M365 Message Center

Geändert

12.06.2025

Services

Windows

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the June 19 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar).

Geändert

11.06.2025

Services

Windows

Note updated on June 11, 2025 (10:00 PT)The June 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Highlights for the Windows 11, version 24H2 update: This security update includes improvements that were a part of update KB5058499 (released May 28, 2025).After installing the June 2025 Windows security update, Windows 11, version 24H2 will retain system restore points for up to 60 days.This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model

Geändert

11.06.2025

Services

Windows

Use expanded role-based access control (RBAC) to better manage access permissions to Windows Autopatch resources. Start by enforcing least privilege access with the new Windows Autopatch administrator and the Windows Autopatch reader roles. Learn how to assign the right permissions, apply Microsoft Intune scope tags as needed, and manage Windows Autopatch groups as a scoped admin. When will this happen: You could already use RBAC with Windows Autopatch in a limited way with the Microsoft Intune Policy and profile manager role. In late May, all RBAC capabilities in Windows Autopatch started to roll out gradually. How this will affect your organization: If you’re part of a larger, more distributed organization with delegated administration, you might have struggled with enforcing least privileged access to further enhance security. Not anymore! New RBAC capabilities in Windows Autopatch in

Geändert

11.06.2025

Services

Windows

Starting with the April 8, 2025 Windows security updates, protections for CVE-2025-26647 are being rolled out and enforced in phases. These updates change how certificate-based authentication (CBA) is handled when the issuing certificate authority (CA) is not in the NTAuth store but a Subject Key Identifier (SKI) mapping exists in the altSecID attribute.When will this happen:July 8, 2025: Enforced by Default phaseUpdates released on or after July 8, 2025, will enforce the NTAuth store check by default. The AllowNtAuthPolicyBypass registry key setting will still allow customers to move back to Audit mode if needed. However, the ability to completely disable this security update will be removed.October 14, 2025: Enforcement modeUpdates released on or after October 14, 2025, will discontinue Microsoft support for the AllowNtAuthPolicyBypass registry key. At this stage, all certificates must

Geändert

11.06.2025

Services

Windows

IMPORTANT: This notice only affects environments where Scan Cab is used to check for update compliance.The June 2025 Scan Cab was made available at 5:00 PM PT today, June 10, 2025. The Scan Cab can help determine whether a Windows device needs to install necessary security updates released by Microsoft without first connecting to the Windows Update service. How this affects your organization:The Wsusscn2.cab file is a cabinet file that is signed by Microsoft and contains information about Microsoft security-related updates. Devices that aren't connected to the Internet can be scanned to see whether these security-related updates are present or required. The Wsusscn2.cab file doesn't contain the security updates themselves so you must obtain and install any needed security-related updates through other means.What you need to do to prepare:You can download and deploy the June 2025 Scan Cab

Geändert

10.06.2025

Services

Windows

NOTE: This notice only affects environments where Scan Cab is used to check for Microsoft update compliance. The Scan Cab for the June 2025 Microsoft security updates is currently delayed and has not yet been released. We are working as fast as possible to provide the Scan Cab files. We will communicate an update as more information becomes available. Thank you for your patience. How this affects your organization: IT administrators who rely on Scan Cab to check for update compliance can track our communications. Progress on the availability of this month's Scan Cab will be communicated whenever information is available. No action is required on environments where Scan Cab is not deployed. However, please note that there might be non-Microsoft applications which utilize Scan Cab. Review the documentation for any software and update deployment tools used within your organization to determ