IT administrators Archives

Winsage

August 10, 2026

Azure Arc-Enabled ESUs for Windows Server 2016 Now Available

Microsoft is offering Extended Security Updates (ESUs) for Windows Server 2016, which will provide critical security patches until January 2030, after the end of extended support on January 12, 2027. Organizations can enroll their Windows Server 2016 instances via Azure Arc to receive these updates without migrating to Azure. The ESUs are available through a pay-as-you-go pricing model, allowing flexibility for on-premises servers and other cloud platforms. By using Azure Arc, organizations gain access to Azure management tools for improved visibility and compliance. IT administrators should connect eligible systems to Azure Arc to manage ESU enrollment and compliance effectively. ESUs are intended as a temporary solution while businesses modernize applications and plan migrations to supported platforms.

Winsage

August 9, 2026

Microsoft confirms it accidentally installed new OneDrive app on Windows 11 PCs, and there’s no easy way to remove it yet

Microsoft has unintentionally rolled out its AI-powered OneDrive Photos app on Windows 11, affecting enterprise PCs where it is non-functional. The app was initially limited to select consumer PCs but became widely available starting August 1, 2026. Microsoft confirmed that this rollout was not intended and is working on a solution to allow users to remove OneDrive Photos independently from the OneDrive sync client. Currently, the app cannot be uninstalled without removing OneDrive entirely. OneDrive Photos serves as a centralized hub for viewing images stored locally and in the cloud, integrating with OneDrive.com’s Gallery. It appears in search results above the traditional Microsoft Photos app, even on systems not part of the Windows Insider Program. IT administrators have expressed frustration over its unexpected presence on enterprise PCs, as the app is designed for personal accounts.

Winsage

August 7, 2026

Microsoft admits it force-installed AI-powered OneDrive on Windows 11, says it’s not training on your faces (really)

Microsoft has confirmed that it has force-installed the OneDrive Photos app on Windows 11 PCs, including enterprise devices managed through Intune, despite the app being designed for personal Microsoft accounts only. IT departments can either remove OneDrive entirely or keep both the sync client and the new app. Microsoft acknowledged the unintended rollout but has not provided further clarification. The OneDrive Photos app features an AI-enhanced "People" feature, which is disabled by default and does not analyze photos stored solely on users' PCs. Face grouping occurs only in the cloud on images stored in OneDrive, and any data collected is deleted within 30 days if the feature is turned off. Users currently cannot remove the app independently; doing so requires the complete removal of OneDrive. An update is expected to allow users to uninstall the OneDrive Photos app separately.

Winsage

August 6, 2026

Windows 11 will run better because of the Apple effect, says IDC

Apple's launch of the MacBook Neo has prompted Microsoft to reassess and improve Windows 11 due to user complaints about the operating system's performance and resource demands. Global PC shipments are projected to decline by 11.3% in 2026, with a significant drop of 20% expected in the fourth quarter, attributed to a memory shortage. Microsoft announced plans to reduce RAM usage in Windows 11, targeting completion by the end of 2026, which will benefit PCs with 8GB and above. Following the MacBook Neo's release, a benchmark showed that Windows machines had more RAM and storage than Apple's model, but performance issues persist, with Microsoft Word launching slower on Windows 11 compared to MacBooks. Microsoft is addressing these performance issues by replacing legacy components with the WinUI framework to reduce memory usage and enhance overall performance.

Winsage

August 4, 2026

Microsoft never learns, IT admins rage as a new OneDrive app invades Windows 11 and keeps coming back when you remove it

Microsoft has begun silently installing the "OneDrive Photos" app on Windows PCs, including enterprise systems managed via Microsoft Intune, without prior notification. IT professionals have expressed significant frustration over this unexpected addition, noting that the app is incompatible with Entra accounts and cannot be removed without uninstalling OneDrive entirely. The app functions as a web-based gallery feature, indexing and displaying photos stored on local machines, but its necessity is questioned due to the existing Microsoft Photos app. OneDrive Photos is linked to the OneDrive sync client, making it impossible to uninstall independently. Users have reported that the app appears in Windows Search results with an 'Uninstall' option but does not show up in the Installed apps page, leading to confusion. A script has been developed to remove the shortcut, but it often reappears due to its connection with the OneDrive sync client. Discussions with Microsoft suggest that the rollout may have been unintended, with an apology expected soon.

Winsage

August 4, 2026

Microsoft Expands Windows Hello ESS to External Fingerprint Readers

Microsoft is integrating Windows Hello Enhanced Sign-in Security (ESS) with compatible external fingerprint readers, allowing passwordless sign-ins on a wider range of Windows 11 devices. This update enhances biometric authentication security by utilizing hardware-backed protections such as the Trusted Platform Module (TPM) and Virtualization-Based Security (VBS), which isolate sensitive biometric data from malware and unauthorized access. Previously, only devices with integrated fingerprint sensors could fully utilize ESS, but the recent update (KB5101684) enables external fingerprint readers to function within the ESS framework. The update is being rolled out for Windows 11 versions 25H2 and 24H2, and users can set up fingerprint authentication by connecting a compatible reader. This advancement aids IT administrators in implementing passwordless authentication while maintaining security protocols.

Winsage

August 1, 2026

Microsoft brings a long awaited “game changer” Windows 11 tool for IT admins

Microsoft announced enhancements for Windows 11 aimed at optimizing performance and resource utilization, potentially reconsidering the minimum system requirements. A new tool for IT administrators was introduced in the July Intune update (Service Release 2607), which includes native support for Registry Inventory. This feature allows administrators to assess system configurations more accurately, aiding in troubleshooting, compliance, and security. The Registry Inventory feature operates through Intune's Properties catalog, enabling administrators to monitor specific registry keys. Detailed reports are generated for each configured entry, providing information on registry key paths, value names, types, and data. The data collected is accessible from the Device inventory page, and the initial release supports common collection patterns for HKEYLOCALMACHINE (HKLM) registry paths. Registry Inventory is included with Microsoft Intune Plan 1. Other enhancements in the Intune update include management capabilities for Samsung firmware updates.

Winsage

July 29, 2026

Microsoft Intune Adds macOS Compliance and Samsung Update Controls

Microsoft's July Intune update includes enhancements for IT administrators, such as real-time monitoring of Windows device sync progress, custom compliance settings for macOS, and improved firmware update management for Samsung devices. The Intune admin center now allows real-time monitoring of sync progress for Windows devices, enabling simultaneous updates across various management aspects. Custom compliance settings for macOS enable organizations to define specific compliance requirements beyond Apple's standard checks, allowing for a unified compliance management experience across Windows, Linux, and macOS. The update also enhances Samsung Galaxy firmware management through Samsung Knox E-FOTA, allowing administrators to control firmware version deployment and update schedules. Additionally, the update clarifies that newer Windows Autopilot methods allow provisioning of Windows 11 devices without prior registration.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 22, 2026

Redmond’s reaper cometh: October 2026 set to bury a graveyard of Microsoft products

October 2026 will see the end of support for several Microsoft products, including Office LTSC 2021, which requires organizations to transition to LTSC 2024 or Microsoft 365 for continued support. Windows Server 2022 will exit mainstream support on October 13, 2026, while Windows 11 24H2 Home and Pro editions will also reach their end of life on the same date. The enterprise and education versions of Windows 11 23H2 will be supported until November 10, 2026. Publisher 2021 will be discontinued without a successor. Additionally, Entra ID Sign-In risk policies will be phased out on October 1, 2026, necessitating a transition to Conditional Access to maintain user and sign-in risk protection. SQL Server 2017 is scheduled for retirement in October 2027.