M365 Message Center

Geändert

28.08.2025

Handlung bis

09.09.2025

Services

Windows

Since 2023, Microsoft has been sharing reminders of changes coming to certificate mapping security requirements in Windows Servers. These changes address vulnerabilities discussed in CVE-2022-34691 and others. As part of these changes, servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, will be required to meet certain certificate mapping criteria in order for authentication operations to succeed. The final milestone of this rollout will take place with Windows updates released September 2025. For full details, see KB5014754: Certificate-based authentication changes on Windows domain controllers.When will this happen:Beginning 2022, Windows updates have addressed certain vulnerabilities related to certificate emulation. As part of this, new certificate mapping requirements have been rolling out with

Geändert

26.08.2025

Services

Windows

Windows Backup for Organizations is now generally available. It provides a simple and secure way to back up and restore settings and the list of Microsoft Store apps on eligible enterprise devices running Windows 10 and Windows 11, version 22H2 and higher. With the capability during the out-of-the-box experience (OOBE) to restore a familiar experience on a new device or after a device reset or reimage, users can get back to work faster. And, if you’re still in the process of moving from Windows 10 to Windows 11, Windows Backup for Organizations can help streamline the transition. When will this happen: Windows Backup for Organizations is generally available. Note: The Restore setting is rolling out gradually, so check back in about a week if you don’t see it in your Intune tenant. How this will affect your organization: With Windows Backup for Organizations, you’ll help enhance user expe

Geändert

26.08.2025

Services

Windows

The August 2025 non-security preview update is now available for Windows 11, version 23H2 and Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained.Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.Highlights for the Windows 11, version 23H2 update: Windows Backup for Organizations is now generally available! Experience seamless device transitions with enterprise-grade backup and restore.This update impr

Geändert

25.08.2025

Services

Windows

Starting in September 2025, the latest Windows quality updates will be available by default during the out-of-box experience (OOBE). With Windows Autopilot and Microsoft Intune, you can manage this capability with a policy setting for eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices running Windows 11, version 22H2 or higher. When will this happen: This experience will be available starting with the September 2025 Windows security update. Note: When Windows quality update support is available in the Windows Autopilot Enrollment Status Page (ESP) at the end of August 2025, you’ll see the new quality update setting enabled by default. How this will affect your organization: This new capability has several key benefits for your organization: the latest quality updates are already applied out of the box, security is enhanced from day 1, and post-deployment update over

Geändert

21.08.2025

Services

Windows

Secure Boot protects Windows systems by validating firmware and boot components using trusted certificates. Microsoft-issued certificates used in Secure Boot are expiring in 2026. In the coming months, Microsoft will be rolling out updated Secure Boot certificates needed to ensure a secure startup environment of Windows. IT-managed environments must take action to ensure their systems remain secure and serviceable. This post outlines what enterprise IT admins need to know and do. When will this happen: Microsoft UEFI CA 2011 and Microsoft KEK CA 2011 expire in June 2026. Microsoft Windows Production PCA 2011 expires in October 2026. Microsoft is rolling out updated certificates now via Windows Update to home users, businesses, and schools with devices that have updates managed by Microsoft. How this will affect your organization: Without updated certificates, Secure Boot-enabled systems

Geändert

20.08.2025

Services

Windows

Prepare for hotpatch in your environment by meeting a key requirement to enable virtualization-based security (VBS) on Windows client. With the hotpatching feature of Windows Autopatch, you can apply security updates to Windows without requiring a restart. VBS protects against kernel-level exploits and other advanced threats to help ensure your endpoints are secure and ready for patching. It’s straightforward to enable VBS, and here we’ll show you how—whether deploying at scale with Microsoft Intune or on a single device using PowerShell or Windows Command Prompt. How this will affect your organization: You’ll need to enable VBS as a requirement for hotpatch, which applies security updates to Windows without requiring a restart. Hotpatch minimizes downtime while improving patch compliance and reducing risk. What you need to do to prepare: You’ll need to ensure VBS is enabled for hotpatch