IT administrators Archives

Winsage

June 30, 2026

Microsoft 365 apps downloaded via MS Store is losing support on Windows 11, verify if you’re affected

Microsoft has announced the end of support for the Microsoft Store version of Microsoft 365 Apps. Support for this installation type will cease, with new feature updates ending in October 2025 and security updates concluding in December 2026. Users with the Store installation must upgrade to the Click-to-Run installation type. The Store installation uses Appx packaging and aligns updates with Windows Update, resulting in slower feature rollouts, while Click-to-Run allows for faster updates and better enterprise management. The transition to Click-to-Run is necessary due to limitations in the Store installation, including a lack of support for XML configuration and essential enterprise management tools. Users can check their installation type through the Account section of any Microsoft 365 app. Transitioning to Click-to-Run involves downloading the Office Deployment Tool, which will automatically remove the Store version and reinstall Office using Click-to-Run. IT administrators can also use the Office Deployment Tool for automatic transitions across multiple devices.

Winsage

June 28, 2026

Microsoft is quietly reinstalling Copilot on Windows 11

Microsoft has resumed the automatic installation of the Microsoft 365 Copilot app on eligible commercial Windows 11 devices that use Microsoft 365 desktop applications. The rollout began in mid-June 2026 and is expected to continue into early July. The app is delivered through the Office updater and is enabled by default, requiring organizations to opt out if they do not want it. This initiative excludes countries within the European Economic Area due to stricter regulations. The move aims to simplify access to AI tools but has faced criticism regarding user consent and control over software installations.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 22, 2026

Windows 11 version 26H2: Microsoft details rollout strategy

Microsoft is enhancing its enterprise offerings with Microsoft Intune, a cloud-based service for managing mobile devices and applications. Intune allows IT administrators to control device usage, ensuring compliance with corporate policies, securing sensitive data through application management, and providing employees with flexible access to corporate resources from personal devices. Additionally, Microsoft promotes Microsoft Learn, an educational platform to help users understand Intune and other services.

Winsage

June 22, 2026

Microsoft Urges IT Admins to Prepare for Windows 11 Version 26H2 Rollout

Microsoft is preparing for the release of Windows 11 version 26H2, which aims to streamline the upgrade process for organizations. This version will be available for testing through the Windows Insider Program and utilizes a compact enablement package for a quicker transition from supported versions like 24H2 and 25H2. Devices on Windows 11 version 26H1 will not be able to upgrade to 26H2, as it is based on a different core. Upgrading to version 26H2 resets the support lifecycle, providing 24 months of support for consumer and standard business editions and 36 months for enterprise and education editions. Organizations are encouraged to test the update for compatibility and use deployment tools for a phased rollout.

Winsage

June 21, 2026

Microsoft reveals how to verify Windows 11’s Secure Boot update, what to do if your PC missed it

The expiration of Microsoft's Secure Boot 2011 certificates on June 24 will not prevent older Windows PCs from booting, as confirmed by Microsoft. Devices will continue to operate normally, but they will miss future boot-level security updates, including updates to the Windows Boot Manager and mitigations for newly identified vulnerabilities. The ability to receive the Secure Boot 2023 update depends on the device firmware's compatibility, with many manufacturers, including Dell, HP, Lenovo, and ASUS, having cutoffs for BIOS updates based on the device's End of Service Life. Older PCs using Legacy BIOS or Compatibility Support Module (CSM) mode do not utilize UEFI Secure Boot, making the update irrelevant. Users running Windows 11 on unsupported hardware may have Secure Boot disabled or improperly configured. Without the 2023 certificates, devices cannot receive future revocation updates to the Secure Boot DBX, which lists compromised bootloaders. Users on Windows 10 with supported OEMs may receive the update if a compatible BIOS is available, while those on older PCs without updates can continue using their devices but will lack future security updates. The Secure Boot status can be checked through the Windows Security app, with color-coded badges indicating the status of the certificates.

Winsage

June 21, 2026

Microsoft confirms Windows 11 26H2, urges IT admins to prepare for release

Microsoft has introduced a "26H1" version of Windows 11, which is a scoped build for select new silicon PCs and not accessible to users on the 24H2 and 25H2 builds. The company is preparing for the release of version 26H2, which will be delivered as a small enablement package (eKB) to activate features already in the operating system's code. Users of Windows 11 26H1 will not be able to upgrade to 26H2 as they operate on different branches. Windows 11 26H2 will have a support cycle of 24 months for Home, Pro, Pro EDU, and Pro for Workstations editions, and 36 months for Enterprise, Education, IoT Enterprise, and Enterprise Multi-session editions. A specific release date for Windows 11 26H2 has not been announced, but it is expected to roll out soon, potentially in early October 2026. IT administrators are advised to validate Windows Insider releases and prepare rollout strategies.

Winsage

June 18, 2026

Microsoft fixes Windows Server 2016 security update failures

Microsoft resolved an installation issue affecting the June 2026 security updates (KB5094122) on Windows Server 2016 systems that had not previously installed the KB5087537 update, which was a prerequisite. Users had encountered 0x80070002 or FILENOTFOUND errors. Microsoft acknowledged the problem and confirmed that affected devices should no longer experience installation failures for the June 2026 update. Additionally, Microsoft fixed a similar issue with the May 2026 Windows 11 security update (KB5089549) that resulted in 0x800f0922 errors due to insufficient space on the EFI System Partition. They also warned users about potential installation issues with error codes 0x80073712 or 0x800f0993 on devices upgraded to Windows 11 24H2 or 25H2. Furthermore, Microsoft addressed a boot issue for Windows Server 2025 devices after the April 2026 update and a bug affecting installation failures for updates since May 2025 using the Windows Update Standalone Installer (WUSA). Lastly, they are investigating a separate issue preventing third-party applications from launching essential Office programs after the June 2026 updates.

Winsage

June 16, 2026

Microsoft Teams will auto-detect when you’re at the office via Wi-Fi, roll out confirmed, but you can opt-out

Microsoft is rolling out a feature called "Workplace check-in" that allows organizations to track employee presence in the office through Wi-Fi connectivity, integrated with Microsoft Teams and configured via Microsoft Places. This feature, first noted in September 2025, will not be enabled by default. It logs an employee's location when they connect to the company’s Wi-Fi, such as when they arrive at the office. The rollout was delayed due to privacy concerns, but Microsoft is moving forward, ensuring users can control their participation. The feature does not provide real-time tracking like mapping services but indicates presence based on Wi-Fi connection. Users must grant location access through their operating system, and if they decline, IT policies cannot override this choice. Teams’ Workplace check-in is disabled by default and can be activated by IT administrators with two options: Inform mode, which notifies users of the feature and allows opting out, and Ask mode, which requests permission to share location data. Microsoft clarifies that the feature is not intended for surveillance and does not track movements over time. Employees can choose whether their presence is visible to others while on-site. The initial rollout is tied to organizations using the Microsoft Places directory, and as organizations set up the feature, more users will likely be affected. Additionally, Microsoft is enhancing Teams with improvements for speed and a new user interface for meetings.