ReFS Archives

Winsage

April 20, 2026

Emergency Update for Windows Server Following Reboot Issues

Microsoft has released emergency updates for various versions of Windows Server due to issues arising from the April 2026 Patch Tuesday security updates. A significant problem was a reboot loop affecting domain controllers caused by crashes of the Local Security Authority Subsystem Service (LSASS), which disrupted authentication services. This issue was especially problematic during the setup of new domain controllers. Additionally, some Windows Server 2025 systems encountered difficulties in installing the security update KB5082063. The out-of-band update (KB5091157) for Windows Server 2025 addresses both the installation failure and the domain controller restart issue. Other updates targeting the domain controller restart problem were released for additional supported Windows Server versions. Microsoft has introduced an out-of-band update for seven versions, including KB5091157 for Windows Server 2025 and KB5091571 for Windows Server, version 23H2. Furthermore, some Windows Server 2025 devices may boot into BitLocker recovery mode after the update, requiring users to enter a BitLocker recovery key.

Winsage

February 27, 2026

Windows Server finally gets ReFS boot support

Microsoft has introduced boot support for the Resilient File System (ReFS) in Windows Server, allowing insiders to boot the server operating system directly from a ReFS volume. This feature has been made available in the latest Windows Server Insider Preview build after a fourteen-year wait since ReFS was launched in 2012. ReFS can detect corruption early and address issues online, eliminating the need for chkdsk, and supports volumes up to 35 petabytes. It also includes block cloning and sparse provisioning technologies for efficient file management. To use ReFS boot, organizations must install the latest Windows Server vNext Insider Preview with a minimum build number of 29531.1000.260206-1841, format the system partition as ReFS, and ensure UEFI firmware is used.

Winsage

February 20, 2026

Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets

Attackers are using social media advertising, specifically paid Facebook ads, to promote a malware campaign disguised as legitimate Microsoft promotions. They create near-exact replicas of the official Windows 11 download page to lure users into downloading malicious software. The deceptive domains used include ms-25h2-download[.]pro and ms-25h2-update[.]pro. The malware campaign employs geofencing to selectively target victims, redirecting security researchers to benign sites while delivering malware to unsuspecting users. The malicious file, named ms-update32.exe, is hosted on GitHub and mimics the size of a legitimate Windows installer. Once executed, it checks for monitoring tools and, if none are detected, installs an application named "Lunar" that collects sensitive data, including cryptocurrency wallet information. The malware maintains persistence by writing data to the Windows registry and employs various obfuscation techniques to evade detection. The attackers run parallel ad campaigns with different Facebook Pixel IDs to ensure continued operation even if one is suspended. Indicators of compromise include specific file hashes, domains, file system artifacts, and registry keys associated with the malware.

Winsage

January 1, 2026

Microsoft’s ReFS File System Remains Inaccessible to Windows 11 Users

Microsoft's Resilient File System (ReFS) supports volumes up to 35 petabytes and offers robust data protection through checksums and continuous integrity checks, reducing the risk of data corruption. However, Windows 11 defaults to the NTFS file system, requiring users to use command-line tools to access ReFS features, which may deter average consumers. ReFS is primarily designed for Windows Server environments and has not gained popularity among general users. Testing shows that Windows 11 formats new drives as NTFS, making ReFS less accessible. ReFS can experience performance degradation on single-drive consumer PCs compared to NTFS and lacks features like file system compression, encryption, object IDs, and extended attributes, raising compatibility concerns. Microsoft has introduced the Agent Launchers framework for AI agent registration in Windows, amidst user backlash regarding the evolution of Windows into an "agentic OS." The Windows and Devices segment generated .3 billion in the last fiscal year, remaining flat over three years, while Gaming and LinkedIn generated higher revenues. Users have reported frequent feature changes and declining quality in Windows 11, with Microsoft's Controlled Feature Rollout system causing inconsistencies across devices. ReFS is accessible through the Dev Drive feature in Windows 11, which prioritizes performance over security. Microsoft faces competition from various fronts, including Valve's SteamOS, Apple's upcoming MacBook, and Google's Chrome OS, particularly in the education sector.

Winsage

November 27, 2025

Windows Dev Drives are the speed upgrade you’re not using

Dev Drives are virtual drives introduced in the Windows 11 version 22H2 update, designed specifically for software development. They can be created as partitions on physical drives or as virtual hard drives (VHDs) and use the ReFS file system instead of NTFS. This allows them to bypass continuous malware checks by Microsoft Defender, resulting in performance improvements of up to 41%. Dev Drives are intended for developers engaged in data-intensive tasks, but storing non-development files on them poses security risks. They can enhance workflow efficiency for developers and are accessible through the Settings app in Windows 11.

Winsage

October 29, 2025

Windows 10 end of life has passed – here’s your business guide to Windows 11

Organizations are transitioning from Windows 10 to Windows 11, with major companies addressing potential deployment issues. Windows 10 mainstream support ended in October 2025, but users can access the Extended Security Update program for an additional 12 months of coverage. Windows 11 features a refined user interface with a centered taskbar, enhanced visual elements, and productivity tools like snap layouts and Cloud Clipboard. The Start menu has been simplified, and the File Explorer sidebar has been reorganized. Focus Assist is improved with direct settings and integrates with the Windows Clock app. Windows 11 includes Copilot for natural language queries and task automation, with enhanced features for devices with neural processing units. Security is strengthened with Windows Hello and optional integration with Microsoft Defender for Endpoint. The minimum system requirements for Windows 11 include a 1GHz processor, 4GB of RAM, 64GB of storage, and TPM version 2.0. All editions of Windows 11 support encryption and biometric security, with Pro and Enterprise editions offering additional features. Upgrading from Windows 10 to Windows 11 is typically free if the device meets the requirements, with prices for new purchases starting at around £119 for Windows 11 Home and £219 for Windows 11 Pro.

Winsage

September 18, 2025

3 reasons a Dev Drive might be the perfect addition to your Windows install

Windows 11 introduces Dev Drives, a specialized storage volume for developers that utilizes the ReFS file system and offers optimizations for performance. Dev Drives can improve performance by up to 41% in development tasks, such as cloning the NodeJS repository, and provide a 22% enhancement in build times for projects like OrchardCore with DotNet. They are compatible with Microsoft Defender in "performance mode," which reduces scanning frequency to enhance read and write speeds. Microsoft recommends using Dev Drives solely for source code repositories, project files, package caches, and build outputs, avoiding typical downloaded files or installed applications to mitigate security risks. Developers can create Dev Drives on a physical partition for better performance or on a virtual hard drive (VHD) for flexibility and portability, although transferring them to different PCs is not advised. While Dev Drives offer speed advantages, they should not be repurposed for general use, as this could expose users to security risks.

Winsage

September 9, 2025

Patch Tuesday Arrives with New Features for Windows 11

Windows 11 users can expect new features with the cumulative updates KB5065426 for versions 23H2 and 24H2. Key improvements include: - Revamped homepage experience in Recall with shortcuts and enhanced filtering controls. - Interactive tutorial for Click to Do available on first launch. - Agent in Settings now accessible on AMD- and Intel-based Copilot+ PCs, limited to English. - Taskbar search now uses a grid view for images, with a status pane for indexing and clear distinctions between local and cloud files. - Option for a larger clock in the Notification center through Date and Calendar settings. - System dialogs now appear modally, dimming the desktop. - Lock screen widgets can be added, removed, and rearranged, with a new small sizing option. - Minor visual changes in File Explorer's context menu. - Redesigned Windows Hello interface with various authentication methods. - New section in Settings for managing third-party applications using generative AI models. - Widgets board supports multiple dashboards and an organized Discover feed. - Task Manager displays more accurate CPU usage with an optional CPU Utility column. The updates also include security and bug fixes for ReFS, the Chinese (Simplified) IME, and Arm64 performance, requiring a reboot for installation.

Winsage

August 27, 2025

Windows 11 KB5064080 adds Backup app for organizations, fixes File Explorer and SMB share

Windows 11 KB5064080, an optional update for August 2025, is available for devices running Windows 11 23H2. It introduces the OneDrive-based Windows Backup app for organizations, which complements the existing consumer version. Users can download offline installers in .msu format from the Update Catalog. The Windows Backup for Organizations app securely saves user preferences, credentials, and personal files linked to the Microsoft Account, facilitating a seamless setup experience for new PCs. The organizational version may differ from the consumer edition, with administrators controlling the setup process and data storage. The update does not include a Windows 7-like Restore function. Users must manually check for and install the update via the Settings app, as it will not be automatically downloaded. The update also addresses several bugs affecting system applications, including issues with the Copilot key, USB device recognition, SMB share performance, ReFS deduplication and compression conflicts, Remote Desktop camera recognition, File Explorer display errors, and the disappearance of the “Ask to Use” approval prompt. Minor bug fixes related to Narrator and COSA profiles are included, with no major known issues reported.

Winsage

August 2, 2025

8 new features arriving with the August 2025 Security Update for Windows 11

On August 12, 2025, Microsoft will roll out the August 2025 Security Update for Windows 11, which includes significant security enhancements and new features. Key improvements in version 24H2 include: - A complete reset feature for Windows Recall. - Enhanced AI actions for Click to Do. - A redesigned Search settings page. - A new gamepad keyboard layout with PIN sign-in support. - The Reading Coach app available through the Microsoft Store, allowing users to utilize Click to Do while on a snapshot. - A new action for Microsoft 365 Copilot subscribers called "Draft with Copilot in Word." - A new AI agent in the Settings app that improves the search experience using natural language. - Quick Machine Recovery (QMR) feature to minimize downtime from boot failures, enabled by default for Windows 11 Home users. - Upgraded Snap Layouts feature with inline descriptions. - Consolidation of "Search permissions" and "Searching Windows" into a single "Search" page. - Enhanced gamepad touch keyboard layout for quicker PIN sign-ins. - Replacement of the Blue Screen of Death with a new black error page that presents essential information. The update will be automatically downloaded and installed, with options for manual checks via Settings > Windows Update.