Microsoft Expected Ticking bombs.

Microsoft Expected Ticking bombs.

Kaboom April 2023

Items that may require thought, action, or extra special attention for April’s edition! Are there any additional things I missed or misread?

• AD permissions issue becomes enforced, it means that the permissions set for a particular resource or object in AD are being enforced and are preventing or allowing access to that resource as intended. For more details click on the link below

• • https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42291

 

• • https://support.microsoft.com/en-us/topic/kb5008383-active-directory-permissions-updates-cve-2021-42291-536d5555-ffba-4248-a60e-d6cbc849cde1

• changes to the Kerberos PAC can be complex and sensitive, and it is important to approach them with caution and thorough planning to ensure the security and stability of the network environment. For more details click on the link below

• • https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37967
  • https://support.microsoft.com/en-us/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb#timing

• Dynamics 365 Business Central on-premises (Modern Policy) marks the end of support for 2021 Release Wave 2. Read More. For more insight click on the link below

• • https://learn.microsoft.com/en-us/lifecycle/products/dynamics-365-business-central-onpremises-modern-policy?branch=live

• Microsoft’s support lifecycle policy, Exchange Server 2013 reached its end of mainstream support on April 10, 2018, and its end of extended support on April 11, 2023. This means that Microsoft will no longer provide technical support, bug fixes, or security updates for Exchange Server 2013 after this date. For more details click on the link below.
  • https://learn.microsoft.com/en-us/microsoft-365/enterprise/exchange-2013-end-of-support?view=o365-worldwide
• Lync Server 2013 after the end of support can pose a significant security risk to your organization, as any security vulnerabilities or bugs discovered after this date will not be addressed by Microsoft. In addition, other software and applications that interact with Lync Server 2013 may also no longer be supported, leading to compatibility issues and potential downtime. For more details click on the link below.

• • https://learn.microsoft.com/en-us/microsoft-365/enterprise/upgrade-from-lync-2013?view=o365-worldwide

• Office 2013 & standalone versions of those apps reach end of support. For more details click on the link below.

• • https://www.microsoft.com/en-us/microsoft-365/office-2013-end-of-support

• project Server 2013 reaches end of its support. For more details click on the link below.

• • https://learn.microsoft.com/en-us/microsoft-365/enterprise/project-server-2013-end-of-support?view=o365-worldwide

• SharePoint Server 2013 reaches end of its support. For more details click on the link below.

• • https://learn.microsoft.com/en-us/sharepoint/product-servicing-policy/updated-product-servicing-policy-for-sharepoint-2013

• Netlogon RPC initial enforcement feature requires that all Windows domain controllers and clients using the Netlogon secure channel connection to be compliant with secure Remote Procedure Call (RPC) usage. For more details click on the link below.

• • https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-38023
  • https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25

• Azure Information Protection Add-in will be disabled by default for Office Apps for the Monthly Enterprise Channel. For more details click on the link below.

• • https://admin.microsoft.com/adminportal/home?ref=MessageCenter/:/messages/MC500902
• https://admin.microsoft.com/adminportal/home?ref=MessageCenter/:/messages/MC478692

•  

• Microsoft Store for Business and Education was supposed to have been retired in March 2023 and now does not have an official date. For more details click on the link below.
  • https://learn.microsoft.com/en-us/lifecycle/products/microsoft-store-for-business-and-education?branch=live
  • https://techcommunity.microsoft.com/t5/windows-it-pro-blog/support-tip-microsoft-store-for-business-retirement-and-windows/ba-p/3662691

 

 

• Microsoft starts throttling and then blocking email from unsecure versions of Exchange starting with 2007 and moving on to newer vulnerable versions. I did NOTsee a date, but NOW is the time for a “come to Jesus moment” to upgrade/or migrate vulnerable servers ASAP! For more details click on the link below.

 

• • https://admin.microsoft.com/adminportal/home?ref=MessageCenter/:/messages/MC532605

Ready to Get Started?

Email Address *