Windows Server Archives

Winsage

July 19, 2026

How to install apps on your Windows 11 PC with Windows Package Manager (winget)

Windows 11 users can download applications using the Windows Package Manager (winget) via the command line, bypassing traditional web browser navigation. Winget is integrated into Windows 11, modern Windows 10, and Windows Server 2025, simplifying application management. To use winget, users can open the Command Prompt, check for installation with "winget --version," search for applications with "winget search [app name]," and install them using "winget install [app name]." Users can also specify installation directories and utilize commands to list installed applications, show details about specific apps, and uninstall applications.

Winsage

July 19, 2026

Microsoft confirms WSUS service degradation impacting all versions of Windows

A significant issue has emerged with the Windows Server Update Service (WSUS), affecting all versions of Windows client and server. Microsoft acknowledged the service degradation that began before July 14, coinciding with the latest Patch Tuesday. This degradation has caused prolonged synchronization times and occasional timeouts during sync operations on WSUS servers, attributed to a buildup of publishing metadata. Microsoft is working on a resolution to improve performance and restore synchronization times. The affected platforms include various versions of Windows 11, Windows 10, and Windows Server from 2012 to 2025. An update is expected to be released shortly to address the issue.

Winsage

July 18, 2026

Windows Server 2022 reach end of mainstream support in 90 days

Windows Server 2022 will end its mainstream support on October 13, 2026, transitioning to an extended support phase that will last until October 14, 2031, during which security updates will be provided at no additional cost. Windows Server 2022 was released in September 2021 and is part of the Long-Term Servicing Channel (LTSC) with a decade of support. Microsoft recommends upgrading to Windows Server 2025, which became generally available in November 2024 and will have mainstream support until November 13, 2029, and extended support until November 14, 2034. A 180-day trial for Windows Server 2025 is available through the Microsoft Evaluation Center. Additionally, hotpatching for Windows Server 2022 will be extended until October 2027 for Datacenter: Azure Edition systems, and the free Windows 10 Extended Security Updates program has been extended by one year. Windows 10 Enterprise LTSB 2016 and Windows 11 24H2 will stop receiving updates three months after their end of support.

Winsage

July 17, 2026

July’s Patch Tuesday sees an end-of-support collision amidst a massive, record-setting patch wave

The Print Spooler flag monitors shared printers and reflects the queue status of print jobs. The win32k flags manage aspects of 32-bit application printing, including font rendering and window management, while GDI+ flags handle metafiles. Printer sharing from a print server allows clients to print in various sizes and formats, cancel jobs, and verify queue status. Printing from 32-bit applications accommodates diverse document types and ensures consistency across different outputs. Document exports maintain font and layout integrity, and EMF+ files can apply effects to large images. Storage and file systems focus on maintaining integrity through NTFS high-risk flags and File History, with a Windows Server 2025 bundle addressing boot processes and BitLocker. NTFS extended attributes are utilized for backup workflows, and unexpected shutdown simulations ensure volume recovery. File History allows for file backups with customizable options. On Server 2025, Secure Boot/BitLocker combinations can be initiated. The HID input flags manage various input devices, while the WinSock bundle includes drivers for Bluetooth and multicast. The NetAdapterCx driver requires extensive enable-disable cycles under Driver Verifier.

Winsage

July 16, 2026

Windows Netlogon Flaw CVE-2026-41089: CVSS 9.8 [2026]

CVE-2026-41089 is a critical vulnerability in the Windows Netlogon service, rated 9.8 on the CVSS scale, allowing unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on domain controllers. It affects all supported versions of Windows Server configured as domain controllers, from Windows Server 2012 R2 to the latest release. Microsoft addressed this vulnerability on May 12, 2026, during a broader update that included 138 fixes, but it went largely unnoticed until early June when active exploitation was confirmed. The vulnerability is characterized as a stack-based buffer overflow and is considered "wormable" due to its ability to self-propagate across systems without user intervention. Organizations are advised to patch all domain controllers and audit network access to mitigate exposure.

Winsage

July 16, 2026

Microsoft’s July patches fix over 600 flaws, shattering last month’s record

Microsoft has released its July 2026 Patch Tuesday updates, addressing 570 new security vulnerabilities, bringing the total for the month to over 620. The cumulative count of vulnerabilities patched this year has reached 1,380, exceeding the total of 1,250 for the entire year of 2020. Over 400 vulnerabilities are related to various versions of Windows, and the Windows 10 Extended Security Update program has been extended until October 12, 2027. Notable vulnerabilities include CVE-2026-56155 in Active Directory Federation Services, which allows attackers to gain administrator rights, and several critical Remote Code Execution vulnerabilities, including CVE-2026-57092 in Hyper-V and CVE-2026-56190 in Remote Desktop Protocol. Microsoft has also patched 97 vulnerabilities in Office products, with 17 classified as critical RCE vulnerabilities, and four vulnerabilities in Exchange Server, including CVE-2026-55008. The latest Microsoft Edge update addresses 27 vulnerabilities related to Chromium, and a vulnerability in Minecraft Bedrock servers has been patched.

Winsage

July 13, 2026

Microsoft demystifies how Windows updates work

Microsoft has released a guide on the Windows servicing model, detailing monthly security updates, optional preview releases, hotpatch updates, and feature rollout mechanisms. Patch Tuesday occurs every second Tuesday of the month, delivering cumulative security updates to supported Windows versions. For consumers and small businesses, updates are managed through Windows Update, while enterprises can use various tools like Windows Autopatch and WSUS. Hotpatch updates, which focus on security fixes, can be installed without a restart, unlike quarterly baseline updates that require one. Optional non-security preview updates are released in the fourth week of each month for testing upcoming fixes and new features, available only for the latest supported Windows versions. Unmanaged devices can access these updates through Windows Update settings, while IT-managed devices depend on organizational policies. Microsoft also issues out-of-band updates to address urgent issues, which can be deployed through enterprise management tools. New features for Windows 11 are rolled out throughout the year via various channels, with a gradual rollout strategy to monitor quality and compatibility, using the Controlled Feature Rollout approach.

Winsage

July 12, 2026

Microsoft is killing 15 products in 2026, including Windows 11 24H2 and Office 2021

Microsoft will discontinue support for several products in 2026, including: 1. Windows 11 24H2 (Home and Pro) - End of servicing on October 13, 2026. 2. Office 2021 and Office LTSC 2021 - End of support on October 13, 2026. 3. Windows Server 2012 and 2012 R2 - Final ESU year ending on October 13, 2026. 4. SQL Server 2016 - Extended end of support on July 14, 2026. 5. SharePoint Server 2016 and 2019, Project Server 2016 and 2019 - Support ends on July 14, 2026. 6. Microsoft Publisher - Retired after October 2026. 7. Exchange Server 2016 and 2019, Skype for Business Server - Final ESU cutoff on October 31, 2026. 8. Windows 11 Enterprise and Education 23H2, .NET 8, .NET 9, PowerShell 7.4 - End of servicing on November 10, 2026. 9. Windows 10 2016 LTSB and IoT Enterprise LTSB 2016 - Extended support ends on October 13, 2026. 10. Windows 11 SE - Support ends on October 1, 2026. 11. Dynamics CRM 2016 and older versions - Lost support earlier in January 2026. 12. Microsoft Configuration Manager, version 2409 - End of support on June 6, 2026. 13. Visual Studio 2022 LTSC channels, versions 17.10 and 17.12 - End of support in January and July 2026, respectively. 14. InfoPath 2013, SharePoint Designer 2013 - End of support on July 14, 2026. 15. Azure service retirements - Occurring in late 2026. Organizations are advised to review their software landscape and plan for transitions to avoid disruptions.

Winsage

July 11, 2026

AI Threat Forces Microsoft To Update Windows Patch Guidance

Microsoft is advocating for a reevaluation of Windows patch management practices due to the rapid evolution of artificial intelligence (AI) impacting cybersecurity. The company emphasizes that traditional timelines for patch deployment, typically spanning several weeks after the monthly Patch Tuesday, are inadequate against modern cyber threats. Microsoft recommends organizations shorten deployment windows to under three days for quality updates, with immediate installation deadlines and minimal user grace periods. To support these changes, Microsoft is enhancing Windows Autopatch with a new reporting dashboard for patch compliance and security insights. The company is promoting cloud-managed deployment through Microsoft Intune and Windows Autopatch while continuing to support legacy tools. Additionally, Microsoft is introducing Windows Hotpatch technology, allowing security updates to be installed without immediate reboots, and advocating for the use of identity-based access controls to isolate unpatched devices. The guidance reflects a shift from scheduled patching to continuous risk management, encouraging organizations to prioritize high-risk assets and automate update deployments. Microsoft is also investing in AI-assisted vulnerability discovery and automated code analysis to improve defensive capabilities. The overarching message is that enterprises must adapt their update strategies to address the accelerated pace of AI-driven exploitation.

Winsage

July 10, 2026

Microsoft is rewriting Windows patch guidance because of AI

Microsoft advises organizations to expedite their Windows update deployment timelines due to advancements in artificial intelligence that allow cyber attackers to quickly exploit vulnerabilities after security updates are released. Jeremy Chapman, Director of Microsoft 365, warns that delaying critical quality updates with security fixes increases the risk of exploitation. Microsoft recommends a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. The Windows Autopatch report within Microsoft Intune helps identify unpatched devices, allowing administrators to adjust update deferral policies. Organizations can configure update delivery settings through policy controls in Windows Autopatch and Microsoft Intune, as well as other management tools like Microsoft Configuration Manager and Windows Server Update Services. Microsoft also promotes the use of Hotpatch for quicker installation of security updates without rebooting and encourages Conditional Access policies to restrict access to corporate resources for devices that lack required updates.