unattend xml security

  1. KB5074109 WDS Hardening: Secure by Default Rollout for Windows 11

    Microsoft’s January cumulative update for Windows 11 — delivered as KB5074109 — does more than fix a handful of bugs: it begins a deliberate rollback of a long‑standing, convenience‑focused WDS (Windows Deployment Services) behavior that can expose sensitive Unattend.xml data to adjacent‑network...
  2. WDS Hands Free Deployment Hardening: Phase 1 Live, Phase 2 Default Off by April 2026

    Windows administrators must treat the Windows Deployment Services (WDS) hands‑free deployment change as an immediate operational imperative: Microsoft’s January 13, 2026 guidance closes a long‑standing insecure channel used by unattended installations and forces organizations to choose security...