system administrators

Winsage
April 30, 2025
Arch Linux has officially become available as a distribution for the Windows Subsystem for Linux (WSL). This release follows earlier reports from It's Foss News in February. WSL allows users to run a complete Linux environment on Windows, and the addition of Arch Linux introduces a rolling release model. The Arch Linux WSL image is maintained by Robin Candau and is built and released monthly through a GitLab CI schedule, with systemd support included. Users are advised to run pacman -Syu after their first launch to ensure they have the latest updates. To use Arch Linux on WSL, WSL 2 must be installed. The installation process involves running commands in PowerShell: PLACEHOLDER2f45746c1eb6702b for WSL 2, followed by PLACEHOLDERcebb97c90d3dc3e4 to add Arch Linux, and then PLACEHOLDERff7af59bfa5f1c11 to boot into it. Users should also update their system with PLACEHOLDERe23a8bb0ce81dc13. WSL 2 supports running Linux GUI desktops via Remote Desktop Protocol (RDP), but available images are primarily command-line based.
Winsage
April 28, 2025
Hotpatching in Windows Server 2025 allows system administrators to apply security updates without rebooting, enhancing response times to vulnerabilities. Microsoft will introduce a subscription model for this feature starting July 1, 2024, at an initial rate of [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Hotpatching emerges as a significant advancement in the realm of Windows Server 2025, allowing system administrators to implement security updates without the need for system reboots. This capability enhances the speed at which organizations can respond to vulnerabilities, aligning with the growing demand for agile IT operations. However, Microsoft has decided to place this feature behind a paywall, introducing a subscription model that will take effect from July 1, 2024, at an initial rate of .50 per core per month. Notably, users operating on Azure will be exempt from this charge, providing a clear incentive for cloud-based deployments. Previously available in Azure Hotpatching is not an entirely new concept; it has been successfully utilized in various environments, including the Linux kernel, VMware products, and the Xen hypervisor. Microsoft has previously offered hot patching capabilities for Windows Server: Azure Edition and version 2022 within the Azure cloud ecosystem. In August 2024, the company unveiled a preview of hot patching for Windows Server 2025 in Azure, followed by an additional preview for deployments managed through the Arc hybrid and multicloud management system in September. This latest preview marks a pivotal moment, as it introduces hot patching for Windows Server 2025 Standard and Datacenter Edition, enabling on-premises applications of this technology for the first time. Microsoft has characterized this feature as a “game changer,” highlighting its potential to redefine patch management for enterprises. Subscription model and patching cycle Under the new subscription model, Microsoft anticipates releasing eight hot patches annually. However, it is important to note that there may be instances where a restart is still required for security purposes. As the transition to the paid version approaches, users currently in the preview phase will be automatically migrated unless they opt out by June 30, 2024. This move has drawn parallels to Microsoft's previous strategies regarding detailed logs, which have sparked concern among security experts. Critics argue that by monetizing essential security features, Microsoft risks compromising the overall security posture for users who may not opt for these additional services. While hotpatching was initially heralded as a cornerstone innovation for Windows Server 2025, its placement behind a paywall raises questions about the balance between enhanced security and cost considerations for organizations. Read also: Windows Server 2025 updates cause problems" max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].50 per core per month, with Azure users exempt from this charge. Hotpatching has been previously available in Azure and is now being introduced for on-premises applications in Windows Server 2025 Standard and Datacenter Edition. Microsoft plans to release eight hot patches annually, although some may still require a restart. Users in the preview phase will be automatically migrated to the paid version unless they opt out by June 30, 2024. Critics express concern that monetizing essential security features may compromise overall security for users who do not subscribe.
Winsage
April 24, 2025
Microsoft's recent patch for CVE-2025-21204 inadvertently reintroduced the inetpub folder at c:inetpub as part of its mitigation strategy, raising concerns among system administrators. Security researcher Kevin Beaumont discovered that this folder created a new vulnerability when he used the mklink command with the /j parameter to redirect the folder to a system executable (notepad.exe). This allowed standard users to prevent Windows updates without administrative rights, as the command could be executed on default-configured systems. Beaumont has notified Microsoft of this vulnerability, but the company has not yet responded.
Winsage
April 17, 2025
Organizations using Microsoft Intune are facing an issue where a bug has caused unexpected upgrades to Windows 11, despite settings to block such updates. This problem has been acknowledged by Microsoft and has been present since April 12, affecting only devices managed through Intune. Microsoft is working on a resolution and recommends pausing all Windows feature updates via Intune. For devices that have already upgraded to Windows 11, organizations can either adapt to the new system or manually revert to Windows 10, as there is no automated rollback method provided by Microsoft. The manual process involves creating a bootable Windows 10 device and performing a fresh installation.
Winsage
April 17, 2025
Device management is challenging for system administrators, especially when controls are lacking or software rollouts are misaligned with management tools. Jack Gold, a principal analyst at J. Gold Associates, cites an example of a driver update that was incompatible and did not allow users to revert to a previous version, similar to issues faced by Crowdstrike. He stresses the need for a cautious approach to rolling back updates, particularly with Windows 11, which had problems due to an Intune glitch. Gold recommends testing rollbacks on a limited scale before wider deployment to identify and resolve potential issues.
Winsage
April 16, 2025
Microsoft has acknowledged that some users are receiving unsolicited invitations to upgrade to Windows 11, despite configurations in Intune meant to prevent this. The issue is attributed to a "recent service change" that has exposed a latent code problem affecting a subset of users. Affected users are prompted to upgrade regardless of IT restrictions, and those who have upgraded can manually roll back to the previous version. Microsoft has advised administrators to pause Windows Feature Updates temporarily and has announced that a targeted code fix is being deployed to resolve the issue. This incident is reminiscent of a previous Windows Server 2025 error in November 2024, which involved a mistaken release as a security update.
Winsage
April 15, 2025
Microsoft has warned about potential accessibility issues with Windows Server 2025 domain controllers after a restart, where affected servers revert to the default firewall profile, disrupting applications and services. A temporary workaround involves manually restarting the network adapter on the impacted servers using the PowerShell command: Restart-NetAdapter *. This workaround needs to be reapplied after each restart of the domain controller, and Microsoft recommends setting up a scheduled task to automate this process. Windows Server 2025, launched earlier this year, introduced new features and security enhancements but has faced previous issues, including freezing Remote Desktop sessions and accidental upgrades from Windows Server 2022. Developers are currently working on a permanent solution for the domain controller issue.
Winsage
April 14, 2025
Microsoft is releasing emergency patches to address an issue with local audit logon policies in Active Directory Group Policy, affecting various Windows versions including Windows 11 and Windows Server editions. The problem involves a reporting error where audit logon/logoff events may not appear as enabled in the Local Group Policy Editor, despite being active. The updates released include: - Windows 11, versions 23H2 and 22H2 (KB5058919) - Windows Server 2022 (KB5058920) - Windows 10 Enterprise LTSC 2019 and Windows Server 2019 (KB5058922) - Windows 10 LTSB 2016 and Windows Server 2016 (KB5058921) - Azure Stack HCI, version 22H2 (KB5058920) These patches are not security updates and are intended for affected organizations only. They can be downloaded from the Microsoft Update Catalog. The current updates are cumulative, meaning previous updates do not need to be installed first. Microsoft notes that home users are unlikely to be affected by this issue.
Winsage
April 7, 2025
Microsoft is addressing complications from the Windows 11 24H2 update caused by an incompatible driver, sprotect.sys, developed by SenseShield Technology. This driver, used for encryption protection, has led to significant issues, including blue screen errors and black screen crashes. The problematic driver versions are 1.0.2.372 and 1.0.3.48903. Microsoft has implemented an update block (ID number 56318982) to prevent affected systems from receiving the Windows 11 24H2 update. They are collaborating with SenseShield Technology to resolve these issues and restore update eligibility for users.
Search