IT administrators Archives

Winsage

April 13, 2026

Microsoft tightens Windows 11 driver security rules

Microsoft will enforce a new mandate requiring all hardware drivers to comply with the Windows Hardware Compatibility Program (WHCP) standards starting April 1, 2026. This change will eliminate the "cross-signing" system that allowed older drivers with expired certificates to remain trusted. The enforcement of WHCP certification will apply to various versions of Windows 11 and Windows Server 2025. Users may face blocks when installing older drivers on new systems, but existing installations will not be immediately disrupted. Microsoft plans to introduce an "allow list" for vetted legacy drivers to ensure essential equipment remains operational during the transition. The initial rollout will occur in "evaluation mode," allowing Microsoft to monitor driver behavior without blocking software. For corporate environments, Microsoft offers "Application Control for Business" to allow specific software while maintaining security measures.

Winsage

April 8, 2026

Microsoft Rolls Out New Defender Update for Windows 11, 10, and Server Images

Microsoft released a security intelligence update for Microsoft Defender Antivirus on April 7, 2026, enhancing protection for Windows 11, Windows 10, and Windows Server. The update introduces refined threat detection capabilities to combat malware and zero-day attacks, utilizing advanced detection logic and cloud-based protection. The security intelligence version is 1.447.209.0, engine version is 1.1.26020.3, and platform version is 4.18.26020.6. Updates are automatically delivered via Windows Update, but can also be manually initiated or deployed using standalone installer packages. The update supports legacy platforms, including Windows 7 and Windows 8.1, provided they have SHA-2 code signing support enabled. Additionally, updates to the Network Inspection System (NIS) are available for certain environments.

Winsage

April 7, 2026

How to prevent updates on Windows 10 desktops

Organizations may pause or block Windows updates to maintain system stability and compatibility, particularly to avoid disruptions with legacy applications or customized environments, manage bandwidth consumption, and protect fortified Windows configurations. IT departments can disable updates using several methods: 1. Centralized patch management tools like WSUS or Microsoft Intune allow control over update deployment. 2. Configuring Group Policy settings can notify users of available updates without automatic installation. 3. Disabling the Windows Update service halts all future updates until re-enabled. 4. Setting a connection as metered can reduce automatic updates, though some critical updates may still download. In Windows 11, similar strategies apply, but organizations must consider the risks of blocking updates due to the end of regular security updates for Windows 10 and align their strategies with Microsoft's evolving update delivery methods.

Winsage

April 5, 2026

Microsoft Ships Emergency Windows 11 Fix for Broken Patch

On March 31, Microsoft released emergency update KB5086672 in response to issues caused by the previous preview patch KB5079391, which left many Windows 11 devices in a loop with error code 0x80073712, blocking access to March security fixes. Microsoft withdrew KB5079391, which was launched on March 26, and replaced it with KB5086672, a cumulative update that includes all fixes from March 2026. KB5086672 supersedes previous updates, including KB5079473, KB5085516, and KB5079391. Users with the "Get the latest updates as soon as they’re available" setting will receive KB5086672 automatically, while others can manually check for updates or download it from the Microsoft Update Catalog. Microsoft has been issuing multiple emergency updates recently, raising concerns about the quality of its update pipeline, with a history of emergency patches for various issues affecting Windows 10, Windows 11, and Windows Server. The issues from KB5079391 may resurface in the upcoming April cumulative update.

Winsage

April 3, 2026

Man admits to locking thousands of Windows devices in extortion plot

A former core infrastructure engineer, Daniel Rhyne, admitted to locking Windows administrators out of 254 servers during an extortion attempt against his employer in Somerset County, New Jersey. Rhyne accessed the company's network without authorization from November 9 to November 25, deleting network admin accounts and altering passwords for 13 domain admin accounts and 301 domain user accounts to "TheFr0zenCrew!". He also scheduled tasks to modify passwords for two local admin accounts affecting 3,284 workstations and planned to shut down random servers and workstations in December 2023. On November 25, he sent a ransom email demanding 20 bitcoin, claiming IT administrators were locked out and server backups erased. Forensic investigators found he used a concealed virtual machine to plan his actions. Rhyne was arrested on August 27 and faces charges related to hacking and extortion, with a potential maximum sentence of 15 years in prison.

Winsage

April 3, 2026

New out-of-band Windows 11 update fixes March’s installation errors – how to get it

Microsoft faced backlash due to the March non-security preview update (KB5079391) for Windows 11, which caused installation errors for many users. In response, Microsoft paused the initial update and released an out-of-band update (KB5086672) on March 31, 2026, to address these issues. The new update includes all enhancements from the previous update and fixes the installation problems. Users set to receive preview updates will automatically download KB5086672, while others can manually check for it in the Windows Update settings. Users can also manage their preferences for optional preview updates through the Windows Update screen.

Winsage

April 2, 2026

Microsoft Provides a Secure Boot Certificate Update

Microsoft will roll out new Secure Boot certificates starting in April 2026, allowing users to access and understand their Secure Boot certificate status through the Windows Security app. This feature will be found under the Device security section in the Secure Boot area. Users with PCs manufactured in 2024 or later will have the necessary certificates, while older models will receive updates via Windows Update. The Windows Security app will use a color-coded system to indicate certificate status: a green check box for up-to-date certificates, a yellow bang for safety recommendations, and a red stop icon for critical issues. Further enhancements, including notifications and in-app guidance, will be introduced in May. Resources for IT administrators are available on Microsoft Support.

AppWizard

April 2, 2026

How to use and deploy Android Work Profile in your business

The mobile device has become a dual-purpose tool for personal and professional needs, enhancing productivity but also introducing security challenges for organizations with bring-your-own-device (BYOD) policies. Samsung addresses these challenges with its Android Work Profile feature, which separates business applications and data from personal content on devices like the Galaxy S26 Series, Galaxy Z Fold7, and Galaxy Z Flip7. Android Work Profile creates two isolated profiles on a single device, allowing IT teams to manage corporate applications while keeping personal information private. IT administrators can monitor work profile applications and data but cannot access personal profiles, ensuring employee privacy. Employees can easily switch between work and personal applications and activate a “pause work apps” feature during off-hours. To set up Android Work Profile, organizations need an Enterprise Mobility Management (EMM) solution and the Android Device Policy app. The Samsung Knox Suite provides tools for managing and securing devices, including Knox Mobile Enrollment and Knox Attestation. Android Work Profile benefits businesses by enhancing data security and reputation while promoting work-life balance for employees.

Winsage

March 31, 2026

Announcing Windows 11 Insider Preview Build 26300.8142 (Dev Channel)

Windows 11 Insider Preview Build 26300.8142 (KB 5079492) has been released to the Dev Channel. Key updates include: - Administrator Protection: IT administrators can enable this feature in Settings under Privacy & Security > Windows Security > Account Protection, requiring a restart to apply changes. - Touchpad: A new setting allows users to adjust the size of the right-click zone (default, small, medium, large) for touchpads with a pressable surface. - Task Manager: Enhancements include new columns for NPU usage, NPU Dedicated Memory, NPU Shared Memory, and an optional Isolation column for identifying apps running in an AppContainer. - Windows Protected Print Mode: A new icon has been introduced. - Accessibility: An issue affecting Braille use for Insiders in previous builds has been resolved. Features are rolled out gradually, and feedback can be shared via the Feedback Hub. The desktop watermark is a normal occurrence for Insider pre-release builds, and some features may not be released or may change before the final version.

Winsage

March 28, 2026

Windows PCs Crash 3x More Than Macs, Data Confirms

Windows devices experience forced shutdowns 3.1 times more frequently than Macs, crash 2.2 times more often, and have application freezes 7.5 times more than macOS. Each disruption costs nearly 24 minutes of refocus time. macOS updates are deployed 1.5 times faster than Windows updates due to a centralized deployment model. Apple’s M-series processors operate at 40.1°C, while Intel chips run at 65.2°C, leading to less thermal stress and longer lifespan for Macs. Only 2% of Windows machines last beyond six years, compared to 11.5% of Macs. 90% of Windows devices are replaced within three years, while enterprise Macs tend to last around five years.