policy update Archives

Winsage

May 2, 2026

“Xbox mode is easily the headline feature”: In May’s Windows 11 update, I walk through the 11 upgrades that change how we use the OS, and why some of them surprised me

Microsoft will begin rolling out the May 2026 Security Update for Windows 11 on May 12, 2026. Key features of this update include: 1. Xbox Mode: Transforms PCs into a console-like experience, prioritizing system resources for gaming and freeing up to 2GB of memory. 2. Voice Typing Improvements: Redesign of Voice Typing elements on the touch keyboard. 3. New Arabic 101 Legacy Keyboard Layout: Available for addition from the Region page in Settings. 4. Drop Tray Changes: Renamed from Drag Tray and can be disabled in Settings > System > Multitasking. 5. Taskbar AI Agents Support: Allows monitoring of AI agents directly from the Taskbar, starting with the Microsoft 365 Copilot app. 6. Debloat Policy with Dynamic List Support: Enables administrators to specify additional apps for removal beyond the default list. 7. Windows Driver Policy Update: Changes how the kernel manages trust for third-party drivers, eliminating default trust for cross-signed drivers. 8. Batch File Security Changes: Enhances security for batch files and Command Prompt scripts, with an option for a hardened processing mode. 9. Format FAT32 up to 2TB: The format command-line tool now supports formatting volumes up to 2TB using FAT32.

Winsage

March 14, 2026

Announcing Windows 11 Insider Preview Build 26220.8062 (Beta Channel)

Windows 11 Insider Preview Build 26220.8062 (KB 5079458) has been released to the Beta Channel, introducing various changes and improvements. 1. Policy-Based Removal of Preinstalled Microsoft Apps: IT administrators can now use a dynamic app removal list to remove MSIX/APPX apps by adding their package family names through Group Policy. The dynamic list is not yet available in Intune CSP. 2. Windows Setup Experience: Users can select a custom name for their user folder during the Windows setup process, which must adhere to standard naming conventions. 3. Windows Driver Policy Update: A new policy removes default trust for cross-signed drivers, allowing third-party drivers from the Windows Hardware Compatibility Program (WHCP) by default. The feature will initially operate in audit mode for at least 100 hours. 4. Point-in-Time Restore Updates: Local administrators will see a settings dialog to view or modify default restore settings, including a list of available restore points. Updated messaging has been added to the restore experience. 5. Drag Tray Rebranding: The Drag Tray has been rebranded as Drop Tray, with settings relocated to System > Multitasking. 6. Pen Settings: Refinements have been made to the Pen settings page, including an option for the pen tail button to launch the same app as the Copilot key. 7. File Explorer and Other Enhancements: Improvements have been made to the reliability of setting the preferred display language, and unexpected errors from the sfc/scannow command have been removed. Updates are gradually rolled out to Insiders who opt in via Settings > Windows Update, and features may evolve or be removed based on feedback.

Winsage

March 13, 2026

Announcing Windows 11 Insider Preview Build 26300.8068 (Dev Channel)

Windows 11 Insider Preview Build 26300.8068 (KB 5079464) has been released to the Dev Channel. Key changes include: - Enhanced policy for removing preinstalled Microsoft Store apps for Windows ENT/EDU, allowing IT administrators to use a dynamic app removal list via Group Policy. - Users can now select a custom name for their user folder during the Windows setup process. - A new policy removes default trust for cross-signed drivers, allowing third-party drivers from the Windows Hardware Compatibility Program (WHCP) by default, initially operating in audit mode. - Point-in-time restore now includes a settings dialog for local administrators and displays available restore points. - Microsoft 365 Family subscribers can upgrade their plan directly from the Accounts page in Settings. - The Drag Tray feature has been rebranded to Drop Tray, with settings relocated. - Updates to Pen settings include a new option for the pen tail button. - Enhanced reliability for preferred display language settings and removal of an unexpected error from sfc/scannow. Updates are gradually rolled out to users who opt in through the Settings menu under Windows Update.

Winsage

January 20, 2026

Microsoft Edge finally lets you hide the Copilot icon from the browser’s toolbar — Are you clicking “remove”?

Microsoft has released an update for its Edge browser, version 144.0.3719.82, which includes bug fixes, feature enhancements, and improvements. Key fixes include resolving a browser crash during file uploads. New features include: - Default Profile for External Links: Uses the Primary Work Profile for opening external links. - Management Enrollment Token Policy Update: Requires configuration directly from the platform. - Performance Settings Update: Renames efficiency mode to "Energy Saver" and PC gaming feature to "PC Gaming Boost." - Tenant Restrictions v2 (TRv2): Blocks access from unauthorized Microsoft 365 tenants. - Copilot Icon Management: Users can manage the visibility of the Copilot icon in the toolbar. - Contextual Nudges: Provides summaries of open pages from the address bar. - Enhanced Autofill Experience: Prompts users to save addresses intentionally. - Desktop Visual Search: Allows sending images to Bing Visual Search for identification. The update also allows users to hide the Copilot icon and discontinues the Collections feature.

AppWizard

January 1, 2026

Vietnam’s dominant messaging app faces regulatory scrutiny over data policy update

Vietnam’s National Competition Commission (NCC) has ordered VNG Corporation to revise its updated service terms for the Zalo messaging app due to user privacy concerns. The NCC emphasized that users should not be forced to consent to personal data collection as a condition for using the app and that consent mechanisms need to be voluntary and clear. The updated terms require users to accept all data management provisions or face account deletion within 45 days, which has led to significant user complaints and a decline in app ratings. Zalo's average rating on Apple’s App Store has fallen to around two out of five stars, and it has slipped to 59th place in download rankings, while international apps like WhatsApp and Viber have become more popular. Zalo has around 78 million active users and operates over 17,000 official accounts used by government and businesses. The NCC intends to meet with VNG to discuss the updated policy, as part of a wider regulatory trend against coercive data practices in digital firms globally.

BetaBeacon

October 30, 2025

Google Play injunction can “transform Android game economics”

- An injunction placed on Google Play in the US allows for alternative payments and anti-steering measures until November 1st, 2027. - This ruling follows the Epic Games vs. Google case and enables developers to use their own payment systems with lower fees. - The change is seen as a major shift for mobile developers in the US, empowering them to deepen relationships with players and experiment with new monetization models. - Google may be making business model changes to preserve user trust and safety in the ecosystem.

Winsage

September 1, 2025

Hackers Exploit Windows Defender Policies to Shut Down EDR Agents

Cybercriminals are exploiting Windows Defender Application Control (WDAC) policies to disable Endpoint Detection and Response (EDR) agents. This threat emerged from a proof-of-concept called "Krueger," which demonstrated how to block EDR services by integrating a custom WDAC policy. Following its release in December 2024, various malware families began using this technique, including a new malware called "DreamDemon," which embeds a WDAC policy within its resources and modifies system files to evade detection. Both Krueger and DreamDemon reveal significant weaknesses in EDR capabilities, as current prevention measures are largely reactive and insufficient against these types of attacks. As of September 2025, no vendor has provided a comprehensive solution to prevent WDAC-based shutdowns. Security teams are advised to monitor specific registry keys and file changes to detect potential policy abuses.

Winsage

August 27, 2025

Windows 11 KB5064080 adds Backup app for organizations, fixes File Explorer and SMB share

Windows 11 KB5064080, an optional update for August 2025, is available for devices running Windows 11 23H2. It introduces the OneDrive-based Windows Backup app for organizations, which complements the existing consumer version. Users can download offline installers in .msu format from the Update Catalog. The Windows Backup for Organizations app securely saves user preferences, credentials, and personal files linked to the Microsoft Account, facilitating a seamless setup experience for new PCs. The organizational version may differ from the consumer edition, with administrators controlling the setup process and data storage. The update does not include a Windows 7-like Restore function. Users must manually check for and install the update via the Settings app, as it will not be automatically downloaded. The update also addresses several bugs affecting system applications, including issues with the Copilot key, USB device recognition, SMB share performance, ReFS deduplication and compression conflicts, Remote Desktop camera recognition, File Explorer display errors, and the disappearance of the “Ask to Use” approval prompt. Minor bug fixes related to Narrator and COSA profiles are included, with no major known issues reported.

Winsage

July 30, 2025

Secure Windows with Microsoft’s Security Compliance Toolkit

The Microsoft Security Compliance Toolkit is a suite of tools for administrators to assess Group Policy Objects (GPOs) against Microsoft's security baselines, helping to identify discrepancies and implement secure settings. It includes tools such as the Policy Analyzer, Local Group Policy Object (LGPO) utility, and Set Object Security application. Administrators can download the toolkit from Microsoft's website, which contains zip files for various security baseline packages. The Policy Analyzer compares GPOs with local security policies to identify inconsistencies, while the LGPO tool manages local security policies and allows for policy backup and verification. The Set Object Security tool applies security descriptors to objects like files and folders. For Windows Server, administrators should test security baselines in non-production environments before deployment. With Windows Server 2025, the OSConfig platform allows for direct application of security baselines through PowerShell, simplifying the update process and maintaining compliance.

AppWizard

July 7, 2025

Google Gemini app gains automatic Android access to phone and messaging data

On July 7, 2025, Google Gemini app users experienced automatic activation of permissions for accessing phone calls, messaging services, WhatsApp, and system utilities on Android devices, following a privacy policy update on June 11, 2025. This change affects millions of users globally and allows user data to be reviewed by humans for AI training. Users can disable these permissions through the app's settings, but the option to opt-out is criticized for being difficult to find. Legal experts have raised concerns about compliance with GDPR regulations due to the lack of explicit user consent for these changes. The data collected supports machine-learning development and may be retained for up to three years, even after users delete their activity.