The Remote Desktop Protocol—the proprietary mechanism built into Windows for allowing a remote user to log in to and control a machine as if they were directly in front of it—however, will in many cases continue trusting a password even after a user has changed it. Microsoft says the behavior is a design decision to ensure users never get locked out.
Independent security researcher Daniel Wade reported the behavior earlier this month to the Microsoft Security Response Center. In the report, he provided step-by-step instructions for reproducing the behavior. He went on to warn that the design defies nearly universal expectations that once a password has been changed, it can no longer give access to any devices or accounts associated with it.
(...)
In response, Microsoft said the behavior is a “a design decision to ensure that at least one user account always has the ability to log in no matter how long a system has been offline.” As such, Microsoft said the behavior doesn’t meet the definition of a security vulnerability, and company engineers have no plans to change it.
https://www.xda-developers.com/windows-11s-may-update-stopping-some-pcs-from-bootingt/
Microsoft released its patch, KB5058405, on the 13th of May, for Windows 11 22H2 and 23H2. As first reported by Bleeping Computer, Microsoft has confirmed via an update on its release health dashboard that some Windows 11 PCs may fail to boot up after installing the mandatory Windows 11 security patch.
The report mentions that the KB5058405 patch might fail to install on some Windows 11 PCs, and the affected devices may be greeted with the following error 0xc0000098:Your PC/Device needs to be repaired The operating system couldn't be loaded because a required file is missing or contains errors. File: ACPI.sys Error code: 0xc0000098
A Microsoft Account also stores the BitLocker encryption key which is crucial thing that all users who have encryption need to store securely.[voix=Flanker]Faites des sauvegardes ![/voix]
Back in May this year, we covered reports of users losing their data as a consequence of BitLocker key loss, and this is a real danger for many, given that Microsoft now enables automatic BitLocker encryption on Windows 11 24H2, that most users won't even be aware of.
So in the case of loss of access to a Microsoft Account, an affected user can suddenly find that they have lost all their data and there may be no way to recover it according to Microsoft's terms.
Such account lock-outs can happen as a Reddit user deus03690 found out. The frustrated user claims that Microsoft apparently "randomly" locked their account when they were dealing with multiple data drives. They explain:"Microsoft randomly locked my account after I moved 30 years' worth of irreplaceable photos and work to OneDrive. I was consolidating data from multiple old drives before a major move—drives I had to discard due to space and relocation constraints. The plan was simple: upload to OneDrive, then transfer to a new drive later.
Instead, Microsoft suspended my account without warning, reason, or any legitimate recourse. I've submitted the compliance form 18 times—eighteen—and each time I get an automated response that leads nowhere. No human contact. No actual help. Just canned emails and radio silence."
Zerosquare (./3310) :
[voix=Flanker]Faites des sauvegardes ![/voix]
The Blue Screen of Death (BSOD) has held strong in Windows for nearly 40 years, but that’s about to change. Microsoft revealed earlier this year that it was overhauling its BSOD error message in Windows 11, and the company has now confirmed that it will soon be known as the Black Screen of Death. The new design drops the traditional blue color, frowning face, and QR code in favor of a simplified black screen.
