Microsoft releases replace KB5025239 for Home windows 11, including new Home windows Native Administrator Password (LAPS) answer, safety fixes and extra

Microsoft has launched the cumulative replace KB5025239 for Home windows 11 22H2, bringing with it not solely safety and bug fixes, but in addition common enhancements and new options.

Among the many highlights is the addition of the brand new Home windows Native Administrator Password Resolution (LAPS) as a Home windows Inbox characteristic. This replace additionally provides new Microsoft account notifications to the Begin menu, improves Microsoft Defender for Endpoint, and offers quick access to the Bing chat expertise in Microsoft Edge by way of the taskbar.

See additionally:

There are lots of safety fixes on this replace, so it’s necessary. Microsoft additionally states that it’s addressing a compatibility difficulty that happens on account of unsupported use of the registry.

However for the Home windows creator, the truth that this replace implements the brand new Home windows Native Administrator Password Resolution (LAPS) as a Home windows Inbox characteristic is the primary spotlight.

Explaining precisely what LAPS is, Microsoft says: “Chances are you’ll already be accustomed to Microsoft’s present safety product generally known as Native Administrator Password Resolution (LAPS). LAPS has been out there on the Microsoft Obtain Heart for a few years. It’s used to handle the password of a particular native administrator account by usually rotating the password and backing it up in Lively Listing (AD). LAPS has confirmed to be an essential and strong constructing block for on-premises AD enterprise safety. We are going to affectionately discuss with this older LAPS product as “Legacy LAPS”.

Persevering with its clarification, the corporate says:

The LAPS script in Azure AD, now a part of Microsoft Entra, will transfer from non-public to public overview later this quarter. Home windows LAPS is a big enchancment in nearly each space over Legacy LAPS. Let’s discuss among the thrilling new options which are included on this new Home windows LAPS characteristic primarily based in your suggestions!

The total changelog for the replace is as follows:

• New! This replace introduces Microsoft account notifications to the Begin menu. That is at present solely out there to a small viewers. It would roll out extra broadly within the coming months. Some units could discover totally different visible remedy whereas we accumulate suggestions. See the instance beneath.
• New! The taskbar search field might be lighter while you set Home windows to customized coloration mode. This can occur while you set the Home windows mode to darkish and the applying mode to mild in Settings > Personalization > Colours.
• This replace addresses a problem affecting the Notepad combo field in Settings. Fails to show all out there choices.
• This replace addresses a problem that impacts Microsoft PowerPoint. Stops responding. This occurs while you use accessibility instruments.
• This replace addresses a problem that impacts Microsoft Narrator. Did not learn objects in dropdown lists in Microsoft Excel.
• This replace addresses a problem that impacts USB printers. The system classifies them as multimedia units, although they aren’t.
• New! This replace provides many new options and enhancements to Microsoft Endpoint Defender. For extra info, see Microsoft Defender for Endpoint.
• New! Upon getting entry to the brand new Bing, the search field on the taskbar could embody a button that opens the Bing chat expertise in Microsoft Edge. If you do not have entry, the taskbar search field will embody a dynamic search spotlight button.
• This replace addresses a problem that impacts PIN complexity coverage settings. They’re ignored.
• This replace addresses a problem that impacts the Quick Id On-line 2.0 (FIDO2) PIN credentials icon. Not displayed on exterior monitor credentials display. This occurs when this monitor is hooked up to a closed laptop computer.
• This replace addresses a problem that impacts a cluster shared quantity (CSV). CSV fails to return on-line. This occurs in the event you allow BitLocker and native CSV managed protectors and the system has not too long ago rotated BitLocker keys.
• This replace addresses a problem that impacts Lively Listing customers and computer systems. Stops responding. This occurs while you use a TaskPad view to allow or disable many objects directly.
• The replace addresses a problem that impacts the Distant Process Name service (rpcss.exe). The difficulty could trigger a race situation between the Distributed Element Object Mannequin (DCOM) and the Microsoft Distant Process Name (RPC) endpoint mapper.
• This replace addresses a problem that impacts Microsoft PowerPoint. It stops responding to Azure Digital Desktop (AVD). This occurs while you use Visible Primary for Purposes (VBA).
• This replace addresses a problem that impacts Home windows Search. Home windows Search fails inside Home windows container photographs.
• This replace impacts the Group Coverage Editor. It provides Transport Layer Safety (TLS) 1.3 to the record of protocols you possibly can set.
• This replace impacts the Arab Republic of Egypt. The replace helps the federal government’s 2023 DST change order.
• This replace impacts jscript9Legacy.dll. It provides ITracker and ITrackingService to cease MHTML from changing into unresponsive.
• This replace addresses a problem that impacts the Microsoft HTML Software Host (HTA). This difficulty blocks the execution of code that makes use of Microsoft HTA. This occurs while you activate Home windows Defender Software Management (WDAC)’s Consumer Mode Code Integrity (UMCI) enforcement mode.
• This replace impacts the Group Coverage Administration Console. It addresses a bug within the script within the Group Coverage Preferences window.
• This replace addresses a problem that impacts the Home windows Distant Administration (WinRM) shopper. The shopper returns an error standing (500) to the HTTP server. This error happens when working a switch job within the Storage Migration Service.
• This replace addresses a problem that impacts the specified state configuration. It loses its preconfigured choices. This occurs if metaconfig.mof is lacking.
• This replace addresses a problem that impacts Dynamic Host Configuration Protocol (DHCP) possibility 119 – Area Lookup Choice. The issue stops you from utilizing a DNS suffix lookup record for a connection.
• This replace addresses a uncommon difficulty that might end in a null enter vacation spot. This downside can happen while you attempt to convert a bodily level to a logical level throughout hit testing. Due to this, the pc points a cease error.
• This replace addresses a problem that impacts the Easy Certificates Enrollment Protocol (SCEP) certificates. The system studies some SCEP certificates installations as failed. As an alternative, the system ought to report them as pending.
• This replace addresses a problem that impacts the brand new Home windows Runtime (WinRT) API. This difficulty stops the app from looking for location info utilizing MBIM2.0+.
• This replace addresses a identified difficulty affecting kiosk system profiles. You probably have automated login enabled, it might not work. After Autopilot completes provisioning, these units stay on the credentials display. This difficulty happens after you put in updates from January 10, 2023 and later.
• This replace impacts Xbox Elite customers who’ve an Xbox Adaptive Controller. This replace applies your desktop controller redirection preferences.
• This replace addresses a problem which will have an effect on your audio. This could trigger bugs or screeching. This occurs when the system is below heavy load or wakes up from sleep mode.
• This replace addresses a problem that stops WDAC from parsing fields from binary information.
• This replace addresses a problem which will have an effect on Win32 and Common Home windows Platform (UWP) purposes. They might shut when the units enter fashionable standby. Trendy Standby is an extension of the Linked Standby energy mannequin. This difficulty happens if sure Bluetooth PhoneLink options are turned on.

Since KB5025239 is a compulsory replace, it can set up mechanically for most individuals. It’s also doable to put in it manually by way of Home windows Replace or obtain it instantly from the Microsoft Replace Catalog.

Picture credit score: do it your self[email protected] / deposit pictures