www.butsch.ch

CRUNCH SECURITY Server 2019 Server 2022 [21H2/22H2/32H2] Server 2025 WSUS

When Security Hardening Becomes a Security Risk: The CLFS Case and the SignDrop Windows Zero-Day

11.11.2026 admin

When Security Hardening Becomes a Security Risk: The CLFS Case and the SignDrop Windows Zero-Day PowerShell check your system: Get-ItemProperty ‘HKLM:\SYSTEM\CurrentControlSet\Services\CLFS\Authentication’ | Format-List If it’s set to 0 or 1 then you’re vulnerable. If it’s set to 2 or 3 then you’re not vulnerable. 0 Enforcement Mode – authentication is enforced 1 Learning Mode – authentication codes […]

SECURITY

CVE-2026-98432 Score 9.8

29.10.2026 admin

Security Advisory – CVE-2026-98432 Severity: Critical – CVSS 3.1: 9.8 You can check if your Linux server or appliance is running any MPTCP listeners: sudo ss -Mlnp Screenshot shows that the server has no active MPTCP listener: Check if MPTCP service is enabled: sysctl net.mptcp.enabled Screenshot shows that the mptcp service is disabled (0) 1 […]

Exchange 2016 Exchange 2019 M365 - Exchange Online M365,AZURE,INTUNE Microsoft Exchange

exchange se, Exchange 2016 vs Exchange 2019 vs Exchange Server Subscription Edition

25.09.2026 admin

Microsoft Exchange 2016 vs Exchange 2019 vs Exchange Server Subscription Edition The fastest way to understand an Exchange SE project is to look at the three generations side by side. A reminder for all of you who took the wrong path. For all those of you who found out that compliance, laws, privacy, data […]

GPO | Gruppenrichtlinien Scripting

How to Enable WinRM Windows Remote Management for PowerShell Remoting (GPO)

24.09.2026 admin

This post handles Windows Remote Management an how to turn it on via GPO centralized for all your on-premise clients and also how to test What we want to do: Connect to remote PS: Enter-PSSession w11 Direct run a PS command on the remote machine: Invoke-Command -ComputerName w11 { Get-Service } To use PowerShell for […]

Azure GPO | Gruppenrichtlinien Intunes M365 - Exchange Online M365,AZURE,INTUNE

OneDrive, Wenig Speicherplatz, You dont have enough free space, GPO and Sharepoint

23.09.2026 admin

OneDrive, SharePoint, Wenig Speicherplatz, You don’t have enough free space in your OneDrive how to check GPO Or where M365 cloud technology meets on-premises GPO. points to check: Check local free space of laptop Check if the user has hit a sharepoint OneDrive Quota online with PS in M365 Check if there is a GPO […]

Azure Intunes M365 - Exchange Online

9fe8d015-dda6-4573-9858-8bc322e3080d

21.09.2026 admin

Meanwhile, in the Texas datacenter, seconds before the big meltdown because of 9fe8d015-dda6-4573-9858-8bc322e3080d. Cloud-O-Mania: Do you have any relevant information about GUID 9fe8d015-dda6-4573-9858-8bc322e3080d? Cloud-O-Manager: This looks strange. Cloud-O-Mania: My local LLM foundr.exe also searches for the GUID just-tested the new model “lla_uoy_llik_lliw_tenkyS” on the weekend. Cloud-O-Manager: Ah, who cares? Let’s go for lunch; it’s Monday. […]

Deployment Ivanti Frontrange Enteo Microsoft SCCM,MEM,MDT Office KMS,MAK,APPV Scripting WSUS

18.09.2026, KB5002665, Excel 2016 cut and paste MSI based version Hotfix download links for KB5002914 chaos

18.09.2026 admin

18.09.2026, KB5002665, Excel 2016 cut and paste MSI based version Hotfix download links for KB5002914 chaos KB5002914 Excel 2016, 2019, 2021, 2024 cut and paste not working anymore 18.09.2026 Microsoft released a Hotfix for the Office 2026 MSI based version How to uninstall the different version and to block the patch so it does not […]

Scripting Server 2019 Server 2022 [21H2/22H2/32H2] Server 2025 WSUS

Remote Desktop Services RDS out-of-band emergerncy release GUID numbers for W10/W11/SERVERS

15.09.2026 admin

After you install September 2026 09-2026 patch day updates RDS may not work Microsoft Addresses Windows Regressions With Emergency Out-of-Band Updates V2 re-release reported issues currently include: 1) New connections start hanging a few hours after reboot with “Connecting…” and existing users are unable to log off The following signatures are indicative of this particular […]

Uncategorized

KB5002914 Excel 2016, 2019, 2021, 2024 cut and paste not working anymore

14.09.2026 admin

KB5002914 Excel 2016, 2019, 2021, 2024 cut and paste not working anymore 18.09.2026 Microsoft released a Hotfix for the Office 2026 MSI based version How to uninstall the different version and to block the patch so it does not come back. There seems to be a bug with the September 2026 (09-2026) Updates from Office […]

Scripting

WinWord Macro, Automatic resize pictures within a table for an IT documentation

30.07.2026 admin

When you do a lot of documentation in WinWord you often have problems with pictures and fitting into tables. There are a one hundred other options but we found this way with a macro. Also see: Auto resize pictures in Winword for a blog Post automatic with VBA macro – www.butsch.ch Auto resize pictures […]

Exchange 2016 Exchange 2019 M365 - Exchange Online Microsoft Exchange VMWare

Exchange HealthChecker.ps1, VMXNET 3, NIC, Packets Received Discarded, how to diagnose on ESX

21.07.2026 admin

Exchange HealthChecker.ps1 reports error Packets Received Discarded: xx — Error: This value should be at 0. We are also seeing this value being rather high so this can cause a performance impact on a system. Known Issue with vmxnet3: ‘Large packet loss at the guest operating system level on the VMXNET3 vNIC in ESXi (2039495) […]

Uncategorized

Stop of Exchange Web Services (EWS) in Exchange Online, check which M365 APPS use EWS

11.05.2026 admin

Exchange Online: EWS Deprecation Timeline Microsoft will permanently retire Exchange Web Services (EWS) in Exchange Online. Important Dates October 2026 → Microsoft starts globally disabling EWS for all tenants. April 2027 → EWS fully disabled everywhere. Important for IT Admins Starting in 2025, admins can already manually disable EWS: * Organization-wide * Per user/mailbox This […]

Server 2022 [21H2/22H2/32H2] Server 2025 WSUS

04-2026 Patchday UpdateId numbers to import into WSUS (DC Domain Controller Reboot fix)

20.04.2026 admin

Microsoft releases emergency Windows Server updates to fix unexpected reboots Microsoft has released a set of out-of-band (OOB) interim updates to address a critical issue causing unexpected or repeated reboots on Windows Server systems after recent cumulative updates. The problem affects multiple Windows Server versions and, in some environments, can impact core infrastructure roles such […]

Exchange 2016 Exchange 2019 M365 - Exchange Online Microsoft Exchange

Can’t install or open Exchange Server Hybrid Configuration Wizard (HCW)

27.03.2026 admin

Problem: The Exchange Hybrid Configuration Wizard does not open anymore or can’t be installed. You try to reopen the HCW from the URL: https://aka.ms/hybridwizard it flashes shortly and closes again. The reason is because default Browser switched to EDGE from IE. An Edge Chromium does not handle the ClickOnce Deployment method very well. Quick Solution > […]

ENS | Endpoint Security EPO | ePolicy Orchestrator

Trellix ENS 10.7.20 bundle Update failed, Extension ENDP_GS_1000, version 10.7.20.15122 is not compatible with this version of epolicy Orchestrar

02.03.2026 admin

Tasks/What you try to do: You try to integrate or update the new Trellix ENS 10.7.20 from last week into ePO to try the new ransomware options and also test if we can finally exclude On-Access rules by MD5 added to filenames. The update of the bundle via Software Manager fails. The DLL replacement […]

Certificate Revocation List Check Tool is designed to enhance security by performing several key functions related to executable files (EXE). It can scan your client for EXE files and examine their code-signing certificates. The tool also searches for the relevant CRL to determine whether it can be downloaded. It validates the integrity of the certificate chain, checks both the certificate and CRL for expiration dates, and can export a comprehensive list of all gathered information as a file. Additionally, it cross-references to ensure you are not using any revoked certificates, helping maintain a secure environment.

Highroller