Microsoft a publié des mises à jour hors bande pour Windows Server et Windows 11 afin de corriger le bug RDS, mais aussi d'autres bugs et une faille.

Le post Windows Server : voici des mises à jour hors bande pour le bug RDS, mais pas seulement a été publié sur IT-Connect.

Microsoft is retiring NTLM (NT LAN Manager), a legacy challenge-response authentication protocol, in favor of Kerberos, a ticket-based protocol that verifies both the client and the server. NTLM will be disabled by default in the next major Windows Server and client release, but you can start preparing now with enhanced auditing and Kerberos fixes. This article summarizes Microsoft's new FAQ about the upcoming retirement of NTLM.

Source

Microsoft has released emergency out-of-band updates after September Patch Tuesday disrupted Remote Desktop Services, Hyper-V-based Linux virtual machines, and USB audio devices. The move follows a record-breaking September Patch Tuesday that was quickly complicated by two Windows zero-days, giving administrators a second urgent deployment decision within days.

Source

Microsoft a confirmé le bug des services RDS causé par les mises à jour de septembre 2026 et a publié un correctif KIR. Voici comment le déployer par GPO.

Le post Bug RDS de septembre 2026 : comment résoudre le problème sur Windows Server ? a été publié sur IT-Connect.

Les mises à jour de septembre 2026 pour Windows Server 2019, 2022 et 2025 provoquent des pannes des services Bureau à distance (RDS).

Le post Windows Server : le patch de septembre 2026 casse les serveurs RDS a été publié sur IT-Connect.

Windows administrators report that the September 2026 cumulative updates can cause Remote Desktop Services (RDS) to hang or crash on Windows Server 2019, 2022, and 2025. Microsoft’s release notes separately confirm Remote Desktop problems in Windows Server 2016, including broken audio redirection, while the updates also address a critical RDS remote-code-execution flaw.

Source

A new Microsoft Defender zero-day called ShieldCrash can reportedly read arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems. The proof of concept targets an incomplete fix for ShieldBreak, patched in September, and could potentially be expanded into a full SYSTEM privilege-escalation exploit.

Source

CompatTelRunner.exe is a Windows Compatibility Appraiser process. It runs diagnostic checks to determine whether a device’s hardware, drivers, and installed applications are compatible with upcoming Windows feature upgrades or cumulative updates. Microsoft has confirmed that the August 2026 security updates can cause recurring `0xc0000409` crashes in `CompatTelRunner.exe` on Windows Server 2016. The issue affects physical servers and virtual machines, including VMware and Azure deployments, but does not currently impair system functionality.

Source

Windows Server 2025 administrators may need to disable Lock Pages in Memory (LPIM) to stop SQL Server crashes linked to a change in the system’s memory-management behavior. Microsoft has not yet released a permanent fix for applications using Address Windowing Extensions (AWE), so disabling LPIM remains a potentially costly workaround.

Source

Microsoft will significantly tighten Windows Hardware Compatibility Program (WHCP) driver signing from March 2027. Drivers targeting Windows 11 25H2 or later and Windows Server 2025 or later will need validated Software Bill of Materials (SBOM) and Vulnerability Exploitability Exchange (VEX) files, while submissions will also need to target relatively modern hardware.

Source

Dans cet article, nous verrons ensemble comment installer un serveur SFTP sur Windows Server. J’utiliserai ici Windows Serveur 2022 mais vous pouvez faire de même sur les versions précédentes. Nous utiliserons ici le logiciel open source OpenSSH pour réaliser cette tâche. Pourquoi utiliser un serveur SFTP ? Un serveur SFTP est un moyen sécurisé et …