Microsoft Roadmap, messagecenter en blogs updates van 27-08-2024

het nieuws van Microsoft message center roadmap en blogs - KbWorks - SharePoint & Teams Specialist

27-August-2024 Below you will find a collection of news published yesterday. This news consists of Microsoft’s Roadmap when it is updated it will be below with items. Then there will be a section with the message center, if there is anything new there, this will be automatically included. And it contains a piece from blogs that I follow myself and would like to share with you. If I miss something in the blogs that do have an RSS feed, please let me know.

This entire post was automated via Microsoft Flow
have fun reading!

Office 365 Roadmap Updated: 2024-08-27

Items from the MessageCenter in Microsoft 365

Changes to Windows Boot Manager revocations for Secure Boot, effective July 9, 2024
Category:Windows
Nummer:MC873559
Status:stayInformed
Follow the new guidelines to deploy changes across enterprises and understand how the new Windows Boot Manager self-revocation works. These new guidelines are part of a plan with five phases to deploy protections against the publicly disclosed Secure Boot security feature bypass (CVE-2023-24932).

The Deployment Phase is now in effect and documented in the updated KB5025885. This new phase starts with changes introduced by the July 2024 Windows security update. Learn more about these changes at KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932,

When will this happen

The new Boot Manager is included in the Windows updates released on or after July 9, 2024.

How does this affect your organization

This update for Secure Boot has five phases:

  • Initial Deployment phase: This phase started with updates released on May 9, 2023, and provided basic mitigations with manual steps to enable those mitigations.
  • Second Deployment phase: This phase started with updates released on July 11, 2023, which added simplified steps to enable the mitigations for the issue.
  • Evaluation phase: This phase started on April 9, 2024, and added additional Boot Manager mitigations.
  • Deployment phase: Starting with the July 9, 2024 update, we encourage all customers to begin deploying the mitigations and updating media.
  • Enforcement phase: The date for this phase will be announced in the future. The Enforcement phase will make the mitigations permanent. We are now in the Deployment phase. In this phase, we add support for Secure Version Number (SVN) to block older Boot Managers. This update installs a new Boot Manager that has an SVN, and it allows you to set the same SVN in the firmware.

What you need to do to prepare

Install the Windows monthly servicing update released on or after July 9, 2024, on supported Windows devices. Take the following steps to apply the revocations, install the new Boot Manager, and apply the new SVN update:

  1. Update the certificate definitions.
  2. Update the Boot Manager.
  3. Enable the revocations.
  4. Apply the SVN update to the firmware.


Additional information

Windows Autopatch: Auto-remediation with PowerShell scripts
Category:Windows
Nummer:MC873646
Status:stayInformed
If you use Windows Autopatch to manage Windows updates in your organization, you can sometimes experience deployment issues due to conflicts with Microsoft Intune policies. These issues are common in environments that rely on Configuration Manager (ConfigMgr) and Group Policy Objects (GPO). When this happens, you can use PowerShell detection and remediation scripts to easily rectify the problem. Read more about our recommended solution in Windows Autopatch: Auto-remediation with PowerShell scripts. This solution is for you if you currently use Microsoft Intune and don’t use third-party application patching solutions with Configuration Manager.
 
When will this happen: 
This capability is already available and is based on recommendations in our official documentation, such as Conflicting configurations
 
What you need to do to prepare: 
If you use Windows Autopatch, learn more about the issue and our recommended solutions in the resources linked below. If you don’t use Windows Autopatch yet, consider how it might fit your organizational needs
 
Additional information: 

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top