On December 10, 2024, Microsoft rolled out the KB5048685 update for Windows 11, covering OS Builds 22621.4602 and 22631.4602. This release is particularly noteworthy as it marks the last major update for the year, just before the holiday season. Here’s what Windows users need to know about this update, including its implications for Windows security and performance.
Understandably, you might face issues after an update. Microsoft provided guidance on removing the intrusive LCU (Latest Cumulative Update) if needed, using:
Running standard uninstallation methods won’t suffice because this update package includes the servicing stack update (SSU).
Ensuring you're up to date with security patches like KB5048685 means fostering a safer Windows experience, and it’s a gentle reminder to users—or perhaps a nudge—to regularly check for updates, especially after major releases.
Next time you boot up your Windows 11 device, take comfort in knowing that KB5048685 is there, working diligently behind the scenes to keep your digital life secure. Stay tuned for what’s next in January, and don’t forget to check back often to keep your systems running smoothly!
Source: Microsoft Support December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602) - Microsoft Support
Key Highlights of KB5048685
Security First
With the KB5048685 update, Microsoft focused on patching security vulnerabilities, a critical aspect especially as cyber threats loom larger every day. The update brings miscellaneous security improvements to internal operating system functionality. Users can expect a more secure environment, which is essential for anyone handling sensitive information.No Non-Security Preview Release
An important point to note is that due to minimal operations during the holiday season, Microsoft will not release a non-security preview update for December 2024. This means that users can expect the next wave of updates and features in January 2025, making this security update the final installation of the year.Improvements to Windows Functionality
According to Microsoft's notes, the update includes all the enhancements from the earlier November 2024 release (KB5046732). Users who installed previous updates will find that only new components will be downloaded, streamlining the installation process.Known Issues and Workarounds
Like any software update, KB5048685 is not without its quirks. One reported issue involves the OpenSSH service failing to start after the October 2024 security update. To mitigate this, Microsoft advises altering directory permissions, which requires a bit of PowerShell wizardry. Here’s a quick guide on how to adjust the permissions:- Open PowerShell as an Administrator.
- Update the permissions:
- For the SSH directory:
Code:powershell $directoryPath = "C:\ProgramData\ssh" $acl = Get-Acl -Path $directoryPath $sddlString = "O:BAD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)" $securityDescriptor = New-Object System.Security.AccessControl.RawSecurityDescriptor $sddlString $acl.SetSecurityDescriptorSddlForm($securityDescriptor.GetSddlForm("All")) Set-Acl -Path $directoryPath -AclObject $acl - Repeat the same steps for
C:\ProgramData\ssh\logs.
- For the SSH directory:
Installation Details
How to Get the Update:- The update will automatically download and install via Windows Update.
- For those wishing to explore standalone options, users can also download the update from the Microsoft Update Catalog.
Understandably, you might face issues after an update. Microsoft provided guidance on removing the intrusive LCU (Latest Cumulative Update) if needed, using:
Code:
DISM /online /remove-package /PackagenameWhy This Matters
The timing of this update cannot be overlooked. As businesses and users slow down for the holidays, having a timely update keeps operational risks low. The emphasis on security is vital to protect against the often heightened risks of cyber attacks during these times, when many may overlook their network infrastructures in favor of holiday cheer.Ensuring you're up to date with security patches like KB5048685 means fostering a safer Windows experience, and it’s a gentle reminder to users—or perhaps a nudge—to regularly check for updates, especially after major releases.
Wrap-Up
As we bid farewell to 2024, this update encapsulates Microsoft’s ongoing commitment to security and performance in Windows 11. While the holidays might bring a temporary pause to feature updates, it’s worth taking a moment to ensure your system is protected.Next time you boot up your Windows 11 device, take comfort in knowing that KB5048685 is there, working diligently behind the scenes to keep your digital life secure. Stay tuned for what’s next in January, and don’t forget to check back often to keep your systems running smoothly!
Source: Microsoft Support December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602) - Microsoft Support
