update services Archives

Winsage

July 22, 2025

Microsoft: Windows Server KB5062557 causes cluster, VM issues

Microsoft has identified an issue with the Cluster service on Windows Server 2019 following the installation of the July security update KB5062557, released on July 8th. This issue causes the Cluster service to repeatedly stop and restart, leading to nodes failing to rejoin the cluster, entering quarantine states, and causing virtual machines to restart multiple times. Administrators using BitLocker on Cluster Shared Volumes may also face additional errors. Microsoft has advised affected organizations to contact their business support teams for assistance while a mitigation strategy is being developed. Additionally, Microsoft is working on a resolution to be included in a future Windows update.

Winsage

July 21, 2025

How to use Windows Update for Business with Group Policy

Windows administrators need to keep their systems updated for security and performance, with control over the timing and type of updates being crucial. There are three primary methods for managing Windows updates: 1. Per-client updates: Default for standalone clients, offering minimal control. 2. Windows Server Update Services (WSUS): Centralized management since 2005, allowing extensive control but requiring more administrative effort. 3. Windows Update for Business (WUfB): A cloud-based model providing greater control through tools like Group Policy and Mobile Device Management (MDM). WUfB offers several advantages, including policy-based management, granular control over deployments, and the elimination of on-premises WSUS servers. To implement WUfB, organizations must meet specific requirements, including using Windows 10/11 Pro, Enterprise, or Team editions, Azure AD joining, and having the necessary licenses such as Microsoft 365 Business Premium. Administrators can defer feature updates for up to 365 days and quality updates for up to 30 days using Group Policy. They can create servicing rings for managing update deployments, such as testing, pilot, and rollout rings. Configuration involves creating Group Policy Objects (GPOs) linked to the appropriate Organizational Units (OUs) and setting relevant policies. WUfB reporting is available through the Azure Portal, allowing administrators to monitor update statuses and troubleshoot devices.

Winsage

July 16, 2025

Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning

Microsoft has announced that Secure Boot certificates for Windows devices will begin to expire in June 2026, which may affect device functionality and security. An out-of-band update (KB5064489) was released on July 13, 2025, to address immediate security concerns and prepare systems for the certificate transition. This update includes essential quality improvements and fixes issues related to the startup of certain Azure Virtual Machines when Virtualization-Based Security (VBS) is enabled. The update is cumulative and incorporates previous security fixes. Users are advised to install the update promptly and review guidance for updating their certificates before the expiration deadline.

Winsage

July 10, 2025

Microsoft admits Windows Server Update Services sync is failing

Microsoft has acknowledged ongoing issues with Windows Server Update Services (WSUS) that are affecting the synchronization and deployment of updates, leading to significant challenges for businesses. Users have reported synchronization failures and timeout errors, with many expressing frustration over the lack of communication from Microsoft. The affected platforms include various versions of Windows 10 and Windows 11, as well as multiple Windows Server versions. Error logs indicate problems such as "Unable to connect to the remote server." Currently, there is no workaround available, and Microsoft is working on repairs related to a problematic update revision. Reports of the issue have emerged globally, with some users experiencing new errors and an overwhelming number of updates being downloaded.

Winsage

July 9, 2025

Microsoft confirms Windows Server Update Services (WSUS) sync is broken

Microsoft has acknowledged a disruption affecting Windows Server Update Services (WSUS), preventing organizations from syncing with Microsoft Update and deploying the latest Windows updates. Reports indicate that synchronization has been compromised since last night, with error messages such as "A connection attempt failed" and ".NET errors indicating that 'The operation has timed out.'" Some administrators noted a brief resumption of synchronization around 12:30 am ET, but it was short-lived. Microsoft attributed the issue to a "problematic update revision in the storage layer," which affects devices trying to sync updates via WSUS. There are currently no workarounds available, and Microsoft is working on a resolution.

Winsage

June 30, 2025

Microsoft warns of Windows update delays due to wrong timestamp

Microsoft has acknowledged a delay in the delivery of the June 2025 Windows security updates due to an incorrect metadata timestamp affecting Windows 10 and Windows 11 systems under quality update deferral policies. The update was released on June 10, 2025, but the timestamp shows June 20, 2025, which may cause devices with deferral settings to receive the update later than expected. Microsoft has provided temporary workarounds for administrators, including creating an expedited deployment policy to bypass deferral settings. The delay only affects the timing of update availability for organizations using these policies and does not impact the quality or applicability of the update. Microsoft will not change the metadata timestamp and has confirmed that the provided workaround is the definitive resolution.

Winsage

June 24, 2025

Microsoft fixes known issue that breaks Windows 11 updates

Microsoft is releasing a configuration update, KB5062324, to fix Windows Update failures on certain Windows 11 systems running version 24H2 that have not installed the May Windows non-security preview update or later. This update addresses an issue causing the Windows update scan to stop responding, with a permanent solution available in the May update (KB5058499) and later versions. Users can install KB5062324 by enabling 'Get the latest updates as soon as they're available' in Settings > Windows Update, followed by a system restart and checking for updates. The update is being rolled out gradually, so users may need to try multiple times to receive it. Recently, Microsoft also addressed a bug related to feature updates and acknowledged issues with unintended upgrades to Windows Server 2025 on certain devices. The company aims to unify the updating process for all software on PCs through a new orchestration platform.

Winsage

June 2, 2025

Microsoft ships emergency patch to fix Windows 11 installation issues

Microsoft has addressed a significant issue affecting certain Windows 11 systems after the installation of the KB5058405 security update from May 2025. Users reported encountering 0xc0000098 recovery errors linked to ACPI.sys, indicating that the operating system could not be loaded. This problem primarily affects Windows 11 versions 22H2 and 23H2 in enterprise settings, particularly among Azure Virtual Machines, Azure Virtual Desktop, and on-premises virtual machines hosted on platforms like Citrix or Hyper-V. Microsoft has released the KB5062170 non-security out-of-band update to resolve the installation and boot problems, which can be manually installed from the Microsoft Update Catalog. For Azure customers facing difficulties after implementing the May 2025 update, Microsoft recommends using Azure Virtual Machine repair commands as a temporary workaround. Users of Windows Home or Pro editions in home environments are unlikely to encounter these issues.

Winsage

May 29, 2025

Microsoft: Windows 11 might fail to start after installing KB5058405

Microsoft has acknowledged that some Windows 11 systems may experience startup failures after installing the KB5058405 cumulative update, resulting in a 0xc0000098 recovery error related to ACPI.sys. This issue affects Windows 11 versions 22H2 and 23H2, particularly in enterprise settings like Azure Virtual Machines and on-premises virtual machines. Home users are less likely to encounter these problems. Microsoft is investigating the issue and will provide updates.

Winsage

May 15, 2025

Windows Remote Desktop Vulnerability Let Attackers Execute Malicious Code Over Network

Microsoft's May 2025 Patch Tuesday addressed 72 vulnerabilities in Windows Remote Desktop services, including two critical vulnerabilities, CVE-2025-29966 and CVE-2025-29967, which are heap-based buffer overflow issues. These flaws allow unauthorized attackers to execute arbitrary code over a network, posing significant risks. The vulnerabilities have been rated as "Critical" and classified under CWE-122. They affect various versions of Windows operating systems utilizing Remote Desktop services. Although there have been no reported active exploitations, experts warn of the potential dangers, urging users to apply patches immediately. The update also addressed five actively exploited zero-day vulnerabilities in other Windows components. Patches are available through Windows Update, WSUS, and the Microsoft Update Catalog.