Which setting holds the delay, a quality update deferral under Windows Update for Business or a scheduled install day under Configure Automatic Updates?

Drafted with AI, reviewed by me.

Probably ms directly, I don't believe we have a dedicated update server

Is your WUServer pointing to WSUS or going through Microsoft directly?

Drafted with AI, reviewed by me.

Yeah we do have policy that delays updates but for some reason, it didn't go through. During investigating, we were wondering if a registry edit for autoupdate flag was the cause of this

Turn off automatic updates on RDS session hosts to stop things like this. I'd patch two or three session hosts first and hold the rest for a few days. Since this results in TermService not reaching running, a service state check after the reboot on those first hosts would find it. I'd also record the OOB fix KB in your change notes so that you don't forget to apply the next functional security patch.

Disclosure: I build ET Ducky. You'd tag the first hosts as a ring and schedule updates to that tag before the others. The deployment pauses if services fail to come back after the reboot. https://etducky.com/documentation/patch-management

Drafted with AI, reviewed by me.

Really? I'm not even an server admin and it popped up in several tech feeds.

Boy am I glad to not have to deal with all the Windows shit.

Huh. I haven't heard a peep about this.

Cogent has a dual BIFF going on right now that’s affecting the SW US and Hawaii

Check if your local library has any learning subscriptions. Mine has Lynda, Safari by Oreilly, treehouse and many others

Depends, I have a subscription for two years already, in my opinion it is worth it. They improved a lot over this time both content and platform itself.

Thank you, I'll check those out. I'm considering trying to get CKA and after that I'll see how it goes. I've heard good things about KodeKloud learning paths and 100 days challenge, I think I'll get the paid subscription anyway.

Is there a cert you are going for specifically?

I've never tried it but it looks reasonable. It is paid, but it offers courses focused towards certifiacates and hands on labs, with fairly reasonable pricing. There is a a weeklong free trial, so you can just use that to test.

Also check out these:

https://killercoda.com/

https://training.play-with-kubernetes.com/

They are truly free, but have a lot less content. I like to use them to teach stuff sometimes.

You can also set up a homelab with Kubernetes for hosting stuff. I actually really like Kubernetes for that usecase.

Haven't used it myself, but I've worked with a junior that was using it to learn k8s, and what they did learn was reasonable.

Yes, looks to be different registry keys. The Outlook ADMX Template has the settings:

Which should hide the toggle and turn off Microsoft's forced change.

Yes, indeed!

edit but, you know, don't let that stop you from really fixing it (so hard that it might need some additional remediation afterwards)

So this is all user-based though?

I would assume so since it is HKEY_CURRENT_USER. I took a glance at HKEY_LOCAL_MACHINE and the same keys were not there. Perhaps this would had to be run for each user at first login.

I am the only user of my work computer and it is not even managed, so PSADT would indeed be overkill. :-)

As far as I know, group policy changes the registry behind the scenes. I base this only on reading about how to do stuff were there was usually a group policy and reg solution. Anyway, my work computer is not managed so I have to do this stuff myself and I had to setup everything twice (fresh from repair and then I had to reinstall Windows because I messed up the WiFI driver) recently. The new outlook stuff annoyed me so I figured I could do the registry changes as a PowerShell script and share it here.

Good stuff!

Does this work different than the policy key? As far as I know the keys under software\policies are used by both group policy and intune, and honored by windows home editions so I'd expect they'd work more reliably than an outlook config setting.

Nice. So this is all user-based though?

You could do a machine deployment with something like PSADT but it's probably overcooking it (I don't really understand when/how it switches from old to new)

"Our disaster recovery was tested last disaster" - this is perfect

Agreed. Explaining the risks has always worked better for me than explaining the benefits. Most companies only care about their bottom line.

I have sent an email with the details, I am waiting for the results.

Thank you.