www.butsch.ch - Enterprise IT explained for you and me

Deployment Microsoft Exchange Outlook WSUS

CVE-2026-21509 | 0-day exploit mitigation Batch OF2016 + OF2019

26.01.2026 admin

Microsoft Office Security Feature Bypass Vulnerability CVE-2026-21509, Security Vulnerability, Released: Jan 26, 2026, Last updated: Jan 26, 2026 Assigning CNA Microsoft CVE.org link CVE-2026-21509 Impact Security Feature Bypass Max Severity Important Weakness CWE-807: Reliance on Untrusted Inputs in a Security Decision CVSS Source Microsoft Vector String CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C Metrics CVSS:3.1 7.8 / 7.2 Update, 27.01.2026, […]

Uncategorized

Product: Microsoft Edge — Error 1722. There is a problem with this Windows Installer package, Event 11722

11.01.2026 admin

EVENT, 11722, MSIinstaller, Application This issue keeps resurfacing, and we most commonly encounter it in customer environments running parallel systems—such as Citrix alongside VDI—but it also appears in traditional Windows desktop deployments. Our observations suggest a strong correlation with scenarios where the same user account is actively used across multiple platforms at the same time […]

Microsoft Server OS Server 2019

server 2019 end of life | Technical Deep Dive for System Engineers

17.12.2025 admin

Windows Server 2019 End of Life – Technical Deep Dive for System Engineers Server 2019 End of Life – Facts, Dates and Technical Impact Windows Server 2019 is deeply integrated in many enterprise environments: Active Directory, file services, Hyper‑V, Failover Clustering, SQL backends, RDS and line‑of‑business workloads. While it is still stable and widely deployed, […]

ENS | Endpoint Security FW Fortigate FW Sophos GPO | Gruppenrichtlinien Ivanti Frontrange Enteo M365 - Exchange Online Mcafee/Trellix Microsoft SCCM,MEM,MDT Outlook Scripting Tools we made VMWare VSE | VirusScan Enterprise

CRL Check – Certificate Revocation List Validation Freeware Tool

15.12.2025 admin

CRL Check for Windows Environments CRL check is a tool designed to collect executables from most used paths on your client. It checks whether they are digitally signed with a code certificate and then retrieves the Certificate Revocation Lists (CRL) and OCSP for each signed file it finds. It then automatic verifies if the client […]

ENS | Endpoint Security EPO | ePolicy Orchestrator SECURITY

Trellix Endpoint Security Platform 10.7.19 mfeesp.exe crash nach Update, Event 1000, W11, SRV 2016 und 2019, Deutsch

01.12.2025 admin

Migration von Trellix Endpoint ENS 10.7.19 fehlerhaft ENS Oberfläche zeigt Fehler: Error commincating with the Event Log (Windows Defender ist aktiv) mfeesp.exe verursacht Abstürze In der ENS-GUI erscheint: “Error communicating with the Event Log” Application Event 1000 mit Verweis auf MSVCP140.DLL, MSVCP140_1.DLL, MSVCP140_2.DLL, MSVCP140_atomic_wait.dll oder MSVCP140_codecvt_ids.DLL Betroffen: Microsoft Windows 11 24H2 sowie Windows Server 2016 […]

Deployment ENS | Endpoint Security EPO | ePolicy Orchestrator Mcafee/Trellix Scripting SECURITY

Unable to migrate Trellix Endpoint ENS 10.7.19, Event 1000, MSVCP140.dll, mfeesp.exe, Error communicating with the Event Log

20.11.2025 admin

Unable to migrate to Trellix Trellix Endpoint Security ENS 10.7.19 and ENS GUI crash with event 1000 (Update/migration/upgrade) mfeesp.exe crashing GUI: Error communicating with the Event Log Application Event 1000 from MSVCP140.DLL, MSVCP140_1.DLL,MSVCP140_2.DLL, MSVCP140_atomic_wait.dll or MSVCP140_codecvt_ids.DLL Affected OS we have seen with error: Microsoft Windows W11 24H2 Microsoft Server 2016 Microsoft Server 2019 Terminal Server […]

Exchange 2019 M365 - Exchange Online M365,AZURE,INTUNE Microsoft SCCM,MEM,MDT Outlook

Verify if you are affected from MS EX1181125, new M365 group member added wrongly had OWNER permission 03.10-31.10.2025

05.11.2025 admin

Error: Some users added as members to a Microsoft 365 group in Outlook on the web may be given “Owner” permissions by default Important Security Notice for M365 Groups Between October 3 and October 31, 2025, Microsoft Exchange Online experienced an issue that affected Microsoft 365 (M365) Groups. During this period, when a new […]

Microsoft Server OS SECURITY Server 2008 R2 Server 2012 R2 Server 2016 Server 2019 Server 2022 [21H2/22H2/32H2] Server 2025 WSUS

Is your SBS environment update ready for 25H2 W11, SMB-Version, smbchecker.ps1

02.11.2025 admin

PowerShell script to check if you SMB setup is 25H2 ready Windows 11 25H2 – Small Update, Big Impact for SMB Environments Windows 11 25H2 is now being offered on home and business systems as an Enablement Pack. This means it’s not a full new installation — instead, it’s a small ~50 MB update […]

Deployment Uncategorized VMWare

W11 VMWARE Workstation white screen crash when you open EDGE Browser and Nvidia

02.11.2025 admin

Not fixed date 06.11.2025 with 17.6.4 BUILD 24832109 W11 24H2 and 25H2 same behaviour. Started 4-5 months ago. VMWARE Pro Update did not resolve. What happens You have VMWARE Workstation PRO running a machine open When you open a NEW EDGE Browser suddenly the W11 freezes and hangs for a few ticks then comes […]

Deployment Hotfixes, Updates Scripting Server 2022 [21H2/22H2/32H2] Server 2025 WSUS

WSUS Out of Band Patch Installer – CVE-2025-59287 for all OS automatic

26.10.2025 admin

Powershell skript to force the Out of band patches for WSUS Exploit fully automatic on WSUS. WSUS Out-of-Band Patch Installer – Overview (CVE-2025-59287) for all OS automatic Run our emergency skript direct on your WSUS Server. The 24.10.2025 emergency patches itself are in WSUS. If they are APROVED there our skript will install them from […]

GPO | Gruppenrichtlinien Hotfixes, Updates Intunes M365,AZURE,INTUNE Server 2025 WSUS

W11 24H2 + Server 2025 Hotpatch without Reboot how to set VBS via GPO so it works

05.03.2025 admin

Hotpatching is coming to Windows 11 24H2 Enterprise E3+. Users will be able to patch “Security ONLY” updates on Patch Tuesday without requiring a reboot each time. W11 Hotpatch only available for Windows Enterprise E3 or E5 (e.g. Microsoft 365 A3/A5 or Microsoft 365 F3); or a Windows 365 Enterprise subscription. Windows 11 version 24H2 […]

SQL WSUS

Unable to connect to WSUS WID with SQL Management Studio V20, does not support encryption

25.02.2025 admin

Unable to connect to WSUS WID with SQL Management Studio V20, does not support encryption We just had a customer where a newer version of SQL Server Management Studio was installed to manage the WID (Windows Internal Database) of the WSUS server on a Server 2022 OS. With the EOL for WSUS Server (only […]

M365 - Exchange Online M365,AZURE,INTUNE

Exchange Online SMTP Volumen Limiten für ausgehende E-Mail ab März 2025 – TERRL

25.02.2025 admin

Microsoft führt Limit für ausgehenden SMTP-E-Mail-Flow von Tenants ein Honest Pre-Lude: This decision has been revoked like other by MS since customers where not happy. There is #1 single reason IT departments were forced to migrate their on-premise to M365 and EXO. Because there where NO Limit on size, volume, there was NO mandatory 2-form […]

Exchange 2019 M365 - Exchange Online M365,AZURE,INTUNE

Exchange Tenant, EXO, EWS Security change (Fehlervermeidung Security), 02-2025

20.02.2025 admin

Exchange Tenant, EXO, EWS Security change (Fehlervermeidung Security) Microsoft verbessert die Sicherheit von EWS und löst das Problem bei der Kombination von “per Tenant” und “per User” Rechten. Dies erleichtert es insbesondere grossen Unternehmen, Compliance-Vorgaben konsequent durchzusetzen. Ein wesentlicher Grund für diese Änderung ist, dass viele Personen im M365-Portal oder über Graph API Änderungen vornehmen, […]

Server 2016 VMWare WSUS

Packet loss older NIC VMWARE 1.9.11.0 on ESXi 8.0.2

20.02.2025 admin

Packet loss with VMXNET3, NIC VMWARE, ESX 14.09.2022, 1.9.11.0, Server 2016 ON ESXi 8.0.2, 238255 Did you update the NIC driver when migrating to ESX V8? We recently ran into issues on a server running WSUS and Trellix ePO, both of which usually generate heavy traffic in all directions. Over several days, I noticed sporadic […]

Certificate Revocation List Check Tool is designed to enhance security by performing several key functions related to executable files (EXE). It can scan your client for EXE files and examine their code-signing certificates. The tool also searches for the relevant CRL to determine whether it can be downloaded. It validates the integrity of the certificate chain, checks both the certificate and CRL for expiration dates, and can export a comprehensive list of all gathered information as a file. Additionally, it cross-references to ensure you are not using any revoked certificates, helping maintain a secure environment.

Highroller