Category: Software

Microsoft has released out-of-band updates for Windows shortly after it released the cumulative security updates for Windows earlier this week.

These new updates are available for Windows 11, version 23H2 and 22H2, as well as several Enterprise and server versions of Windows.

Good to know: out-of-band updates are usually released to fix pressing issues. Most need to be downloaded and installed manually, as the issue may not affect all installations.

The updates affect a logon auditing issue in Windows. Since logon auditing is usually not configured on home systems or unmanaged systems, it is an issue that affects Enterprise devices mostly.

Here is Microsoft’s description of the issue:

It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected. This can be observed in the Local Group Policy Editor or Local Security Policy, where local audit policies show the “Audit logon events” policy with Security Setting of “No auditing”.

To sum it up: this is a reporting issue only that does not impact functionality.

The patch can be installed on affected systems to resolve the issue. The vast majority of home users does not need the patch.

Here are the links to the support articles:

• Windows 10, version 23H2 and 22H2: KB5058919
• Windows Server 2022: KB5058920
• Windows 10, version 20H2, and Windows Server, version 20H2: KB505892
• Windows 10, version 1809 and Windows Server, version 1909: KB5058922

Click on the link to the Microsoft Update Catalog website on the linked support websites to download the patch. It needs to be installed manually after download. This is usually done by double-clicking on the downloaded patch file and following the instructions that appear on screen.

While it is generally recommended to install Windows security updates, there are situations that make you want to postpone the installation. Maybe it is because of another faulty update that Microsoft released, a bug that you already experienced after an update was installed on your system, or just the desire to keep the PC running for a long period without forced update reboots.

Quite a few solutions exist that let you toggle the functionality using applications or scripts. Sordum’s Windows Update Blocker is just one program that you may use for the purpose.

And now there is also Pause Windows Updates. It is a tiny open source script that you may run on your Windows PC to pause updates.

Here is how it works: run the script after you have downloaded it and accept the security prompt to get a simple interface. There you may press keys on the keyboard to run corresponding actions. There are:

• (1) Disable Updates
• (2) Enable Updates
• (3) Disable Microsoft Telemetry
• (4) Remove Update Files
• (5) Manage Update Service

Press the h-key to get information about each of the actions. When you select the disable option, all update downloading and installing is halted. This includes updates that are in the process of being downloaded to the system.

Any update that has not been installed fully at this point needs to be downloaded in its entirety again once you enable updates on the system.

Since it is a script, you may review it before you run it on your system. Just load it in a plain text editor like Notepad to do so.

Closing Words

Pause Windows Update is an easy to use option to block updates on Windows machines temporarily. Most users probably won’t need the script or similar apps ever, but there are situations where it may come in handy.

Now You: how do you handle updates on your Windows PCs? Do you let them install automatically or prefer manual control over updates? Any tools you use? Feel free to leave a comment down below. (via Deskmodder)

If you’d ask me to name the most annoying feature of Windows 11’s Start menu, I’d probably pick the Recommended section. Here specifically the inability to remove it from the Start menu.

While you can configure Windows to stop giving recommendations, you cannot remove the then-blank section from the Start menu. That is, until now.

The Sherlock Holmes of Windows, Phantom of Earth, discovered that Microsoft has had a change of heart in the latest Windows 11 Insider build.

The hidden feature introduces major changes to the operating system’s start menu, including the ability to remove the recommended section.

Here is his post on X that highlights the change.

Hidden in today's Dev/Beta CUs: a major update to the Windows 11 Start menu! It has a new, larger layout with everything on one scrollable page, with the "All" list below recommendations – which can FINALLY be turned off! Pinned list is now limited to 2 rows, but can be expanded. pic.twitter.com/JkP3V2I5g6

— phantomofearth 🌳 (@phantomofearth) April 3, 2025

Here is how this works:

1. Open the Settings on the system.
2. Switch to the Start category.
3. Disable “Show recently added apps”.

Disabling the option will remove the entire Recommended section of the Start menu, including the header that could not be removed previously.

Here is why this is important. Up until now, Recommended would take up space in the Start menu, even if you did not use it. You could not use the space to display more pinned apps, which some users might prefer.

Phantom of Earth notes that there is another feature available now that complements the change. You may now choose to display “all pins by default”. You had to click on the All button up until now to display them all. The change places these icons in the area of the recommended section.

Closing Words

It is rare these days that I applaud Microsoft for the changes that it makes to the Windows operating system, but this one, albeit years too late, is a welcome addition.

Considering that it is currently only available in Insider builds, it may take a while before it lands in Stable. And yes, there is always the chance that a feature gets pulled again. Let us hope that this is not one of those cases.

Now You: do you use the Windows start menu or do you prefer to use a replacement?

Microsoft’s Windows 11 operating system has its fair share of annoyances. From mediocre apps, Telemetry and ads to other design decisions that seem to serve Microsoft more than the users of the operating system.

Windows Update and the requirement to restart the PC to install updates is certainly on the list of some users. Especially the operating system’s habit of restarting the PC when it perceives it as idle needs to be mentioned. You find plenty of horror stories online about users losing work because of automatic restarts of their PCs.

Hotpatching

Microsoft created a solution for that some time ago. Hotpatching was introduced in 2022 for Windows Server. This allows updates to be installed without a reboot of the system. Unfortunately, this feature has been limited to Windows Server products up until now.

Good news is that Microsoft has finally ported the Hotpatch functionality to Windows clients, more specifically, Windows 11, version 24H2. Bad news is that this is limited to Enterprise clients at the time of writing.

Microsoft employee David Callaghan revealed the news on the company’s Windows IT Pro Blog. Hotpatching, according to Microsoft, offers several benefits over the traditional method of installing security updates.

• Updates are applied immediately and not after the next reboot.
• Security is always up to date.
• Disruptions for users are minimized, as systems do not need to be rebooted anymore to install updates.

Note that some updates, feature updates or firmware updates for example, still require reboots. This is also true for what Microsoft calls cumulative baseline updates. These are released in January, April, July, and October of each year. They continue to require restarts.

The updates inbetween are hotpatch updates, which means that they do not require restarts.

In other words, four updates per year continue to require restarts, while the other eight cumulative updates of the year do not.

The big downside to the improvement is that home users and many small and medium-sized businesses do not gain access to the functionality. It is reserved for Enterprise customers (Windows 11 Enterprise E3, E5, or F3, Windows 11 Education A3 or A5, or a Windows 365 Enterprise subscription).

Another restriction is that the ARM version is still in public preview. It requires additional prerequisites, specifically a Registry Key needs to be set as outlined by Microsoft.

Closing Words

Windows is not the only operating system that requires reboots when updates get installed. It is still a major nuisance, especially if the system reboots automatically suddenly, which may lead to lost work.

When Microsoft launched its Edge web browser, it used Windows to quickly push the usage share of the browser. One of Microsoft’s ways of doing so was to create artificial protocols in Windows that would open only in Edge.

Clicks on web searches in Start or news would always open in Edge, even if the browser was not the default browser on Windows.

The small tool MSEdgeRedirect was created to address this. The main idea was to redirect requests that Windows would push towards Edge to another browser.

There have not been any updates for over a year, but a new update just hit. Good news for users of the project, as it is improving the redirector in several ways.

Note: The open source program is still a beta officially. While it works well, you may run into bugs or issues using it. Also, Microsoft may change things and that may break functionality.

So, here is what is new in MSEdgeRedirect 0.8.0.0:

• The minimum supported system is now Windows 10. Windows 8 is no longer supported.
• Fixed Windows Spotlight, PDF file handling, some UWP apps no longer working in Service Mode.
• New AI-less Google Search results option.
• Improved news handler.
• Adds support for –from-ie-to-edge and bing.com/WS/redirect.
• Adds passthroughs for –user-data-dir and –win-session-start.

The update is a bug fix update for the most part that fixes some existing issues. If you use the tool already, you should upgrade to the latest version. That is, unless you still run Windows 8.1, as this is no longer supported. Oh, and Europe mode is still a thing, why not give it a try.

All in all, it is good to see that the project has not been discontinued.

Now You: do you use MSEdgeRedirect or have used the app in the past?

If you have used Windows long enough, you have probably come into contact with Startup Repair at one point. The feature aims to resolve issues that prevent the operating system from starting up. It is a hit and miss kind of feature for many users though, as it relies solely on local files. All in all, it is not overly reliable.

Quick Machine Recovery extends the functionality to the cloud and Windows Update. The main idea is to improve recovery of Windows systems when boot issues are encountered. Designed primarily for administrators who manage multiple devices, Quick Machine Recovery adds cloud files and data to the recovery process.

The new feature uses a Windows Recovery Environment to “scan Windows Update for remediation options” according to Microsoft. The company says that this “allows devices to be recovered without requiring manual intervention”.

Quick Machine Recovery supports two recovery options:

• Cloud remediation.
• Auto remediation.

Cloud remediation

The feature uses Windows Update to fix issues experienced on the device. It requires an Internet connection and may download data from Windows Update to correct issues. If the feature is not enabled, Windows will use the local-only Startup Repair feature instead to attempt to fix the problem.

Auto remediation

This automates the problem solving. Windows will connect to Windows Update automatically to try and fix the issue. It will retry to correct the issue several times automatically.

The Quick Machine Recovery process

Five steps make up the remediation process:

1. Device crashes or fails to boot.
2. Boot into recovery to start the Quick Machine Recovery process.
3. Establish a network connection to scan Windows Update for fixes.
4. Remediation, which attempts to apply fixes found by downloading data from Windows Update.
5. Reboot to either boot into Windows, if a fix was applied successfully, or to restart the process from step 2.

Default configuration

The default configuration depends on the Windows edition:

• Windows Home: cloud remediation is enabled by default, auto remediation is disabled by default.
• Windows Pro, Enterprise: both remediations are disabled by default.

Administrators find instructions on Microsoft’s Learn website that explain how to enable or disable the feature.

Closing Words

Tests will show how well the cloud-based recovery feature will perform. For now, it is only available in test versions of Windows 11.

Now You: what is your take on this new recovery feature? Do you think it will work better than the local-only Startup Repair?