[German]Another addendum from the April 2024 patchday. The updates not only cause problems with NTLM connections to Windows Server. There are also reports that the KB5036909 update can also lead to LSASS crashes on domain controllers (DCs). In any case, Microsoft has published corresponding information on its Windows Release Health pages.
[German]Good question raised by a Microsoft Intune administrator. The man had problems with certificates and took a closer look. It looks like Intune is permanently storing the CA certificates generated for on-premises systems in the cloud. Another Intune administrator pointed me to the relevant post on reddit.com. The question is whether this can be confirmed.
[German]Following a series of serious security incidents, including the Microsoft Cloud, the Redmond-based giant now wants to turn things around. Security is now "above all else", they say, and a "Secure Future Initiative" has been launched at Microsoft. There have already been signs of this for a few days. But now it's all officially announced on the web. Time for a few defeatist thoughts on this topic and on Microsoft.
[German]I got several reports from administrators, facing issues with Adobe Acrobat Reader 24.002.20687 in a RDS server environment. It seems that the Adobe Acrobat Reader is crashing since mid April 2024, due to a "test version" integrated in the newest software version.
[German]Since January 2024, users of Windows 10 and Windows 11 (as well as Windows Server 2022) have been struggling with Microsoft's attempt to install an update to the WinRE environment. In January 2024, numerous users around the patchday were met with the installation error 0x80070643 when trying to install the KB5034441 update. Despite several attempts to rectify the situation in the following months, Microsoft was unable to eliminate the installation error. Now comes the admission that there is no automatic fix for the update – manual work is required.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Another addendum from the April 2024 patchday. The updates cause problems with NTLM connections to Windows Server. In any case, Microsoft has received corresponding user reports and is investigating the incident, as the company announced on April 30, 2024.
[German]A small addendum from the April 2024 patchday. The updates appear to lead to problems with VPN connections under Windows 10 and Windows 11. In any case, Microsoft has received corresponding user reports and is investigating the incident, as the company announced on April 30, 2024.
[German]Google recently released version 124 of its Google Chrome browser. In addition to vulnerabilities, the developers have also made some changes to the TLS encryption (X25519Kyber768 key encapsulation for TLS). However, there is now feedback from users complaining that this change can break the TLS handshake to web servers. This also affects Chromium-based browsers such as Edge 124.
[German]Since October 2023 there has been a known issue with Bitlocker under Windows 10 and Windows 11, which can lead to problems with administration using MDMs. An error 65000 was then reported by Bitlocker. The problem was then fixed with preview updates in January 2024. But Microsoft did not make the information public until April 26, 2024.
[German]Brief information for AnyDesk (remote desktop software). On April 24/25, 2024, the remote maintenance provider AnyDesk rolled out a "rotten" version of its AnyDesk client, which is blocked by Microsoft Defender under Windows. The background to this is that the client was digitally signed with a revoked certificate. Several blog readers have pointed out the problem to me, but I have only just got around to addressing it in the blog. On April 29, 2024 my test confirmed, that there still versions of anydesk.exe downloadable from the internet, that has been signed with the revoked certificate. Here is a brief summary of the continuation of the chaos surrounding AnyDesk.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
