Category: Server 2019

When Security Hardening Becomes a Security Risk: The CLFS Case and the SignDrop Windows Zero-Day

When Security Hardening Becomes a Security Risk: The CLFS Case and the SignDrop Windows Zero-Day PowerShell check your system: Get-ItemProperty ‘HKLM:\SYSTEM\CurrentControlSet\Services\CLFS\Authentication’ | Format-List If it’s set to 0 or 1 then you’re vulnerable. If it’s set to 2 or 3 then you’re not vulnerable. 0 Enforcement Mode – authentication is enforced 1 Learning Mode – authentication codes […]

image

Remote Desktop Services RDS out-of-band emergerncy release GUID numbers for W10/W11/SERVERS

After you install September 2026 09-2026 patch day updates RDS may not work Microsoft Addresses Windows Regressions With Emergency Out-of-Band Updates V2 re-release reported issues currently include: 1) New connections start hanging a few hours after reboot with “Connecting…” and existing users are unable to log off The following signatures are indicative of this particular […]

image

server 2019 end of life | Technical Deep Dive for System Engineers

Windows Server 2019 End of Life – Technical Deep Dive for System Engineers Server 2019 End of Life – Facts, Dates and Technical Impact Windows Server 2019 is deeply integrated in many enterprise environments: Active Directory, file services, Hyper‑V, Failover Clustering, SQL backends, RDS and line‑of‑business workloads. While it is still stable and widely deployed, […]

Is your SBS environment update ready for 25H2 W11, SMB-Version, smbchecker.ps1

PowerShell script to check if you SMB setup is 25H2 ready   Windows 11 25H2 – Small Update, Big Impact for SMB Environments Windows 11 25H2 is now being offered on home and business systems as an Enablement Pack. This means it’s not a full new installation — instead, it’s a small ~50 MB update […]

MS SRV Disable IPv6 the correct way CVE-2024-38063

Recommendation 16.08.2024 for CVE-2024-38063 and IPV6 There is a patch from 2008-2022+ Servers so use it See following LINK on how to import the older OS patches into WSUS CVE-2024-38063, CVSS 9.8, import free 2008/R2 + 2012R2 into WSUS – www.butsch.ch https://www.butsch.ch/post/cve-2024-38063-cvss-9-8-how-to-import-the-free-2008-2008r2-patch-into-wsus/ If you can’t patch then as least options CAREFULLY consider disabling IPV6 the […]