First new Windows 11 functionality released in a cumulative update

Topic

New Reply

Microsoft has released February 15, 2022—KB5010414 (OS Build 22000.527) Preview (microsoft.com). Even though the title has “Preview” in it, this updat
[See the full post at: First new Windows 11 functionality released in a cumulative update]

--Joe

2 users thanked author for this post.

abbodi86, lmacri

Reply | Quote

Replies

So now they are adding features and changing layouts in monthly updates? Oh for crying out loud, I thought the six month cycle with Win10 was bad. You cannot just change things like this for corporate users whenever you feel like it. It should always be an opt-in choice to have things change like this.

Yes, we’ll stretch the remaining five years of Windows 10 out as long as possible in our govt agency.

No matter where you go, there you are.

1 user thanked author for this post.

Alex5723

Reply | Quote

Yes, welcome to “dribble”.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

You must manually check for updates, and specifically tell it to download and install this preview.

 

It will not install automatically.

Reply | Quote

Interesting.. burried in all the “New!” stuff I noted

• <p class=”x-hidden-focus”>”Addresses an issue that affects the Silent BitLocker enablement policy and might unintentionally add a Trusted Platform Module (TPM) protector.”</p>

Given the rise of ransomware leveraging bitlocker (eg. Lockbit) that I read as running bitlocker automatically lock the ability to use credentials to log in with bitlocker credentials to the TPM of the machine is installed in, so you can transfer the drive to another? (it was  a problem I met with bitlocker with PIN – if you swapped the drive to an indentical chassis and you know the PIN you still couldn’t acccess Windows which meant the legwork of recording the recovery keys as our LSE customers hadn’t got to server 2012 at that point. There’s a summary  of the changes at that point at this page if interested – made for a lot to do… https://uefi.org/sites/default/files/resources/UEFI_PlugFest_UEFI_implications_for_Windows_Server_Microsoft_March_2013.pdf

I found it a little concerning that if you (google) search for “Silent BitLocker enablement policy” at site:microsoft.com you find that term only exists in the KB5010414 documentation (in several localities). Was it that MS needed a name for this, or is it usually referred to in other terms?

Also anyone clearer as to if this relates to what options you can use during the process of configuring a Windows policy, or the protectors that will apply during the automatic implementation of encryption by Windows when settings are suitably configured in a UEFI BIOS? (that is to say in this change are Microsoft are going to make it easier to get into your Windows installation on another machine if you have the recovery key?) Guess someone might find out doing a clean install in the future…

Reply | Quote

oldguy wrote:

Given the rise of ransomware leveraging bitlocker (eg. Lockbit)

What’s the connection between LockBit and Bitlocker?

LockBit malware: What it is, how it works and how to prevent it

I can’t find any mention of Bitlocker in numerous reports about LockBit.

Windows 11 Pro version 22H2 build 22621.2361 + Microsoft 365 + Edge

Reply | Quote

As usual I went to search for the article I had looked at and as it was one I read and skimmed as it I posted it. You’re right, Lockbit uses its own encryption.. Probably this was the one I saw though I seem to recall a “group” using it was mentioned and it isn’t in that article. Trouble is searching history is problematic without knowing exactly what to search for. Sorry.

https://www.bleepingcomputer.com/news/security/chwapi-hospital-hit-by-windows-bitlocker-encryption-cyberattack/

 

1 user thanked author for this post.

b

Reply | Quote

Any decent corporation/enterprise should be using something like WSUS to manage their updates.  It shouldn’t be an issue if someone is monitoring and approving updates manually.

Reply | Quote

First new functionality was with KB5005027 (22000.9), because the RTM 22000.1 didn’t have the new Start Menu or layered File Explorer

Reply | Quote

PerthMike wrote:

So now they are adding features and changing layouts in monthly updates? Oh for crying out loud, I thought the six month cycle with Win10 was bad. You cannot just change things like this for corporate users whenever you feel like it. It should always be an opt-in choice to have things change like this.

Yes, we’ll stretch the remaining five years of Windows 10 out as long as possible in our govt agency.

At work, we are still using Windows Xp. Very Very few were updated to Windows 7 and have Windows Xp Virtual Machince on them since our supported programs work on Windows Xp. Developer said that would not move to Windows 7 or above since MS has become to stupid and has too much spyware/backdoors out in by MS. he worked for MS for over 15 years before he left their employment. He even has their source code for Windows XP and if need will deploy updates that MS is charging current companies if you use his software. Our Windows XP are all patch up to 2022 and have  Internet 11 to use .

Reply | Quote

anonymous wrote:

You must manually check for updates, and specifically tell it to download and install this preview.

 

It will not install automatically.

For now. This will most likely roll out as a regular update next month.

Reply | Quote

anonymous wrote:

PerthMike wrote:

So now they are adding features and changing layouts in monthly updates? Oh for crying out loud, I thought the six month cycle with Win10 was bad. You cannot just change things like this for corporate users whenever you feel like it. It should always be an opt-in choice to have things change like this.

Yes, we’ll stretch the remaining five years of Windows 10 out as long as possible in our govt agency.

At work, we are still using Windows Xp. Very Very few were updated to Windows 7 and have Windows Xp Virtual Machince on them since our supported programs work on Windows Xp. Developer said that would not move to Windows 7 or above since MS has become to stupid and has too much spyware/backdoors out in by MS. he worked for MS for over 15 years before he left their employment. He even has their source code for Windows XP and if need will deploy updates that MS is charging current companies if you use his software. Our Windows XP are all patch up to 2022 and have  Internet 11 to use .

This is a depressingly unsafe business practice.  Your developer is not very, well, good at his job.

Reply | Quote

Maybe he is working for a Grown Up Company who needs to Get Work Done?

Maybe even with Very Expensive Hardware that may not be supported in newer versions of WindBlow$, and will be too expensive to replace.

CNC and big heavy medical equipment comes to mind.

M$ needs jailtime to its leaders before it will ever think of changing its ways.

Reply | Quote

He’s working for an unregulated company.  Supported operating systems is a check box on our industry mandates.

Ultimately what wags the dog is net profits.  And Microsoft is making money.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

I am intrigued by the situation as I see it:

MS, Satya Nadella and his crew, are sitting high up in the canopy of the general-use software patch of the computing forest. But what they are really doing and the way that money wags their dog, strikes me as seriously unsustainable. Plus the fact that all in that crew are certain to have sturdy golden parachutes ready at hand is less than reassuring of the prolonged, further existence of MS, and of Windows.

I am curious to learn what will happen when they finally get sawing through the high branch on which they, their investors, their customer organizations, private and public, big and small, and my dear Aunt Agatha with her world-wide exchange of piano-playing cat animated gifs and cutest grandchildren photos, all precariously seat, when one very bad day find themselves suddenly running unsupported Windows XXX for ever more.

Or else, moving their work, businesses and piano-playing cats to another OS. Which won’t be really easy, not just because it takes time to learn a new OS, but because of all those essential applications and utilities software they have and depend on, but have been developed only for Windows XXX and comparable software won’t be available in a hurry for some other OS.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Is there still no option to un-group taskbar icons?  (other than using 3rd party software)

 

Reply | Quote

For an interesting take on Windows 11 adoption, business and Microsoft strategy:

https://4sysops.com/archives/result-of-the-windows-11-pollonly-very-few-admins-want-to-upgrade/

Reply | Quote

https://arstechnica.com/gadgets/2022/02/new-preview-build-adds-microsoft-account-requirement-to-windows-11-pro/ </banging head against table>

Time to test out the unplug the internet workaround again.

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

NetDef, Average-Jane, Cybertooth

Reply | Quote

I was surprised this wasn’t immediately in the comments!  Let us know how it goes.

There is also a post about this in the r/Windows11 subreddit with some other “workarounds” posted.  Hopefully Microsoft leaves at least one…

Reply | Quote

I’m watching this development pretty closely.

For now, it’s in a preview and may or may not make it into release.

Also, the way it’s working now, if you are on an AD network, you still have the option during the OOBE to select “For work” and use a domain account to join the workstation and complete setup, and that’s where I have to stop for now.  I still need to test on a private P2P network and see what’s up.

 

~ Group "Weekend" ~

1 user thanked author for this post.

Average-Jane

Reply | Quote

I really hope this is just a Windows Insider thing, but given Microsoft’s historic hostility to local accounts, I’m pretty sure this is a sign of shenanigans to come…

1 user thanked author for this post.

Cybertooth

Reply | Quote

I was able to take some time today and test on a P2P network without a DC on the LAN.  Looks like we can still create local accounts on a new install on Windows 11 Pro (on the latest Preview build) – but they moved the cheese.

Details at https://www.askwoody.com/forums/topic/can-you-still-have-a-local-account/#post-2426596

~ Group "Weekend" ~

2 users thanked author for this post.

Cybertooth, Average-Jane

Reply | Quote