Microsoft Entra Archives

Winsage

September 24, 2026

Microsoft: September Windows updates break Always On VPN connections

Microsoft has informed IT administrators about potential connection challenges with the Always On VPN after the September 2026 Windows 11 security updates. Users may face difficulties connecting to their organization's network, particularly if the VPN is set to automatically attempt an alternative connection method upon failure. Symptoms include connections remaining in a 'Connecting' state or displaying the error message: 'The specified port is already in use.' Affected versions include Windows 11, version 26H1 (KB5124012), version 25H2 (KB5124008), and version 24H2 (KB5124008). A temporary workaround involves adjusting the Always On VPN profile from automatic protocol selection to a single protocol (SSTP or IKEv2). Microsoft is also addressing various other issues related to Hyper-V, Remote Desktop Services, USB audio, and the File History backup feature.

Winsage

September 9, 2026

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft's September 2026 security update revealed 973 vulnerabilities, with 113 classified as critical. Two actively exploited vulnerabilities are CVE-2026-81963 (Windows Update Stack, elevation of privilege, CVSS 7.8) and CVE-2026-85880 (Windows ALPC, elevation of privilege, CVSS 7.8). Among the 113 critical vulnerabilities, 82 are remote code execution (RCE) vulnerabilities. Notable vulnerabilities include: - CVE-2026-69676: RCE in Windows Kerberos, CVSS 8.8, authentication bypass. - CVE-2026-69852: RCE in Windows RRAS, CVSS 7.5, heap-based buffer overflow. - CVE-2026-72957: RCE in Windows Deployment Services, CVSS 7.8. - CVE-2026-69854: Elevation of privilege in Spring Cloud Azure, CVSS 9.0, improper authentication. - CVE-2026-83501: Information disclosure in Windows VBS, CVSS 5.5. - CVE-2026-69730: RCE in Windows DNS Server, CVSS 9.8. Less likely to be exploited vulnerabilities include: - CVE-2026-69845: RCE in Windows DHCP Server, CVSS 9.8, heap-based buffer overflow. - CVE-2026-65772: Vulnerability in Microsoft Dynamics 365 On-Premises, CVSS 8.8, deserialization of untrusted data. - CVE-2026-66302: RCE in Skype for Business, CVSS 9.8. Additional critical vulnerabilities include: - CVE-2026-62916: Elevation of privilege in Microsoft Entra ID, CVSS 9.1. - CVE-2026-83941: Elevation of privilege in Entra ID, CVSS 9.9. - CVE-2026-80098: Vulnerability in Copilot Studio, CVSS 9.3, improper verification of cryptographic signatures. Talos is releasing a new Snort ruleset to detect attempts to exploit these vulnerabilities, with specific SIDs for Snort 2 and Snort 3 rule coverage.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Winsage

August 10, 2026

Windows 11 26H2 Ships as an Enablement Package With Movable Taskbar, Local Search, and Default Cloud Recovery

Windows 11 version 26H2 is expected to launch around October 2026 as a small enablement package using the same Germanium platform as versions 24H2 and 25H2. Key enhancements include a movable taskbar, expanded Start menu controls, deeper Copilot integration, and new default cloud recovery settings for managed PCs. Users on versions 24H2 or 25H2 will experience a quick upgrade process requiring only one reboot. The taskbar will allow repositioning and smaller icon sizes, and the Start menu will have new configuration options and privacy settings. Search functionality will prioritize local content, with an option to disable web results. The update will enhance cloud-assisted setup and recovery for eligible Microsoft Entra devices, enabling automatic backup of settings and app lists. Copilot will be integrated into Search and File Explorer, and Windows Security will improve Administrator Protection. The support timeline for 26H2 will reset, offering 24 months for Home and Pro editions and 36 months for Enterprise and Education editions. Hardware requirements remain unchanged, and Arm devices on Windows 11 26H1 will not receive the 26H2 update.

Winsage

August 8, 2026

Windows 11 26H2 is a small update with big quality-of-life improvements, expected around October 2026

Windows 11 will undergo a significant transformation with the upcoming annual update, version 26H2, which introduces enhancements to the interface, search functionality, backup processes, and AI integration. The update will allow users to reposition the taskbar to any edge of the screen and adopt a smaller layout with reduced icon sizes. The Start menu will have new configuration options and a privacy feature for hiding account details during screen sharing. Search functionality will prioritize local content over web results, with an option to disable web results entirely. Cloud-assisted setup and recovery will become a default setting for eligible Microsoft Entra devices, automatically saving configuration settings and app lists. Copilot will be more integrated into daily operations, including a dockable side panel in File Explorer. Updates will also be made to traditional system tools, including a modernized Run dialog and enhanced security for administrator-level operations. The support timeline for Windows 11 installations will reset, with Home and Pro editions receiving 24 months of support and Enterprise and Education editions receiving 36 months. The hardware requirements remain unchanged, and the rollout of 26H2 is anticipated in the latter half of 2026, likely around October.

Winsage

August 4, 2026

Microsoft delivered plenty of Windows 11 updates in July — and I’m highlighting the most important changes for your PC

Microsoft has introduced several enhancements to Windows 11 in July 2026, including: - An updated Windows Search that automatically identifies additional relevant folder locations based on user activity. - Enhancements to the Phone Link companion flyout in the Start menu for quick previews of recent messages or notifications. - An adaptive hibernate policy that prevents hibernation when the battery is above 80% and initiates it when below 10%. - Performance improvements in File Explorer, including faster deletion of large files and touch scrolling support. - Streamlined Windows Update process that reduces system restarts by consolidating updates. - New gesture controls for Precision Touchpads to adjust scroll and zoom speeds. - Support for removing smart card policies in Azure Virtual Desktop and Windows 365 sessions. - Improved usability of refreshable Braille displays with Narrator for instant connectivity. - Ability to reposition the Taskbar to any side of the screen for personalization. - Introduction of Voice Isolation for Voice Access to enhance speech recognition in noisy environments.

Tech Optimizer

July 23, 2026

Optimizing PostgreSQL on Azure directly in Visual Studio Code

Poor database performance can lead to missed SLAs, delayed releases, customer dissatisfaction, and lost revenue. Microsoft has enhanced PostgreSQL on Azure, transforming it into a fully managed platform that meets enterprise demands. Azure Database for PostgreSQL and the new Azure HorizonDB offer significant performance improvements, with HorizonDB being three times faster than self-managed PostgreSQL. The PostgreSQL extension for Visual Studio Code integrates performance management into development workflows, providing tools for managing PostgreSQL throughout its lifecycle. Key features include a server metrics dashboard that displays performance indicators, Azure Advisor recommendations for actionable insights, improved query plan visualization, and AI-assisted query analysis. The extension also enhances schema design and query formulation experiences, ensuring secure and governed interactions with PostgreSQL. Azure HorizonDB is in public preview, designed for AI-native workloads. These advancements aim to reduce friction, enhance clarity, and enable faster actions for enterprise teams managing PostgreSQL at scale.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Winsage

July 17, 2026

Windows 11 Gets Policy to Automatically Grant SSO Permissions

Microsoft has introduced a new policy to simplify the Windows sign-in process for IT administrators by allowing automatic approval of Single Sign-On (SSO) permissions on eligible managed devices. This feature will be available with the July 2026 security update for Windows 11 versions 24H2 and 25H2. Users in the European Economic Area (EEA) have been facing prompts for consent due to regulatory changes, prompting Microsoft to streamline access for managed devices. IT administrators can use a specific registry setting (HKLMSOFTWAREPoliciesMicrosoftWindowsAAD, Value: AutoAcceptSsoPermission (DWORD) = 1) to automatically grant SSO permissions. This feature is designed for managed enterprise devices linked to Microsoft Entra ID and does not affect personal accounts or unmanaged devices. Organizations must ensure their devices are updated and can enable the feature through various enterprise management tools.

Winsage

July 16, 2026

Microsoft makes Windows SSO prompts easier to manage

Microsoft is introducing a registry-based policy to improve the management of Single Sign-On (SSO) permissions for devices running Windows 11 versions 24H2 and 25H2, specifically for those managed through Microsoft Entra ID. This policy allows IT administrators to automatically accept SSO permissions, enhancing the user experience in corporate environments. Users with personal Microsoft accounts or unmanaged devices will still receive prompts for SSO permissions. The change aims to provide users, particularly in the European Economic Area (EEA), with more control over their account usage across Microsoft applications. Deployment options for IT administrators include Group Policy, Microsoft Intune, other mobile device management solutions, Microsoft Configuration Manager, and any management tool that supports registry policy deployment. Administrators are advised to validate SSO behavior after deployment.