel on Copilot+ PCs, installation rollbacks, crashes in remote access applications, policy application issues for the Digital Markets Act in EEA regions, and desktop background display problems on multiple monitors.
Windows 11 build 26120.2213 (KB5045885) fixes multi-monitor desktop background and more
Winsage
November 5, 2024

Windows 11 build 26120.2213 (KB5045885) fixes multi-monitor desktop background and more

Microsoft has released the Windows 11 Insider Preview Build 26120.2213 (KB5045885) in the Dev Channel. Key changes include the temporary suspension of the Gamepad keyboard feature, improvements to the Start menu, and enhancements for users typing in Chinese or Japanese, such as hiding the IME toolbar in full-screen mode. Fixes include enhanced reliability and corrected spacing in the Start menu, adjustments in File Explorer for navigation pane padding and RAW image display, taskbar improvements including a search box for auto-hide settings, and general fixes for all users addressing game launch issues and Task Manager display problems. Known issues include a problem with desktop backgrounds not displaying correctly across multiple monitors. Windows Insiders receive updates based on Windows 11, version 24H2, with features rolled out gradually and subject to change based on feedback.
KB5044384: Microsoft fixes Windows 11 24H2 UI, 8.63GB update data, SFC, DirectAccess bugs
Winsage
October 25, 2024

KB5044384: Microsoft fixes Windows 11 24H2 UI, 8.63GB update data, SFC, DirectAccess bugs

Microsoft has released an update for Windows 11, version 24H2, identified as KB5044384 and build 26100.2161, categorized as a non-security preview update for October 2024. The update will be rolled out gradually and includes various enhancements and bug fixes. Key features include the ability to disable notification suggestions from specific apps, a redesigned Wi-Fi password dialog, new shortcuts for the Narrator, a Gamepad keyboard layout for Xbox controllers, and changes to the Start menu. Fixes address issues with ALT + Tab, scanner detection, web sign-in problems, and the Windows Disk Cleanup app. Additional quality improvements include a new button for detaching virtual hard disks, support for UTF-8 encoded SSIDs, the introduction of the Windows Sandbox Client Preview, and various UI fixes. The update also expands the list of drivers vulnerable to BYOVD attacks and resolves issues with the sfc /scannow command and DirectAccess connections.
Microsoft deprecates Windows DirectAccess, recommends Always On VPN
Winsage
June 12, 2024

Microsoft deprecates Windows DirectAccess, recommends Always On VPN

Microsoft has announced the deprecation of DirectAccess and advises users to migrate to Always On VPN as soon as possible to avoid downtime or issues. Microsoft has published a migration guide with a phased approach for an easier transition, including setting up the Always On VPN infrastructure alongside DirectAccess. The guide includes details on issuing certifications, deploying VPN configurations, Intune management, and monitoring via Microsoft Endpoint Configuration Manager. After migration, admins should remove the DirectAccess server role, update DNS records, and decommission the server from Active Directory Domain Services.
Search