IT

4sysops

1. Windows September updates break SMBv1 shares: Workarounds and user feedback
   Microsoft’s September 2025 security updates have broken connectivity to SMBv1 shares over NetBIOS over TCP/IP (NetBT), disrupting Windows client and server systems that still rely on this legacy protocol. This article explains what SMBv1 is, why it remains in use despite being deprecated, and the serious security risks that come with it. We’ll cover the details of the September updates, their impact on affected systems, and the available workarounds for organizations struggling to restore functionality. Finally, we’ll look at user feedback and long-term recommendations for migrating away from SMBv1 to more secure and modern protocols.

   Source

2. NTLM authentication deprecation: new BlockNTLMv1SSO registry key and Group Policy settings
   Microsoft has introduced a new BlockNTLMv1SSO registry key in Windows 11 24H2 and Windows Server 2025 as part of its broader initiative to deprecate NTLM authentication. The new registry key allows administrators to control NTLMv1-derived credential usage. These changes address ongoing security vulnerabilities in NTLM while providing organizations time to transition to modern alternatives like Kerberos.

   Source

3. Add ChatGPT MCP server—Another setback for OpenAI
   OpenAI has finally rolled out Model Context Protocol (MCP) support for all ChatGPT subscription plans. However, the implementation is surprisingly basic and falls short of the MCP support offered by Anthropic's Claude Desktop. Currently, ChatGPT doesn't support local MCP servers (SDIO), and you can only add remote MCP servers (SSE, Streamable HTTP). There's also no MCP server catalog, and the worst part is that GPT-5 isn't fully MCP-ready.

   Source

4. Citrix forces customers to migrate to License Activation Service (LAS)
   Citrix has announced a fundamental shift in managing product licensing by replacing traditional file-based licensing with a cloud-based License Activation Service (LAS). This mandatory transition affects all on-premises Citrix components, with file-based licensing reaching end of life on April 15, 2026. The change simplifies license management by eliminating manual license file downloads and uploads. The change simplifies license management by eliminating manual license file downloads and uploads. LAS requires registering with Citrix Cloud and periodic connectivity to maintain activations; limited offline operation is supported via a grace period.

   Source

5. AI-powered antivirus and threat detection: ManageEngine Malware Protection Plus
   The days of purely signature-driven antivirus and malware protection are over because modern threats evolve too quickly, using advanced techniques that traditional signature databases can't keep up with. ManageEngine Malware Protection Plus (MPP) is a next-generation antivirus solution that leverages AI capabilities to detect malware and contemporary security threats.

   Source

6. Microsoft’s new AI certifications—Is it still worth pursuing conventional IT certs?
   Microsoft is transforming its certification portfolio to align with the growing demand for artificial intelligence expertise, introducing new AI certifications while retiring several fundamental certifications. The company is launching updated certifications emphasizing practical skills in generative AI, multi-agent orchestration, and Microsoft's AI ecosystem, including Copilot and Azure AI services.

   Source

7. Windows UAC bug after the August 2025 update
   Microsoft's August 2025 update caused a Windows UAC bug that triggers unplanned User Account Control (UAC) prompts throughout Windows environments. This problem originates from security improvements included in the August 12, 2025, cumulative patches for all supported Windows editions—specifically KB5063878 (Windows 11 24H2), KB5063875 (Windows 11 22H2/23H2), and KB5063709 (Windows 10 22H2 and Windows 10 Enterprise LTSC 2021)—which resolved CVE-2025-50173 but inadvertently created compatibility problems with Windows Installer maintenance functions.

   Source

8. Remove Microsoft Store apps with Group Policy and Intune in Windows 11
   Microsoft introduced a new granular policy-based approach in Windows 11 25H2 that allows administrators to selectively remove pre-installed Microsoft Store apps through Group Policy and mobile device management (MDM) solutions like Microsoft Intune, rather than only disabling the Store globally as earlier policies did. This feature addresses long-standing demands from IT professionals for a supported method to eliminate unwanted applications from Windows deployments.

   Source

9. MPA Tools: Enhancing Microsoft endpoint management for Windows, Active Directory, Configuration Manager, Intune, and Entra ID
   MPA Tools, created by Veles Software, is an endpoint management and troubleshooting solution for Windows environments that addresses gaps in Microsoft's existing system administration tools. The endpoint solution offers real-time visibility and workflow automation for Intune, Microsoft Configuration Manager (ConfigMgr), and Active Directory environments. A key feature is its ability to manage endpoints without agents.

   Source

10. New in the Intune August 2025 update
    Microsoft's Intune August 2025 service release (2508) delivers major endpoint management enhancements, including granular app control targeting, Windows Autopilot OOBE patch integration, and Apple Declarative Device Management reporting capabilities. The update introduces multi-administrator approval workflows for critical operations and expands Linux support to Ubuntu 22.04/24.04 LTS while addressing enterprise security and governance requirements. However, administrators should be aware of reported performance issues with app control policies and several critical bugs affecting Win32 app filtering, iPad Air 2 management, and Linux device enrollment that may impact deployment strategies.

    Source