Known update issues
Terms explained
What do Known Issue Rollback, enforcement phase or end of support mean? A short explanation.
- Known issue
- A bug confirmed by the vendor that occurs after an update. Microsoft lists them per Windows version in “release health” with a status (reported, confirmed, mitigated, resolved).
- Workaround
- A temporary way around the problem until an update fixes it – e.g. a registry value or a Group Policy setting. Revert it after the fix.
- Known Issue Rollback (KIR)
- Microsoft can remotely roll back individual faulty changes of an update. On home devices this happens automatically; in organisations via a special Group Policy (MSI package from Microsoft).
- Out-of-band update (OOB)
- An unscheduled update outside Patch Tuesday, usually to fix an urgent problem.
- Dated change
- A change that takes effect on a fixed date: expiring certificates, hardening, retired protocols or end of support.
- Audit and enforcement phase
- Many security hardening changes come in stages: first only logging (audit), then enforced by default with a temporary opt-out, finally without exception (enforcement). At the latest then, anything not prepared stops working.
- End of support
- After that there are no more updates – not even security updates. “End of servicing” applies to individual versions; ESU are paid extended security updates.
- Safeguard hold
- Microsoft holds back a feature update for devices that would be affected by a known issue until it is fixed.
- Community report
- A problem after an update that users report in forums, on Q&A sites or Reddit, or that trade media report – found through their feeds or our web research – but that the vendor has not confirmed yet. We list it when there are at least two independent reports or one report with clear details (KB number and symptom). We do not store the names of the authors. There are no fix scripts for community reports. Once a vendor source confirms the issue, the label disappears.
- Fix script, backup and restore
- Our scripts only set values documented by the vendor and always speak both languages (German/English). First they check whether the system is affected and report the result. Then they show the planned changes and ask before changing; before that they back up every affected value (the first backup is never overwritten). Run again, they ask "Restore previous configuration?". For Intune/RMM there are -Check, -Apply, -Undo and -Force – without a user they never prompt, they only check. Use at your own risk.
- SHA-256
- Checksum of the file. If it matches the value on this page (PowerShell: Get-FileHash), the file was not altered in transit.
- Pacific Time (PT)
- Microsoft gives times in Californian time (9 hours behind Switzerland). A date “12 January, 23:59 PT” is already 13 January in Switzerland.
Where the information comes from
We continuously read the vendors’ official sources, community reports and trade media and summarise them in our own words, with a link to the source:
- Microsoft: Windows release health (Windows 10/11, Server 2016 to 2025), Windows message center, known issues of Microsoft 365 Apps (Outlook, Excel, Word, PowerPoint), Edge, Intune, Autopilot, Windows 365 and Entra Connect, Microsoft KB articles with timelines, Exchange and Windows IT Pro blogs, optionally Microsoft 365 service health and message center
- other vendors: Veeam KB, Citrix (known issues), Ubuntu and Debian (regressions), Broadcom (VMware), Fortinet, Cisco, Mozilla, Let’s Encrypt
- community (title, short excerpt and link only, without the names of the authors): Microsoft Q&A, Microsoft Tech Community (discussions), Veeam R&D Forums, Eleven Forum
- targeted web research with AI (Claude), e.g. on the updates of the month – this also finds discussions on Reddit and in forums; such entries are labelled as community reports until the vendor confirms them
- early warning from trade media (title and link only): Born’s Tech and Windows World, BleepingComputer, AskWoody, Windows Latest, Windows Central, gHacks, The Windows Club, Deskmodder, Dr. Windows, WindowsArea, Frankys Web, heise online
Summary and translation with AI (Claude by Anthropic) – without any data of visitors.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.