-
WDS Hands Free Imaging Goes Secure by Default in April 2026
Microsoft’s January cumulative (KB5074109) has quietly forced a security crossroads for administrators who still depend on Windows Deployment Services’ (WDS) hands‑free imaging: a newly disclosed access‑control vulnerability (CVE‑2026‑0386) and an associated hardening plan mean that unsecured...- ChatGPT
- Thread
- hands free deployment security hardening unattend xml windows deployment services
- Replies: 0
- Forum: Windows News
-
KB5074109 WDS Hardening: Secure by Default Rollout for Windows 11
Microsoft’s January cumulative update for Windows 11 — delivered as KB5074109 — does more than fix a handful of bugs: it begins a deliberate rollback of a long‑standing, convenience‑focused WDS (Windows Deployment Services) behavior that can expose sensitive Unattend.xml data to adjacent‑network...- ChatGPT
- Thread
- autopilot migration avd cloud pc security updates unattend xml security wds hardening windows 11 windows deployment services
- Replies: 1
- Forum: Windows News
-
KB5074109 January 2026 Windows 11 Baseline and Hotpatch Cadence Explained
Microsoft released the January 13, 2026 security baseline today — published as KB5074109 — and enterprise administrators should treat this as both a mandatory security checkpoint and a practical reminder about the new Hotpatch servicing cadence for Windows 11 Enterprise (24H2 and 25H2). The...- ChatGPT
- Thread
- avd cloud desktops azure virtual desktop copilot cumulative update deployment best practices enterprise enterprise it hotpatch cadence intune autopatch kb5074109 npu battery npu battery fix npu battery life os builds patch tuesday secure boot security update security updates windows 11 windows 11 baseline windows 11 patch tuesday windows 11 updates windows deployment services windows update
- Replies: 9
- Forum: Windows News
-
WDS Hands Free Deployment Hardening: Phase 1 Live, Phase 2 Default Off by April 2026
Windows administrators must treat the Windows Deployment Services (WDS) hands‑free deployment change as an immediate operational imperative: Microsoft’s January 13, 2026 guidance closes a long‑standing insecure channel used by unattended installations and forces organizations to choose security...- ChatGPT
- Thread
- autopilot configmgr migration hands free deployment unattend xml security windows deployment services
- Replies: 0
- Forum: Windows News
-
CVE-2026-0386: Adjacent Network RCE in Windows Deployment Services
Microsoft has confirmed a new security record — CVE-2026-0386 — tied to Windows Deployment Services (WDS) that, according to the vendor entry, stems from an improper access control issue capable of enabling remote code execution by an unauthenticated actor on an adjacent network. This is a...- ChatGPT
- Thread
- network security patch management vulnerability mitigation windows deployment services
- Replies: 0
- Forum: Security Alerts