Hardening changes for Windows Server Update Services in Windows Server 2025
Important hardening changes are here. Starting with the September 2025 security update, WSUS running on Windows Server 2025 is removing dependencies on old code that’s no longer supported. This means that Windows operating systems (OS) that reached the end of their lifecycle will no longer qualify to receive extended security updates (ESU), unless you take additional action. Short-term and long-term next steps are available for Windows Server 2012 and Windows Server 2012 R2 that still need to receive ESUs. When will this happen: September 9, 2025 How this will affect your organization: Removing certain binaries from WSUS helps ensure the integrity and security of our software supply chain. This specifically applies to dependencies on components that no longer meet our compliance and security standards. The security benefit of removing these binaries from Windows Server 2025 comes with a potential change for you if you’re using ESU updates for Windows Server 2012. You’ll need to take additional action to resume servicing to these devices. Important: If WSUS is part of a hierarchical deployment (such as connected downstream and upstream servers), there is no impact to your environment. Synchronization and update distribution will continue to function as expected. What you need to do to prepare: Consider the following temporary steps to restore service for ESU updates on Windows Server 2012: After completing these steps, service will resume. To be secure in the longer term, we recommend upgrading the legacy OS versions and upgrading to Windows Server 2025. Additional information: Choose an older supported version of WSUS. For example, Windows Server 2025 on the August 2025 security update or earlier, or Windows Server 2022. Locate the “SelfUpdate” folder on this version of WSUS at %systemdrive%\Program Files\Update Services. Copy the “SelfUpdate” folder and its contents from the chosen older version of WSUS. Place it under the WSUS install path on Windows Server 2025 updated with the security update released in or after September 2025. Add this folder as virtual directory under WSUS website in Internet Information Services (IIS). Read the official information in Hardening changes for Windows Server Update Services in Windows Server 2025. […]
The post Hardening changes for Windows Server Update Services in Windows Server 2025 appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Hardening changes for Windows Server Update Services in Windows Server 2025
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Dynamics 365 Project Operations: Optimize Project Operations – Use what-if analysis on estimates
This feature introduces a robust what-if analysis capability for estimates that enables you to model scenarios and evaluate their impact on ke...
Microsoft Dataverse: Improved enterprise experiences in Power Platform – Enhance Dataverse record descriptions for Copilot /mention
End users of Microsoft 365 Copilot will see improved Microsoft Dataverse, Dynamics 365, and Power Apps record references in Context IQ with ri...
Dynamics 365 Business Central: Country and regional – Comply with Australian Payment Times Reporting bill
Every six months, Australian companies with more than AUD100 million in annual turnover must report how and when they pay small business suppl...
Dynamics 365 Business Central: Electronic documents – Use payments with the E-Document framework
You can mark an e-document as fully paid, partially paid, or unpaid. The system sends this information through accounts payable access points ...
Dynamics 365 Sales: Copilot and AI innovation – Use Dynamics 365 Sales skills in Microsoft 365 Copilot Cowork
As an admin, you can control who can access Copilot Cowork in your organization. The Dynamics 365 Sales plugin is installed by default in Copi...
Dynamics 365 Contact Center: Unified routing – Use pick-based assignment method for work items
Use the No auto assignment method for queues in Copilot Service admin center when you want routed conversations to remain unassigned after the...
Dynamics 365 Contact Center: Omnichannel customer experiences – Handle duplicate callback requests in overflowing queues
In the in-queue and pre-queue overflow settings within the Copilot Service admin center, administrators can define the following settings: Pre...
Dynamics 365 Customer Insights – Data: Turbocharge your pipeline to drive growth – Target right audience based on signals from earlier campaigns
You can now access behavioral data captured by Customer Insights – Journeys, such as emails opened and links clicked, and use it in Cust...
Dynamics 365 Project Operations: Optimize Project Operations – Use the new Time Entry mobile app
Project team members on Lite and resource-based and nonstocked deployments of Project Operations now have a new mobile application based on Mi...
Dynamics 365 Commerce: Store Commerce – Set payment method display order and visibility in POS
The feature introduces payment profiles that can be associated with POS registers. These payment profiles provide retailers with a flexible an...