Microsoft Releases Out-of-band Updates To Fix Reporting Error

Emergency patches for Active Directory (AD) Group Policy clear up perchance confusing reports astir auditing.

Microsoft has released emergency patches to hole an evident reporting correction successful Active Directory (AD) Group Policy, which allows administrators to negociate and configure personification and machine settings successful Windows.

The company reported successful a Microsoft 365 connection halfway update that nan position of section audit logon/logoff policies mightiness beryllium incorrectly displayed, pinch audits showing arsenic not occurring erstwhile they were really moving successful nan background.

The rumor is occurring crossed various Windows and Windows Server versions, including Windows 11. The out-of-band (OOB) updates only request to beryllium installed by impacted organizations, and tin beryllium downloaded and installed from nan Microsoft Update Catalog.

“The rumor is that nan mounting to audit logon and logoff events whitethorn beryllium abnormal (set to ‘no auditing’) and yet still nutrient log entries for events of this type,” explained Fred Chagnon, main investigation head astatine Info-Tech Research Group. “These events are triggered by users aliases devices authenticating to nan section Active Directory erstwhile joining nan domain.”

Potentially confusing reports

Out-of-band updates reside urgent issues extracurricular of regular merchandise cycles, often for information aliases different captious issues. They require manual download and installation because they do not effect each users.

The AD Group Policy inconsistency is visible successful nan Local Group Policy Editor (where administrators negociate argumentation settings connected a section computer) and Local Security Policy (where administrators negociate information settings connected individual computers). The ‘audit logon events’ argumentation mounting allows strategy administrators to way logon and logoff events and create caller entries successful audit logs that registry each personification and work activities. It is typically utilized successful information and compliance scenarios.

The rumor is that ‘audit logon events’ is group to ‘no auditing’ moreover if audits are so moving successful nan background.

In nan this case, “the downstream effect is perchance confusing reports wherever specified events are displayed alongside different much absorbing events, contempt an administrator’s effort to select them out,” said Chagnon. “Or that nan mounting simply appears abnormal erstwhile it is really acting arsenic enabled.”

Last Friday, Microsoft released updates to reside nan glitch:

• Windows 11, versions 23H2 and 22H2 (KB5058919)
• Windows Server 2022 (KB5058920)
• Windows 10 Enterprise LTSC 2019 and Windows Server 2019 (KB5058922)
• Windows 10 LTSB 2016 and Windows Server 2016 (KB5058921)
• Azure Stack HCI, type 22H2 (KB5058920)

• news

  HP rolls retired caller AI-powered laptops and desktops for enterprises

  Mar 18, 2025 5 mins

• news

  Zoho intends to toggle shape endeavor task guidance pinch caller AI-powered DDPM platform

  Mar 11, 2025 5 mins

• news

  SEC, DOJ analyse CrowdStrike woody pinch reseller Carahsoft

  Feb 21, 2025 5 mins

• news

  It’s really happening: Are you prepared for nan sunsetting of Exchange Server 2016 and 2019?

  Feb 12, 2025 6 mins

• news

  Monday.com intends to beryllium an ‘AI-First’ level pinch latest enhancements

  Feb 11, 2025 7 mins

• news

  Meta wants everyone to cognize that it, too, is investing a batch successful AI

  Jan 24, 2025 1 min

• news

  More than 4% PC shipment maturation predicted for 2025, but not for what you expect, says IDC

  Jan 9, 2025 6 mins

• news

  With o3 having reached AGI, OpenAI turns its sights toward superintelligence

  Jan 6, 2025 1 min