Replies

Win11 is still beta quality with missing features and options. Win10 is supported until October 2025 when Windows 12 will be out. However, I think Microsoft will extend general support for Windows 10 like they did in the past. With Win10, it’s very likely because unlike Windows 7, Win10 can not be upgraded on many relatively new computers. This is due to Microsoft’s poor decision to require certain processors and TPM. MS will likely not allow hundreds of millions of unprotected machines. Many people will not buy a new computer, especially in this economy.

Update:  If you use a third-party antivirus tool, you will not be able to use ASR rules as they work only with Defender.   Microsoft makes it incredible difficult to implement and provides deficient instructions.  This page is helpful: https://www.csoonline.com/article/3597407/how-to-use-windows-defender-attack-surface-reduction-rules.html

1 user thanked author for this post.

Cybertooth

You didn’t mention if this will work if you use third party anti-virus.  I don’t think so as it mostly disables defender.  Can you check and let us know?  Thanks.

• Block executable files from running unless they meet a prevalence, age, or trusted list criterion
• Block Office applications from creating executable content.

“I logged into the Comcast service to see whether I could enter a whitelist for the unique website we use…I realized that Comcast would not allow me to disable the malware protection”

This is one of the reasons why we decided against Comcast Security Edge. We use this free non-profit service instead: Quad9 – the best rated security DNS provider – http://www.quad9.net in addition to our firewall and our own modem and router. Nothing is rented from Comcast. In the unlikely event that Quad9 blocks a site we need, we can request that the block be removed and if necessary simply change our DNS servers temporarily. We are not locked out waiting for Comcast to unblock the site – which should be available to the business admin in the first place. I would be interested in knowing how long it took Comcast to fix this issue for future reference.

I understand why many businesses rent a gateway with Security Edge from Comcast. It’s easier and you don’t need an IT Admin, spare router and spare modem on hand in case of a hardware failure. But that’s what we currently do for our small business.

Resolved by Microsoft

You might receive error 0x800F0922 when attempting to install February updates.
Updates released February 14, 2023 might fail to install on some editions of Windows Server 2012 R2.  Resolved KB5022922

Source:  https://learn.microsoft.com/en-us/windows/release-health/status-windows-8.1-and-windows-server-2012-r2#2759msgdesc

Thanks Susan.  Please let us know when MS fixes the update for Server 2012 R2 Essentials.

I read about a few people saying it was affecting R2 without specifying Essentials (second & third link in my OP).  But yes, it would seem that the consensus points to Essentials only.

This has nothing to do with Quickbooks.  This is a known issue with Server 2012 R2

See:  https://learn.microsoft.com/en-us/answers/questions/1181682/windows-server-essentials-2012-r2-cant-install-kb5
Also See:  https://borncity.com/win/2023/02/18/windows-server-20212-r2-feb-2023-updates-drops-install-error-0x800f0922/
Also See:  https://www.reddit.com/r/sysadmin/comments/1128v87/patch_tuesday_megathread_20230214/?sort=new&limit=500

Microsoft is negligent with the xcopy command – first having a typo with a \\ and then a command error requiring user interaction (file or folder prompt). The average user can’t deal with this mitigation especially with these mistakes. It’s just incompetence.

We have 15 workstations. Some have the file in both locations and some only in c:\windows\system32\drivers. We have decided to skip both the November and December updates and wait until January.  There is currently no confirmed way to mitigate this bug BEFORE installing the quality update. Microsoft is incompetent. And there is also the issue with the taskbar and desktop freeze bug that’s still not fixed.

The entire encrypted user database (vaults) were stolen.  Changing your password now or turning on 2-Factor now is worthless.  But —
You are only at risk if you used a weak password that can be brute-forced. You can check it here (look at the Offline Fast Attack Scenario): https://www.grc.com/haystack.htm
Important: This assumes you didn’t use a common password.
To see if your password has been compromised, check here:
https://haveibeenpwned.com/

 

1 user thanked author for this post.

windbg

We’re skipping the November updates for our server and workstations and will wait for December updates.

I’ve been using ClipCache for years – great app.
https://www.xrayz.co.uk/clipcache/

I’ve been using this program for years:  Website-Watcher
https://www.aignes.com

 

“Using brute-force tools, hackers quickly run through thousands of password combinations until they find the one that matches your account. ”

This does not apply to online accounts as nearly all of them have lock-out policies that prevent or substantially slow down brute force attacks.

The main concern with online accounts are stolen credentials.  Many people re-use the same email and password combination for nearly everything online.  If one site is breached, the criminal will now try the stolen password on other sites.  No brute  forcing necessary.

1 user thanked author for this post.

WCHS