WSUS

Winsage
August 10, 2026
Microsoft is offering Extended Security Updates (ESUs) for Windows Server 2016, which will provide critical security patches until January 2030, after the end of extended support on January 12, 2027. Organizations can enroll their Windows Server 2016 instances via Azure Arc to receive these updates without migrating to Azure. The ESUs are available through a pay-as-you-go pricing model, allowing flexibility for on-premises servers and other cloud platforms. By using Azure Arc, organizations gain access to Azure management tools for improved visibility and compliance. IT administrators should connect eligible systems to Azure Arc to manage ESU enrollment and compliance effectively. ESUs are intended as a temporary solution while businesses modernize applications and plan migrations to supported platforms.
Winsage
July 24, 2026
This week, Meta experienced a global outage affecting Facebook users, followed by Microsoft facing performance issues with its M365 services, including Teams and SharePoint. Microsoft also reported difficulties with Azure, impacting Windows 11 updates and the Microsoft Store. The issues began around 11:15 AM PST on July 23, 2026, with a notification to users about the Azure outage affecting Windows Update and related services. Microsoft initiated recovery efforts and by 1:45 PM PST, announced that the issues were resolved and services were restored. Currently, there are no ongoing issues reported on the Microsoft Service Health Status page, but the incident is documented on the Windows Release Health page.
Winsage
July 13, 2026
Microsoft has released a guide on the Windows servicing model, detailing monthly security updates, optional preview releases, hotpatch updates, and feature rollout mechanisms. Patch Tuesday occurs every second Tuesday of the month, delivering cumulative security updates to supported Windows versions. For consumers and small businesses, updates are managed through Windows Update, while enterprises can use various tools like Windows Autopatch and WSUS. Hotpatch updates, which focus on security fixes, can be installed without a restart, unlike quarterly baseline updates that require one. Optional non-security preview updates are released in the fourth week of each month for testing upcoming fixes and new features, available only for the latest supported Windows versions. Unmanaged devices can access these updates through Windows Update settings, while IT-managed devices depend on organizational policies. Microsoft also issues out-of-band updates to address urgent issues, which can be deployed through enterprise management tools. New features for Windows 11 are rolled out throughout the year via various channels, with a gradual rollout strategy to monitor quality and compatibility, using the Controlled Feature Rollout approach.
Winsage
July 11, 2026
Microsoft is advocating for a reevaluation of Windows patch management practices due to the rapid evolution of artificial intelligence (AI) impacting cybersecurity. The company emphasizes that traditional timelines for patch deployment, typically spanning several weeks after the monthly Patch Tuesday, are inadequate against modern cyber threats. Microsoft recommends organizations shorten deployment windows to under three days for quality updates, with immediate installation deadlines and minimal user grace periods. To support these changes, Microsoft is enhancing Windows Autopatch with a new reporting dashboard for patch compliance and security insights. The company is promoting cloud-managed deployment through Microsoft Intune and Windows Autopatch while continuing to support legacy tools. Additionally, Microsoft is introducing Windows Hotpatch technology, allowing security updates to be installed without immediate reboots, and advocating for the use of identity-based access controls to isolate unpatched devices. The guidance reflects a shift from scheduled patching to continuous risk management, encouraging organizations to prioritize high-risk assets and automate update deployments. Microsoft is also investing in AI-assisted vulnerability discovery and automated code analysis to improve defensive capabilities. The overarching message is that enterprises must adapt their update strategies to address the accelerated pace of AI-driven exploitation.
Search