Windows Server 2025 Archives

Winsage

July 29, 2026

Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole

Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.

Winsage

July 29, 2026

Microsoft reportedly using TPM chips to weed out Windows piracy

Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.

Winsage

July 25, 2026

BackupChain Expands Hyper-V Backup for Windows Server 2025 as a Veeam Alternative

BackupChain has released an update to its backup and disaster recovery platform for Windows Server and Windows 11 users, introducing features such as faster compression, improved Hyper-V protection, expedited restores, and comprehensive backup validation. The update includes a redesigned deduplication engine that accelerates backup speeds and reduces storage usage. It also features advanced Hyper-V change tracking for efficient incremental backups and is compatible with Windows Server 2016 and later, as well as Windows 10 and 11. Restoration processes have been simplified with single-pass restores, minimizing downtime. Additionally, Deep Verification for VM backups allows for ongoing verification of the backup chain without needing to restore the virtual machine. BackupChain aims to provide robust backup technology tailored for SMBs and IT professionals, positioning itself as an alternative to larger enterprise platforms like Veeam. The latest version is now available.

Winsage

July 23, 2026

Microsoft making a new feature mandatory requirement for Windows KMS activation

Microsoft has introduced enhancements to its Windows operating system security, including an update to Entra ID authentication with default passkeys and AI-enhanced security updates. A key advancement is the KMS Hardware-Secured initiative, which uses Trusted Platform Module (TPM)-based attestation to ensure KMS hosts operate on trusted hardware for Windows volume activation. This aims to combat risks from counterfeit KMS servers. Under the new model, KMS hosts will confirm their hardware identity using TPM before activating Windows devices. Starting in August 2026, Windows Server 2025 will provide readiness messaging for KMS host compliance with new security requirements. TPM attestation will be mandatory for KMS Hardware-Secured activation with the upcoming Windows Server 2028 LTSC release. Organizations are advised to prepare for this transition.

Winsage

July 19, 2026

How to install apps on your Windows 11 PC with Windows Package Manager (winget)

Windows 11 users can download applications using the Windows Package Manager (winget) via the command line, bypassing traditional web browser navigation. Winget is integrated into Windows 11, modern Windows 10, and Windows Server 2025, simplifying application management. To use winget, users can open the Command Prompt, check for installation with "winget --version," search for applications with "winget search [app name]," and install them using "winget install [app name]." Users can also specify installation directories and utilize commands to list installed applications, show details about specific apps, and uninstall applications.

Winsage

July 19, 2026

Microsoft confirms WSUS service degradation impacting all versions of Windows

A significant issue has emerged with the Windows Server Update Service (WSUS), affecting all versions of Windows client and server. Microsoft acknowledged the service degradation that began before July 14, coinciding with the latest Patch Tuesday. This degradation has caused prolonged synchronization times and occasional timeouts during sync operations on WSUS servers, attributed to a buildup of publishing metadata. Microsoft is working on a resolution to improve performance and restore synchronization times. The affected platforms include various versions of Windows 11, Windows 10, and Windows Server from 2012 to 2025. An update is expected to be released shortly to address the issue.

Winsage

July 18, 2026

Windows Server 2022 reach end of mainstream support in 90 days

Windows Server 2022 will end its mainstream support on October 13, 2026, transitioning to an extended support phase that will last until October 14, 2031, during which security updates will be provided at no additional cost. Windows Server 2022 was released in September 2021 and is part of the Long-Term Servicing Channel (LTSC) with a decade of support. Microsoft recommends upgrading to Windows Server 2025, which became generally available in November 2024 and will have mainstream support until November 13, 2029, and extended support until November 14, 2034. A 180-day trial for Windows Server 2025 is available through the Microsoft Evaluation Center. Additionally, hotpatching for Windows Server 2022 will be extended until October 2027 for Datacenter: Azure Edition systems, and the free Windows 10 Extended Security Updates program has been extended by one year. Windows 10 Enterprise LTSB 2016 and Windows 11 24H2 will stop receiving updates three months after their end of support.

Winsage

July 17, 2026

July’s Patch Tuesday sees an end-of-support collision amidst a massive, record-setting patch wave

The Print Spooler flag monitors shared printers and reflects the queue status of print jobs. The win32k flags manage aspects of 32-bit application printing, including font rendering and window management, while GDI+ flags handle metafiles. Printer sharing from a print server allows clients to print in various sizes and formats, cancel jobs, and verify queue status. Printing from 32-bit applications accommodates diverse document types and ensures consistency across different outputs. Document exports maintain font and layout integrity, and EMF+ files can apply effects to large images. Storage and file systems focus on maintaining integrity through NTFS high-risk flags and File History, with a Windows Server 2025 bundle addressing boot processes and BitLocker. NTFS extended attributes are utilized for backup workflows, and unexpected shutdown simulations ensure volume recovery. File History allows for file backups with customizable options. On Server 2025, Secure Boot/BitLocker combinations can be initiated. The HID input flags manage various input devices, while the WinSock bundle includes drivers for Bluetooth and multicast. The NetAdapterCx driver requires extensive enable-disable cycles under Driver Verifier.

Winsage

July 16, 2026

Windows Netlogon Flaw CVE-2026-41089: CVSS 9.8 [2026]

CVE-2026-41089 is a critical vulnerability in the Windows Netlogon service, rated 9.8 on the CVSS scale, allowing unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on domain controllers. It affects all supported versions of Windows Server configured as domain controllers, from Windows Server 2012 R2 to the latest release. Microsoft addressed this vulnerability on May 12, 2026, during a broader update that included 138 fixes, but it went largely unnoticed until early June when active exploitation was confirmed. The vulnerability is characterized as a stack-based buffer overflow and is considered "wormable" due to its ability to self-propagate across systems without user intervention. Organizations are advised to patch all domain controllers and audit network access to mitigate exposure.