mobile device management Archives

Winsage

July 31, 2026

Microsoft Ended Windows 10 Support, but You Don’t Necessarily Need a New PC

On October 14, 2025, Microsoft ceased support for Windows 10, which means it will no longer receive technical assistance, feature updates, or security patches. Microsoft has introduced the Extended Security Updates (ESU) program, which has been extended to October 2027, allowing users to continue receiving essential security updates if their device meets specific criteria. Eligibility for ESU includes running Windows 10, version 22H2 Home, Professional, Pro Education, or Workstations edition, having the latest Windows update installed, being signed in with an administrator Microsoft account, and enabling Windows Backup. ESU is free for users utilizing Windows Backup; otherwise, a one-time fee or redeeming 1,000 Microsoft Rewards points is required. For devices not qualifying for ESU, alternatives include installing third-party antivirus software, upgrading to Windows 11, or switching to Linux. To enroll in ESU, users can navigate to Settings > Update & Security > Windows Update, where an Enroll Now link will appear if eligible.

Winsage

July 30, 2026

Windows 11 KB5101684 update released with 42 changes and fixes

Microsoft has released the KB5101684 preview cumulative update for Windows 11 versions 24H2 and 25H2, which includes 42 bug fixes and various enhancements. This update is part of the optional non-security preview update schedule and does not include security updates. Users can install it via Settings > Windows Update > Check for Updates, with an option to choose installation. The update elevates Windows 11 24H2 to build 26100.8973 and Windows 11 25H2 to build 26200.8973. It addresses issues such as false invalid credential errors in File History backups, noncompliance in newly enrolled devices, and incorrect file markings on DFS mapped drives. New features include enhanced navigation in File Explorer, more accurate file size indicators, improved search results for app names, and new precision touchpad controls. Voice Isolation support for Voice Access is introduced, along with expanded Windows Hello Enhanced Sign-in Security for external fingerprint readers. Immediate features include enhancements to Secure Boot, app stability improvements, and fixes for MDM compliance issues. Additional features rolling out post-update involve better file size displays in File Explorer, enhanced app search, Voice Isolation for voice access, taskbar notification badge updates, new touchpad gesture controls, and reliability improvements for the Start menu and Windows sign-in screens. Microsoft reports no known issues with this update.

Winsage

July 16, 2026

Microsoft makes Windows SSO prompts easier to manage

Microsoft is introducing a registry-based policy to improve the management of Single Sign-On (SSO) permissions for devices running Windows 11 versions 24H2 and 25H2, specifically for those managed through Microsoft Entra ID. This policy allows IT administrators to automatically accept SSO permissions, enhancing the user experience in corporate environments. Users with personal Microsoft accounts or unmanaged devices will still receive prompts for SSO permissions. The change aims to provide users, particularly in the European Economic Area (EEA), with more control over their account usage across Microsoft applications. Deployment options for IT administrators include Group Policy, Microsoft Intune, other mobile device management solutions, Microsoft Configuration Manager, and any management tool that supports registry policy deployment. Administrators are advised to validate SSO behavior after deployment.

Winsage

July 16, 2026

Windows 11 gets new registry policy to give IT admins more control

Microsoft will introduce a new registry policy in Windows 11 in July 2026 that allows IT administrators to enable automatic acceptance of single sign-on (SSO) prompts on managed devices. This policy will streamline user authentication by using Windows sign-in credentials automatically for Microsoft apps or services, reducing the need for manual authentication. The registry path for this policy is HKLMSOFTWAREPoliciesMicrosoftWindowsAAD, with the value AutoAcceptSsoPermission (DWORD) set to 1. It can be deployed using Group Policy Objects (GPO), Intune, Microsoft Configuration Manager, or mobile device management (MDM) tools. This setting is applicable only to Windows 11 versions 25H2 and 24H2 that have received the July 2026 Patch Tuesday updates (KB5101650 and KB5094126) and is designed for managed devices using Entra ID accounts, not personal Microsoft accounts or unmanaged devices.

Winsage

July 7, 2026

Microsoft to enable Windows settings backup by default for orgs

Microsoft will enable the Windows settings backup and restore tool by default for enterprise systems joined to Microsoft Entra or operating in a hybrid environment with the upgrade to Windows 11 version 26H2. This tool, previously known as Windows Backup for Organizations, assists users in backing up and restoring Windows settings after events like device resets or upgrades. The tool debuted at the Microsoft Ignite conference in November 2024, became publicly available in August 2025, and requires the September 2025 Windows Monthly Cumulative Update for access. The default-on setting applies only to eligible devices where administrators have not set the policy otherwise, and IT administrators can manage this through mobile device management solutions. Restore functionality will not be enabled by default and requires administrative configuration. The default-on behavior will also be available in the Windows Insider Program Experimental channel starting July 2026.

Winsage

June 27, 2026

How to get free Windows 10 security patches until October 2027 – and avoid the $30 fee

Microsoft has officially ended support for Windows 10, but users can receive critical security updates until October 12, 2027, through the Extended Security Updates (ESU) program at no cost. To qualify, users must have a Windows 10 PC running version 22H2 or later and sign in with a Microsoft account, excluding Enterprise and Education editions. In the European Economic Area, customers automatically qualify for free ESU subscriptions without needing a Microsoft account. Enrollment can be done through Settings > Windows Update, and users may need to back up their settings or redeem Microsoft Rewards points. Business customers must purchase ESU subscriptions at a higher cost. Users should be cautious of potential issues, such as cloud storage consumption during backup.

Winsage

June 26, 2026

Microsoft extends free Windows 10 security updates for consumers

Microsoft has extended its free Windows 10 Extended Security Updates (ESU) program for consumers to provide essential security updates until October 12, 2027. This extension allows users more time to transition to Windows 11, as Windows 10 will no longer receive support after October 14, 2025. The initial expiration date for the free ESU program was October 12, 2026. Consumers can access these updates by backing up their Windows settings, redeeming 1,000 Microsoft reward points, and for users in the European Economic Area, logging into Windows 10 with a Microsoft account. An ESU license can be used on up to 10 devices linked to the same Microsoft account, but the program is not available for systems managed through Active Directory or Mobile Device Management, though devices registered with Microsoft Entra are eligible.

Winsage

June 25, 2026

Microsoft quietly extends free Windows 10 ESU support to October 2027

Microsoft has extended the free coverage of its Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, now lasting until October 12, 2027. This change was noted in updates to Microsoft's ESU documentation and a blog post. Previously, Windows 10 was set to reach its end of support on October 14, 2025, with initial ESU coverage expiring on October 12, 2026. Consumers can access the extended security updates through various methods, including payment, backing up settings to a Microsoft account, redeeming Microsoft reward points, or for users in the European Economic Area, by logging in with a Microsoft account. Each ESU license can be used on up to 10 devices linked to the same account, and the program is only for personal devices, not those managed through Active Directory or MDM.

AppWizard

June 5, 2026

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A vulnerability in several Microsoft 365 Android applications, identified as FlagLeft, was caused by a development flag left enabled in production builds, which disabled checks meant to restrict account-token sharing to trusted applications. This flaw affected applications such as Word, PowerPoint, Excel, Microsoft 365 Copilot, Microsoft Loop, and OneNote, allowing unauthorized apps to request and obtain user tokens without permission. Microsoft Teams was unaffected. The vulnerability was demonstrated by Enclave, allowing access to user emails through an unverified app. On May 12, Microsoft issued four CVEs for the affected applications, categorized under improper access control. The patched version of Word for Android is 16.0.19822.20190, and users are advised to update their applications. The patch does not invalidate already compromised tokens, so users should revoke these tokens and sign in again.

Winsage

June 4, 2026

ADCS Now Generates Post-Quantum Certificates For Windows

Active Directory Certificate Services (ADCS) now supports the generation of post-quantum certificates, enhancing quantum-safe cryptography within Windows' secure connection protocols. Microsoft has integrated PQ TLS hybrid key exchange into the Windows Transport Layer Security (TLS) stack, providing protection against "Harvest Now, Decrypt Later" attacks. The PQ TLS hybrid key exchange combines traditional cryptographic methods with the NIST ML-KEM algorithm, offering three hybrid combinations: X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1_MLKEM1024. This feature is available in preview via the Windows Insider Program and will be rolled out to Windows 11 and Windows Server. Additionally, Windows cryptography APIs now support composite ML-KEM and ML-DSA algorithms, which are NIST-approved standards for key exchange and digital signatures, enhancing security by requiring multiple components to be compromised. Microsoft emphasizes the importance of establishing new Certification Authorities (CAs) for implementing post-quantum certificate issuance, as existing CAs cannot be upgraded. The introduction of ML-DSA support within ADCS allows organizations to counter HNDL risks associated with long-lived data. Organizations are encouraged to inventory their use of public-key cryptography, prioritize systems protecting sensitive data, and test hybrid and composite approaches in non-production environments to facilitate a smooth transition to quantum-safe cryptography.