Windows 10 or Windows 11 GPO ADMX – An Update
Hi community, I am Helmut Wagensonner, a Cloud Solution Architect – Engineer at Microsoft. In a former blog (https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/windows-10-or-windows-11-gpo-admx-which-one-to-use-for-your/ba-p/3063322), where I did a comparison between Windows 10 and Windows 11 ADMX files, I promised in my comments to do ... continue reading

Empowering ISVs to build and sell with the Microsoft Cloud
Today, we are hosting our first-ever Marketplace Summit and giving every ISV and software as a service (SaaS) provider a virtual front-row seat to learn how to maximize marketplace opportunity and do more with less. While we enter uncertain economic ... continue reading

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector
In recent months, Microsoft has detected active ransomware and extortion campaigns impacting the global education sector, particularly in the US, by a threat actor we track as DEV-0832, also known as Vice Society. Shifting ransomware payloads over time from BlackCat, ... continue reading

Enterprise-grade DDoS protection for SMBs now available in preview
This blog has been co-authored by Anupam Vij, Principal PDM Manager. Distributed denial of service (DDoS) attacks are some of the largest availability and security concerns facing customers that are moving their applications to the cloud. While cyber-attacks are on ... continue reading

Defenders beware: A case for post-ransomware investigations
Ransomware is one of the most pervasive threats that Microsoft Detection and Response Team (DART) responds to today. The groups behind these attacks continue to add sophistication to their tactics, techniques, and procedures (TTPs) as most network security postures increase ... continue reading
Introduction to Network Trace Analysis 2: Jumping into TCP Connectivity
Introduction to Network Trace Analysis 2: Jumping into TCP Connectivity Howdy everyone, I hope you're hungry we have a feast of information we will be going through today. Our topic will be the transmission control protocol (TCP) and what you ... continue reading
Connect with the Modern Infrastructure team at Microsoft Ignite 2022
I’m drafting this offline at 35,000 feet, somewhere over the Pacific Ocean. After more than 2.5 years since my last international flight, I’m heading to Seattle for Microsoft Ignite. I feel out of practice! But many little travel things are ... continue reading
Slower SMB Read Performance for large files in 22H2
Heya folks, Ned here again. There is a performance regression in 22H2 when copying larger files from a remote computer down to a Windows 11 computer. A large (multi-GB file) might see as much as 40% less throughput over SMB when copying down ... continue reading

SMB authentication rate limiter now on by default in Windows Insider
Heya folks, Ned here again. Back in the spring of 2022 we released a new SMB preview feature: the SMB authentication rate limiter. It is available in Windows 11 Insider and Windows Server Insider builds. IT staff often enable access to the SMB server service ... continue reading

Microsoft investigates Iranian attacks against the Albanian government
Shortly after the destructive cyberattacks against the Albanian government in mid-July, the Microsoft Detection and Response Team (DART) was engaged by the Albanian government to lead an investigation into the attacks. At the time of the attacks and our engagement ... continue reading