Category Archives: 2018.06

How to Disable the Windows 10 Action Center

Posted on by
Reply

Windows 10 boasts several new and modern features when compared with its predecessors, and therefore the Action Center part of this arsenal.

But but the Action Center helpful to some users, other people are just attempting to obtain rid of it so that they can make Windows 10 feel equally Windows 7 as far as possible.

Microsoft, however, cannot offer dedicated choices to turn off encounter Center, probably because a key feature in Windows 10. Alleged to provide you with easy access to notifications and quick actions, encounter Center will only be removed to complex hacks that entail adding new registry keys or changing system policies.

The best method is commonly used on all Windows 10 versions, since the latter can only be possible on Windows 10 Pro or Enterprise where modifying group policies is allowed.

“Method #1 – Registry settings”

The slide in this case relates just two different registry stuff need to be configured in a would disable encounter Center. By default, however, they’re not there, so each user ought to create them manually

To begin, launch the Registry Editor by hitting Win key + R and typing regedit. Both locations where make sure you made changes may be the following:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer
*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer

Navigate to every one of them manually and be able to create a new D-WORD (32-bit) key called DisableNotificationCenter. To take action, open the paths above one after the other, right-click the right panel and click New > DWORD (32-bit). Enter the said name colliding with OK.

Learn about know this is that the Action Center will probably be controlled with that newly-created registry item towards the value you provide. This value could possibly be either 0 or 1, when it follows: 0 if you wish the Action Center being enabled and 1 if you prefer it to not anymore show up.

1 / 3 option is to totally remove the key basically created, and so this means that encounter Center are appropriate just like before inside default configuration of Windows 10.

Get the necessary changes, close the Registry Editor, reboot your alarm and then the Action Center should disappear or come, depending on the provided value.

“Method #2 – Group Policy”

The usage of, the hack is a great deal less complicated, speculate mentioned, suggests that you are running Windows 10 Pro or Windows 10 Enterprise. Windows 10 Home will not likely support the Local Group Policy Editor.

the Action Center, go through the Start menu and type Edit group policy thereafter hit Enter. Navigate to User configuration > Administrative templates > Start menu and Taskbar and look for an option called Remove Notifications and Action Center.

Automagically, this option positioned to Not configured, just what you have to do would be to enable it. Simply double-click this sort of item and then also change its status to enabled. Close all windows, reboot any pc and then the Action Center should stop there.

Undoubtedly, if you want to restore the last settings, it’s essential to follow the very same steps and change the said policy not to ever configured or disabled. A reboot are required far too.

The Action Center, however, is a pretty neat feature whose purpose you’ll discover in the event you give it associated with time. It provides quick access for some of the most important options in Windows 10 and, in addition, lets you witness your notifications and connect with them in a modern way. Disabling it will do restore the familiar Windows 7 approach, yet leaves you without it functionality.

Samsung May very well be Working on New Windows 10 Tablet

Posted on by
Reply

Samsung is probably companies devoted to the Windows 10 ecosystem, and after launching a Surface Book 2-in-1 device, it can be planning to unveil a successor one time this summer.

A machine referred to as Samsung Galaxy Book Windows tablet recently received Russian certification, and also official listing indicates that several variants use their way. LetsGoDigital comes across model numbers SM-W737, SM-W738, SM-W737A, SM-W737N, SM-W737V, and SM-W738N, that happen to be likely to be versions of identical device launched in a variety of regions coupled with more capabilities like LTE.

Details is not available for right now, and we doubt that Samsung would remove the wraps off this model thomas lee invented August if this unveils the new-generation Galaxy Note smartphone.

But at the same time, there’s a good chance that the organization wants to bring its new Windows 10 device onto the market before back-to-school season to be able to benefit from the growing sales inside of this industry.
“Low-cost tablet maybe?”

The Samsung Galaxy Book has never been a super-successful product, however rather it allowed the South Korean firm to become part of the 2-in-1 device push that’s driving forward PC sales today.

It was quickly two different versions, with 10.6- and 12.0-inch screens, and offered support towards the Galaxy S Pen, which at this point is one of the most advanced choices to Microsoft’s very own Surface Pen sold with Surface models.

Your ipod also featured high-end hardware like Intel Core i5 processors and as much as 8GB RAM, and it’ll be interesting to see if this new tablet is built on the same approach or even otherwise. There’s a chance that Samsung wants to bring a more affordable model for that market so as to expand in such an price range additionally, but we’ll check out these reviews later the new year when the launch is expected to take place.

Plan cell phone your migration to Windows Server 2019

Posted on by
Reply

While using upcoming relieve Windows Server 2019 this fall, it’s here we are at enterprise IT professionals who work in Microsoft shops get started on planning their migration in the new platform.

As with any major release, required time to get in tune with what’s new as well as start getting hands-on experience implementing new features. In this case, the enhancements include improved security that has been enhanced data-center capabilities.

Are among those who’ve been experimenting with the Insider Preview of Windows Server 2019 the maximum areas commonly deployed first are:

native Windows Server features
data-center-focused components
new Windows Admin Center management tools

Native Windows Server 2019 features

Most likely the most practical technique to approach the migration is concentrating on native Windows Server 2019 features, that include Web servers that run Internet Information Server (IIS), HyperV virtual host servers and fileservers. These traits rely solely on Windows Server, unlike third-party applications which often can require a few additional months while upgrades are written in order to support Windows Server 2019.

Web applications running on IIS are simple to test as the majority code is HTML, .Net as well as other Web app that operates on top of the IIS/Web platform. Generating Windows Server 2019 server with IIS and uploading Web code in the server is a quick-and-easy strategy confirm that the internet app works and may also easily be one 2019 server added to an atmosphere.

Fileservers are also good early targets for migrating old to new. All too often, fileservers have gigabytes and also terabytes of data to copy across, and fileservers are the things that might possibly not have been upgraded recently.

In early-adopter environments, repeatedly the old fileservers are nevertheless running Windows Server 2008 (which fits end-of-life in the summer of 2019) which enable it to use an upgrade. File migration tools like Robocopy or else a drag-and-drop between Windows Explorer windows can retain tree and file structures and also retain access permissions as content articles are copied between servers. Tip: After content articles are copied across, new servers is renamed when using the old server name, thus minimizing interruption of user access.

Implement data-center-focused components

Another wide range applications that are deployed very early are data-center-focused components like for example HyperV hosts that come with more sophisticated hyperconverged infrastructure (HCI) configurations.

A HyperV host are added to footwear HyperV 2012R2 or 2016 cluster, and virtual machines (VMs) might be Live Migrated or replicated in the old on the new computer itself host. Without getting fancy, VMs can just be shifted onto a new operating-system-based hypervisor server.

However, this really is many organizations consider the opportunity to better their data-center architectures by replacing basic HyperV clusters and implementing HCI-configured clustered environments. Strive to spin up two or three host servers and create out an HCI configuration running Windows Server 2019 to realize valuable hands-on experience.

HCI is certainly nothing more than this and updated HyperV cluster that shifts organizations of this concept of virtual machines running on individualized servers to a platform where VMs are sharing disk, networking and processing performance of most servers within a HCI configuration. This greatly improves performance, reliability, scalability and redundancy.

After gaining skills info from HCI running within just a test Insider Preview environment, you’ll move workloads to the new infrastructure by copying and mounting existing VMs in the new HCI cluster. If you can get problems running the VM inside new environment, the authentic VM can be remounted with a old/existing HyperV environment. The very first still exists considering that VM was copied. This one machine . becomes a way for greatly helping the HyperV environment for the significantly improved HCI environment, while using the safety net of falling returning to the previous environment when necessary.

Try out your new Windows Admin Center

A Windows Server 2019 feature that’s easy to implement is the Windows Admin Center, formerly labeled as Project Honolulu. The Windows Admin Center is loaded on the Windows Server 2019 server, however, the target systems can be Windows Server 2012 R2 and Windows Server 2016 in his or her native forms. No special software agents, add-ons or upgrades have to be added.

Windows Admin Center suggests the older servers, and then the management and administration interface of one’s Windows Admin Center rolls up old and new servers for the centralized administration window.

Successfully navigating a migration to Windows Server 2019 doesn’t require several months of planning, application testing nor needing the first service pack so that you can insert first 2019 server into the organization’s production environment. By implementing components that may have limited dependencies across the operating system itself, IT pros could possibly Windows Server 2019 embedded in the organization, begin getting real-world experience with new operating system and attain with barely enough risk.

Longer-term goals

Together with the simple stuff implemented, organizations can look to more complex scenarios where new Windows Server 2019 features which can include greatly enhanced security and hybrid integration with Microsoft Azure can benefit specific workloads. Some of which capabilities include implementing Shielded VMs for workloads that are wanting protection.

Further in the future, organizations may look at upgrading Active Directory to 2019, implementing new application services over Windows Server 2019 systems, and also. However, all in due time. For now, looking for a little hands-on exposure to Windows Server 2019 implementing basic IIS/Web applications, file services as well as provides valuable experience and definately will give you a can get on shifting some services for that latest Windows Server operating platform right away.

Chime in: Is there an best Android keyboard for Windows phone fans?

Posted on by
Reply

With Windows 10 Mobile nearing get rid of its life, many individuals have ditched our Lumia devices for Android. Android would have a great app ecosystem, but many features just aren’t just like Windows 10 Mobile, keyboards being one of them.

Forum user Jeevan Pulluru resulted in a discussion on that topic on our forums, and we end up needing to hear suggestions.

For a time, the “Word Flow” keyboard on Windows 10 Mobile held the whole planet record for swipe writing, even though Windows 10 Mobile’s virtual keyboard has arguably been outpaced by some of its Android rivals, for people who were used there, the Windows Mobile one still is still best option.

We would like to hear what Android keyboards everyone are using with regards to your phones. I couldn’t really stand from either of the options Cleaning it once a on Android, and also devolved back to an entire hardware QWERTY relating to the BlackBerry KEYone. Truthfully, it has reached the point where Simply put i prefer the KEYone’s precision and speed over Windows 10 Mobile’s, or possibly Windows Phone 8.1, which many felt has a better algorithm.

What You Should Know Before Deploying SQL Server in any Public Cloud

Posted on by
Reply

As the cloud finally is amongst the preferred carrier for many-but not always most-enterprise applications, IT organizations remain hesitant to trust all public clouds for hosting Microsoft SQL Server applications.

Why? Do you know differences as among the Big 5: Google Cloud, IBM Cloud, AWS, Oracle and Microsoft Azure? Glad you asked. Of the concerns could be the increased risk and complexity most typically associated with running SQL Server various public cloud, where high-availability (HA) clustering configurations can be challenging to implement-and can boost the overall cost of a solution.

Throughout this eWEEK Data Point Interview, Dave Bermingham (pictured), Microsoft Cloud and Data Center Management MVP at SIOS Technology, offers readers a short list of seven things IT professionals should know when considering running Microsoft SQL Server within Google Cloud.

Bermingham is recognized in your technology community in the form of high-availability expert who has been honored by his peers when it is elected to be a Microsoft MVP for the last eight years, six years as being Cluster MVP as well as a years to be a Cloud information Center Management MVP.

Data Point 1: High-availability clustering will usually get considerably more complicated for the cloud’s virtual environment.
The layers of abstraction across compute, storage as well as networking resources from a virtualized public cloud infrastructure makes it extraordinarily challenging ensure HA provisions perform desired under all possible failure scenarios. This runs specifically true in a multi-site or hybrid cloud environment where additional networking configurations must and cluster quorum settings have got to be considered carefully.

Data Point 2: Networking contained in the Google Cloud fails to support gratuitous ARP, meaning typical cluster client redirection fails.
While virtual IP addresses and client access points are still sometimes used for client redirection, additional work have got to be done about the network layer including creating customer subnets and host specific routes that can help facilitate client redirection.

Data Point 3: Resilient Storage Area Network (SAN) services aren’t available in google’s Cloud.
Cluster-aware storage simply will not likely exist being a service inside Google Cloud, and being aware of the cluster is fundamentally vital that you achieving high availability. Indeed, without full and continuous focus on the cluster’s status end to conclude, a failover can fail or result in data being lost or corrupted.

Data Point 4: Overlaying purpose-built SAN-less cluster software atop google’s Cloud Platform can overcome these together with other limitations to afford mission-critical high availability.
You’ll create a shared-nothing HA cluster configuration through the Google Cloud perhaps a hybrid cloud environment using special shared-nothing software purpose-built for real-time data replication and automatic failover. These solutions normally offer support for virtually every application, and some have features developed specifically for SQL Server.

Data Point 5: SAN-less clusters will certainly make the cost effective Standard Edition with Always On Failover Clustering equally reliable as Enterprise Edition’s Always On Availability Groups.
Formula organizations can tell of providing high availability for SQL Server applications contained in the Google Cloud is using Always On Availability Groups for the Enterprise Edition. But due to the fact approach is even more expensive, the expense is normally only justifiable if other highlights of Enterprise Edition also are required. Employing a SAN-less cluster for use with SQL Server, however, all database applications can be carried out HA only using the Standard Edition.

Data Point 6: Seamless usage of Windows Server Failover Clustering dramatically simplifies the handling of high-availability SQL Server applications.
A normal technique for supporting Failover Cluster Instances (FCIs) in SQL Server Standard Edition is to use the familiar Windows Server Failover Clustering feature included in the operating-system. Using WSFC simplifies satisfying value of automatic and seamless failover and failback upon a fully redundant and fully synchronized multi-site configuration. Such seamless failover/failback also enables software updates and patches that should be installed with minimal downtime.

Data Point 7: SAN-less cluster configurations afford additional important benefits of being storage agnostic and delivering improved performance.
Continuously replicating and synchronizing data all through wide-area network (WAN) may have an adverse effects on performance, especially when special provisions might want to accommodate different storage systems. SAN-less clusters that support robust capabilities like block-level replication information compression give means to assure top rated and high availability in cloud and hybrid-cloud environments where traditional SAN-based replication solutions don’t apply.

Microsoft’s latest Windows Server 2019 test build includes first preview of Hyper-V 2019

Posted on by
Reply

Microsoft released on June 19 new test builds from the next versions of Windows Server including the first Insider preview of Hyper-V 2019.

The Windows Server Build 17692 test releases are accessible for Windows Server 2019, called the next Continual Servicing Channel (LTSC) release, in addition the associated Windows Server Semi-Annual Channel (recommended to be called 1809).

Hyper-V Server is mostly a standalone sort of Windows Server this includes only the Windows hypervisor, a Windows Server driver model and virtualization components. The hypervisor technology in Microsoft’s Hyper-V Server matches what’s while in the role on Windows Server, significance much of what it’s all about available in the Hyper-V role on Windows Server 2016 also applies to Hyper-V Server, Microsoft’s text about today’s test build reminded users.

Build 17692 comes with a new feature in Windows Server 2019 called System Insights. This selection brings local predictive analytics capabilities natively to Windows Server. The feature permit users to locally analyze Windows Server system data like performance counters and events, capacity forecasting, prediction of future usage for compute, networking and storage, and more often, Microsoft officials said.

Most of the data collected is analyzed proper a Windows Server instance, so no cloud connectivity is critical. System Insights can be managed at a Windows Admin Center (“Project Honolulu”) extension or directly through PowerShell.

When it comes to Windows Admin Center, there’s even a new preview (1806) for that product available to date. And there’s a new Server Core App Compatibility feature on demand, and that is meant to assist the app compatibility of Windows Server Core when you get a set of binaries and packages from Windows Server with Desktop, minus either of the Windows Server Desktop GUI or Windows 10 GUI experiences. This package is on the market on a separate ISO and installs on Windows Server Core only, officials said.

Before installing today’s test builds, users should investigate Known Issues list incorporated into Microsoft’s content about 17692.

Windows Server 2019 and Windows Server 1809 are hoped for to be available to mainstream users this fall.

Windows 10 using the Fast Ring: The new features being the Insider program

Posted on by
Reply

It’s approaching three years since Microsoft launched Windows 10, in July 2015, which is finally well into its ‘Windows-as-a-Service’ groove. Modern six-monthly release 1803, the April 2018 Update, is on over 50 percent of Windows 10 PCs, a considerably faster update rate than previous releases, with Microsoft beginning to provide it to business users. Machine gaining knowledge from installation telemetry is being used to minimize the gap between consumer and enterprise releases, or maybe speeding up consumer deployments.

Just like previous Windows 10 updates, Microsoft continues to deliver preview builds of the planned 1809 release included in its Windows Insider Programme. Due for release enough time in September or October consist of Microsoft’s roughly six-monthly Windows release schedule, your next Windows update is actually codenamed RS5 and will be all of the the Redstone collaboration of Windows builds. Future preview builds will follow Windows Server trying the semi-annual channel names prior to when release, with 1903 preview builds applying the release of 1809.

Around the Fast Ring

With Fast Ring builds appearing at roughly weekly intervals, Microsoft is certainly the current report on previews to trial new user-interface concepts, in addition to test out the other edition in their Windows 10 SDKs. I am testing them about the range of different machines, quite a few vintages and processor types, using Surface Pro 3 as my main test device. Each preview builds there is the risk of instability, and another test device had to be reset around the previous build after getting stuck for a boot loop.

We’re now ninety days into this withstand the Windows Insider program, additionally the team at Microsoft has announced its first major ‘bug bash’ for this cycle, soon after June. These mounted ‘quests’ through specific actions to capture data about reproducible bugs, and prioritise fixes over features for the few builds. Utilizing bug bash with the schedule we probably haven’t seen all of the features that are going to get involved the 1809 release, but what’s in current builds can certainly make the cut.

Tweaking the Windows UI

An integral element in present-day release cycle works as a continued transition among the flat colors of Windows 8 for that new Fluent Design model, utilizing more Windows 7-like blur in transparent views, there is added animations and highlights where necessary. The resulting look-and-feel is less clinical, although it looks here we are at Windows’ past, it also includes a look to the effects Microsoft expects developers to include UWP apps through the Windows Store. That’s paired with a continued range from the old cp to the new settings app, keeping this release cycle bringing more language and sound settings across, including improving an alternative dark theme for Windows.

Microsoft recently bought iOS and Android keyboard vendor SwiftKey, of your intention of replacing unique Word Flow machine-learning driven screen keyboard with SwiftKey’s larger data set. That keyboard has finally show up at Windows 10 inside of the latest Insider Build. Using SwiftKey’s services, autocorrect and predictive typing in Windows 10’s pop-up keyboards may gain advantage from training across countless others keyboards, hopefully improving accuracy when employing Windows 10 becoming tablet.

Updating internet with Edge

The Edge browser also consistently get improvements, with Microsoft announcing that it’s going to soon be adding the cabability to stop media auto-playing. Anyone who’s worked with an open-plan office will fully grasp this feature, as news sites and adverts won’t suddenly start playing in hidden tabs. There’s also updates to how Edge handles debugging, with improved support of the WebDriver debugging protocol and also an easier approach to installing and updating the WebDriver components.

Essential new feature: Sets

Release 1803 introduced the promised Timeline feature, the many innovations refined from the RS5 builds. However, the bigger user interface changes that Microsoft’s trialing in our current previews are determined by a new feature that it is calling Sets.

Originally trialed getting a small group of ‘skip ahead’ users within the past preview cycle, Sets isn’t available to most users in the Fast Ring. Made to group apps and web pages together in a single frame, Sets is surely an interesting concept upends Windows’ windowing metaphor. However, this will take some becoming accustomed to, especially if you’ve grown often the way Windows 10 tiles windows over larger screen. However, on laptops and tablets it is really an interesting method ensuring many of the content you would need for a task is one place.

While Sets looks promising, it’s missing key features that leave the on-going implementation underwhelming. Microsoft has promised a ‘pick up where you can left’ option for Sets, but while aspects of the user interface have established yourself, it’s not currently working. That includes you’ll currently be required to remember what we were using and reassemble an accumulation of apps with every new Sets session. An explicit save option ?a perhaps similar to the Set Tabs Aside function in Edge ?a is additionally missing. I regularly switch between different tasks per day, and it are going to be useful to have named Sets for articles I’m certainly writing that mix copy and research that individuals could load at will. Another missing feature may possibly be the ability to send an extensive Set to somewhat of a colleague, allowing you to collaborate on simply one, but several documents.

Recent builds have added an apps approach to the New tabs pane, but that only shows apps you’ve recently used. Recent Office releases have added initial support for Begins familiar tools like Word and Excel, permitting you to group them suitable into a set of working documents. The option to bundle the bulk of the apps you’ve into a single window, tabbing between cases of Office apps and between Edge internet sites, is starting to improve on me. It’s not necessarily quite a fit for a way I work, yet it’s showing promise.

Sets may well be an obvious candidate for the upcoming release, but Microsoft is yet to invest in a specific release cycle because it, preferring to stick to its policy of under-promising and over-delivering. Even then, with the desktop type of Office adding support for a Sets UI in the mainline monthly release, the entire signs are pointing to it making directly into next Windows 10 release.

In relation to 1809

Microsoft continues to make progress featuring its Windows 10 previews. While we’re still noisy . part of the 1809 release cycle, the contemporary series of Insider builds are stable and usable – even with the fast ring. Using its semi-annual releases to fine-tune graphical user interface updates, they’ll quickly roll them over to consumers providing telemetry that are able to define after a release is prepared for use in enterprises.

You might be running a fleet deployment of Windows 10 Enterprise, it’s certainly worth keeping a limited number of Windows 10 Pro devices concerning the Insider program, to make certain of you’re ready on the ever-shortening gap between consumer release and enterprise rollouts feeling that your software works with the latest builds.

Microsoft is ‘reworking’ its Xbox app for Windows 10 to PC gamers

Posted on by
Reply

Microsoft’s Xbox app for Windows 10 has tried bridge the space between console and PC with streaming features, Xbox party chat, and game management. Although the app is regarded as better built-in Windows 10 apps, it hasn’t always been well received by PC gamers who don’t hopeful forced directly into Xbox Live world.

Inside of a Q&A at E3 this month, Microsoft’s gaming chief, Phil Spencer, game some interesting understanding of the company’s plans in your Xbox app on Windows 10 and PC gaming as a rule. An audience member asked Spencer about fixing Microsoft’s PC offerings, specifically the game management and Xbox app.

“I’d say our early work within… Xbox Live stuff for Windows was well intentioned, but anybody that’s a personal computer gamer (I play a considerable amount of PC games myself) saw many of these imposter console work coming over,” says Spencer. “You’ve probably seen us decrease the pace of on examples of progress we’ve made on much of our apps, and most other things because we’re reworking how we’re taking into consideration the PC audience in an attempt to be more reflective belonging to the PC community that’s obtainable instead of striving to pull people to your things that come from the console space.”

Spencer also notes that efforts like Discord and Xbox Live integration is certainly an example of “recognizing infrastructure that exists on my computer side, apps that exist, and services that can be found and try to be inclusive of the things PC gamers are about.” Microsoft is delaying on changes towards Xbox app immediately, but “the long-term goal covers us grow to be much more native inside the PC gaming environment, contrary to this thing that feels slightly different from what PC gamers must find.”

It’s not clear when changes are due, but Spencer has signaled that Microsoft is knowledgeable of some of the criticisms across the Xbox app and game management into the Microsoft Store. Microsoft will now be taking a step back to address them.

Windows 10 black screen problems fixed, as Microsoft patches 50 security flaws

Posted on by
Reply

Microsoft has fixes for 50 security flaws included in the June Patch Tuesday update and they have released quality improvements and fixes for Windows 10 version 1803 or even the Windows 10 April 2018 Update.

The KB4284835 update moves Windows 10 version 1803 to OS Build 17134.112 and addresses an issue that caused systems to start by up in a black screen: “This issue occurs because previous updates toward the Spring Creators Update were incompatible with specific versions of PC tune-up utilities after installation.”

The niche is separate around the black screen problems Avast users were hampered by last month after installing Windows 10 version 1803.

Associated with the other bug fixes, Microsoft has fixed a major issue where firmware updates cause devices to enter BitLocker recovery mode only when it’s enabled, but Secure Boot is disabled or maybe not present. This build now prevents firmware installation once a device is in the state.

Admins can install firmware by temporarily suspending BitLocker, installing firmware updates prior to next OS startup, or by immediately restarting the rii so that BitLocker doesn’t continue in a suspended state.

Microsoft’s June security patches, which are usually included in the new Windows 10 build, address flaws in Internet Explorer, Microsoft Edge, Windows, Office, the ChakraCore scripting engine, along with Adobe Flash Player flaw that had been already being exploited for the wild.

There are 11 critical flaws and 39 flaws rated as vital that are fixed, only one of the bugs was publicly disclosed this month and none is known as exploited.

Trend Micro’s Zero Day Initiative (ZDI) on May 29 disclosed a challenge with how Windows handled error objects in JavaScript, that may allow an opponent to execute arbitrary code. The bug, CVE-2018-8267, exceeded the ZDI’s disclosure deadline.

Microsoft’s advisory for CVE-2018-8267 notes the fact that the flaw is generally exploited through Industry or an Office document that hosts the IE rendering engine. A victim would need to can see a malicious or compromised website. Microsoft believes this bug can be exploited.

Cisco’s Talos Intelligence researchers highlighted three bugs that Windows users should patch promptly this month, just like publicly disclosed flaw rrncluding a remote code execution vulnerability within Windows Site System (DNS), CVE-2018-8225.

“This vulnerability manifests stemming from DNSAPI.dll improperly handling DNS responses. This vulnerability could allow a remote attacker to complete arbitrary code within a context belonging to the LocalSystem account on affected systems,” wrote Talos researchers.

“An attacker could leverage a malicious DNS server and send specially crafted DNS responses to trigger this vulnerability.” However, Microsoft notes exploitation of the bug is more unlikely that.

The third key fix is actually for a remote code execution vulnerability affecting Chakra (CVE-2018-8229), which is found by Google Project Zero, and can be exploited through Edge. Microsoft believes this flaw can be exploited.

Microsoft offers published new guidance on Windows mitigations towards the Meltdown and Spectre flaws, as well as the related Spectre Variant 4 Speculative Store Bypass attack, CVE-2018-3639. Turn out to be fully protected, users and admins might have to take further action, Microsoft notes.

Already released mitigations for Windows 10 to Windows 7 for Spectre variant 1, CVE-2017-5715, and Meltdown variant 3, CVE-2017-5754, are enabled by default.

On supported Windows Server systems, the mitigations are disabled automatically and admins need to take further steps to enable them.

Mitigations for variant 4 are available for Windows 10, Windows Server 2016, Windows 7, and Windows Server 2008 R2. However, they’re disabled automatically.

The June update also addresses a Cortana elevation of privilege vulnerability may possibly allow an opponent to execute commands with elevated permissions.

Cortana retrieves data “from user input services without consideration for status”, in step with Microsoft.

An attacker who successfully exploited the vulnerability could execute commands with elevated permissions. However, the attacker would desire physical access within a system with Cortana enabled.

Researchers from McAfee have posted an intensive account approaches an attacker may use Cortana to search for sensitive information like stored passwords, while in some things to execute code locally.

How to use WSUS Offline Update for Windows clients and servers

Posted on by
Reply

While anyone can agree that keeping over updates is best to keeping devices protected, there are some alternatives accessible to the means of downloading updates totally each client and server device. Among these include Microsoft’s own enterprise solution, Systems Center Configuration Manager (SCCM) and Windows Server Update Services (WSUS), the factor that downloads patches centrally and deploys them about the network.

These often are equipped with expensive licensing fees or require extensive hardware requirements that may possibly make it difficult manage and/or seek purchase approval from management. Enhancing the complexity is the fact updates are let go of at an alarming rate, with a hundred new patches popping out weekly (i.e., Patch Tuesday) multiplied because of the number of different operating systems supported times the quantity of devices around the organization, as well as its easy to see the way the patch management process slips under the radar of the specific largest IT departments.

WSUS Offline Update is a simple, lightweight, elegant solution, released totally free under the GNU GPL license. Its tagline is, “…since security, time, and bandwidth are money.” It’s aimed at streamlining grime updating your clients and servers through an innovative us going for powerful, intelligently-written scripts to download updates directly from Microsoft’s public catalog servers and deploy them. When you’re ready. Since the process stores updates locally, updates might well be deployed offline, guaranteeing your devices get inoculated against known threats and do not become compromised on a lengthy online update process.

Before we dive straight into the crux of setting this up, there are several requirements we’ll need before commencing:

Windows PC with Windows 7 or later (Optional) or Windows Server with Windows Server 2008 or later (Recommended)
WSUS Offline Update software extracted to directory on storage drive
Broadband Internet Access
Internal storage device with available space
Optical memory with writable DVD media (Optional)
Switched Network Infrastructure (Optional; yet A good idea)

With the minimum requirements straight, let’s look at techniques to run WSUS Offline Update for making our update repository.

1. Launch the UpdateGenerator.exe purchased the WSUS Offline Update ZIP file.

2. Notice there’s two tabs: Windows and Office. Different toggles the supported versions of both Windows and Office respectively.

3. Begin with placing a sign up in the box for each and every version of Windows you would want to download catalog updates for. Take serious notice that some OSes are broken into two categories founded on x86 and x64 architectures. Once complete, you can find more selections from your Options section which are then optionally enabled, as in .NET Framework, Runtimes, and Windows Defender definitions for newer systems with built-in malware protection. Additionally, the opportunity to create ISO images or USB/external media directories could also be selected on this site as well by ticking the boxes under Create ISO images… or USB medium sections. As you seek to begin, hit the Start button to proceed.

4. The actual procedure will launch a command line window that download the catalog declare each OS version and sort, and compare it to what’s currently available during the repo. If it’s consider running WSUS Offline Update once the repo will be empty and all of the missing updates shall be downloaded.

5. The technique will download the many Microsoft updates to make the selected versions of Windows client and server OSes. Based on the number of items selected and speed of an internet connection, clearly cost process might take several hours to carry out. Additional options for instance downloading optional components and creating ISOs of one’s updates (more about that later) will extend effectiveness time. Once done, a notification will look asking for confirmation to check the log file. Clicking Yes will open the log, while clicking No will close the app.

6. Navigating in the Client folder located in your root of the WSUSOffline folder, you will come across the addition of several folders, each holding the updates respective of each one version of Windows selected in step 3.

7. Before you go to deploy the updates to the device – either offline or online – simply hook up to the server share or external media that stores the repository made in steps 4-5. See aSuch as selection screen in step 3 above, place an inspection next to each optional entry you intend to install alongside the updates (by default, the updates are constantly installed). Click Start when you are ready to begin deploying.

8. The command line will launch and examine your device to find out what updates are now installed. Those present is going to be skipped, while those pending will undoubtedly be added to a dynamically generated list and installed sequentially. You will not certain updates or optional components that a reboot, the process will halt and prompt you to restart. After rebooting, rerun the .exe and it’ll continue where it left off.

9. In case the updates have completely finished installing, the job will end informing you that it can be complete or prompting consumers to reboot.

Generating ISO images:

In step 3, inside of the organization section titled Create ISO image(s)…, users are capable of create ISO image(s) on the updates they’ve downloaded. As soon as box is checked, this process will create an ISO image in every version of Windows client and server selected. Could be extremely useful because the ISO file is mounted, burned to some DVD, or copied to some USB Flash Drive for deployment to systems which can be compromised, possess a poor network connection, or are otherwise inaccessible, like air gapped devices.

As your process completes downloading updates for a certain version of Windows, the script will chance a subcommand to create the ISO.

These ISO files is definitely written to your ISO folder found at the root among the extracted WSUSOffline directory. As being a possible additional security precaution, hash files might also be generated in each ISO to verify the integrity associated with every file and control tampering.

Optional Controls and Automation:

When running the UpdateInstaller.exe file to kick-off investing in updates in step 7, there are a few optional settings that is certainly enabled inside of the organization Control section to try and do specific functions, most notably verification of installation packages to make certain the packages installed correctly and are not corrupt or broken, which often can lead to system instability.

By deciding on the Automatic reboot and recall feature, you can be prompted to confirm the use of pre-owned, as well as find out of a few changes which were made by WSUS Offline Update so automation will occur supply of electricity hitch.

Below is a list of changes that have to be made in order for automate and recall to the workplace as intended and choose where it left off for a system required reboot:

The WSUS Offline Update folder when the files are extracted to need to be configured as a shared folder with read permissions granted to Anonymous security group. (It is the only change that must be made manually, everybody else below are made automatically by WSUS Offline Update).
A temporary admin account could be created along with to autologon to carry on studies running practise with admin rights to attach the updates.
The WSUS Offline shared folder will likely to be configured being mapped drive on the local device, since UNC paths usually aren’t supported by the CLI.
User Access Control (UAC) will undoubtedly be disabled just before the update process has completed successfully.