• GreeNRG@slrpnk.net
    link
    fedilink
    English
    arrow-up
    297
    arrow-down
    2
    ·
    edit-2
    2 个月前

    Since rolling back to the previous configuration will present a challenge, affected users will be faced with finding out just how effective their backup strategy is or paying for the required license and dealing with all the changes that come with Windows Server 2025.

    Accidentally force your customers to have to spend money to upgrade, how convenient.

    • Dremor@lemmy.world
      link
      fedilink
      English
      arrow-up
      203
      ·
      2 个月前

      Congratulation, you are being upgraded. Please do not resist. And pay while we are at it.

    • Maestro@fedia.io
      link
      fedilink
      arrow-up
      83
      arrow-down
      3
      ·
      2 个月前

      Since MS forced the upgrade, you should get 2025 for free. That would probably be really easy to argue in court

      • boonhet@lemm.ee
        link
        fedilink
        English
        arrow-up
        80
        arrow-down
        11
        ·
        2 个月前

        Ah, but did you read the article?

        MS didn’t force it, Heimdal auto-updated it for their customers based on the assumption that Microsoft would label the update properly instead of it being labeled as a regular security patch. Microsoft however made a mistake (on purpose or not? Who knows…) in labeling it.

        • MaggiWuerze@feddit.org
          link
          fedilink
          English
          arrow-up
          94
          arrow-down
          1
          ·
          2 个月前

          Then it’s still on Microsoft for pushing that update through what is essentially a patch pipeline

          • gravitas_deficiency@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            9
            ·
            1 个月前

            MS will be sued over this and they will lose. This is not an ambiguous case. They fucked up. It’s essentially an unconsentual/unilateral alteration to a contract, which kinda violates the principle of, you know, a contract.

          • boonhet@lemm.ee
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            33
            ·
            2 个月前

            It is, but they never forced anyone to take the update, so that might save their asses, or it might not

            • WhatAmLemmy@lemmy.world
              link
              fedilink
              English
              arrow-up
              53
              arrow-down
              3
              ·
              2 个月前

              This would be no different to you ordering food in a restaurant, them bringing you the wrong meal, you refusing because you didn’t order it, then they tell you to go fuck yourself and charge you for it anyway.

              If this argument is valid in your judicial system then you live in a clown world capitalist dictatorship.

              • Maestro@fedia.io
                link
                fedilink
                arrow-up
                41
                arrow-down
                4
                ·
                2 个月前

                Have you seen the state of the US? A “clown world capitalist dictatorship” is a pretty apt description

              • boonhet@lemm.ee
                link
                fedilink
                English
                arrow-up
                8
                arrow-down
                3
                ·
                2 个月前

                I’m saying they might send people the bill and then these people (well, companies) are going to have to fight it in court, where they’ll be right for sure, but Microsoft can make a lot of stupid arguments to prolong the whole thing, to the point where it’s cheaper to pay the license fee. For one they could say that continued use of the operating system constitutes agreement to licenses and pricing.

                Either way this is server 2025 not windows 12. We’re talking about companies here, not people.

                • WhatAmLemmy@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  edit-2
                  2 个月前

                  Yes, and I’m saying that the fact this could even be viewed by Microsoft as something that is worth going to trial, and being argued in court = hyper-capitalist dystopian dictatorship.

                  In a sane world not “by and for corporations”, this tactic would not even be in the realm of plausibility.

            • NeoNachtwaechter@lemmy.world
              link
              fedilink
              English
              arrow-up
              11
              arrow-down
              1
              ·
              edit-2
              2 个月前

              M$'s mistake creates no obligation to pay, either way. They cannot sue anyone for the extra money.

              But some customers (depending on their legislation) might sue M$ to make broken systems running again, for example if these systems have stopped now with a ‘missing license’ error message.

    • Maggoty@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      2
      ·
      2 个月前

      Uh, if they didn’t ask for it, how is Microsoft going to make them pay for it?

  • MonkderVierte@lemmy.ml
    link
    fedilink
    English
    arrow-up
    100
    arrow-down
    5
    ·
    2 个月前

    Misleading title. It was installed by a third-party updater, Heimdall, but MS labeled a Windows 11 update wrong.

      • ditty@lemm.ee
        link
        fedilink
        English
        arrow-up
        31
        arrow-down
        4
        ·
        2 个月前

        Yet another reason to not do auto-updates in an enterprise environment for mission-critical services.

        • superkret@feddit.orgOP
          link
          fedilink
          English
          arrow-up
          42
          arrow-down
          1
          ·
          2 个月前

          In an enterprise environment, you rely on a service that tracks CVEs, analyzes which ones apply to your environment, and prioritizes security critical updates.
          The issue here is that one of these services installed a release upgrade because Microsoft mislabelled it as security update.

          • NocturnalEngineer@lemmy.world
            link
            fedilink
            English
            arrow-up
            15
            arrow-down
            3
            ·
            2 个月前

            Should still be doing phased rollouts of any patches, and where possible, implementing them on pre-prod first.

            • mosiacmango@lemm.ee
              link
              fedilink
              English
              arrow-up
              11
              ·
              edit-2
              2 个月前

              Pre-prod is ideal, but a pipe dream for many. Lots of folks barely get prod.

              We still stagger patching so things like this only wipe some of the critical infrastructure, but that still causes needless issues.

            • SomeGuy69@lemmy.world
              link
              fedilink
              English
              arrow-up
              12
              arrow-down
              1
              ·
              2 个月前

              For security updates in critical infrastructure, no. You want that right away, in best case instant. You can’t risk a zero day being used to kill people.

              • Appoxo@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                2
                ·
                edit-2
                1 个月前

                Even security updates can be uncritical or supercritical. Consult the patch notes or get burned lol

      • Appoxo@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        4
        ·
        edit-2
        1 个月前

        Do you know that’s not a mistake and done fully malicously knowing that? Please give me your source.

          • Appoxo@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            4
            ·
            edit-2
            1 个月前

            And you make absolutely no error?

            Besides that:
            Should MS have caught the errorenous ID (assuming it truly was errourneous and not knowingly falsely labeled)? Absolutely. Should the patch management team blindly release all updates that MS releases? No?

  • Aceticon@lemmy.world
    link
    fedilink
    English
    arrow-up
    93
    arrow-down
    6
    ·
    2 个月前

    I’m truly, totally, completely shocked … that Windows is still being used on the server side.

    • Hobo@lemmy.world
      link
      fedilink
      English
      arrow-up
      63
      arrow-down
      1
      ·
      2 个月前

      A bunch of enterprise services are Windows only. Also Active Directory is by far the best and easiest way to manage users and computers in an org filled with a bunch of end users on Windows desktops. Not to mention the metric shitload of legacy internal asp applications…

      • /home/pineapplelover@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        1 个月前

        Yeah at work we do a lot of internal microsoft asp stuff, poweshell, AD, ms access, all that old legacy ms stuff

        • Hobo@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 个月前

          No not really. It does the various services for the most part, but Active Directory is exclusively a Microsoft product. Group Policy in particular also does not have a drop in replacement that’s any sort of sane.

    • uniquethrowagay@feddit.org
      link
      fedilink
      English
      arrow-up
      10
      ·
      1 个月前

      We run a lot of Windows servers for specialized applications that don’t really have viable alternatives. It sucks, but it’s the same reason we use Windows clients.

    • ikidd@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 个月前

      Basically AD and the workstation management that uses it. Could all be run on a VM and snapshotted because you know it’s going to fuck up an update eventually. Perhaps SQL Server but that’s getting harder to justify the expense of anymore.

  • Kokesh@lemmy.world
    link
    fedilink
    English
    arrow-up
    47
    arrow-down
    1
    ·
    2 个月前

    It must have been the same fun as when back in 2012 (or 2013?) McAfee (at least I think it was them) identified /system32 as a threat and deleted it :)

  • Buttflapper@lemmy.world
    link
    fedilink
    English
    arrow-up
    47
    arrow-down
    11
    ·
    2 个月前

    Do system administrators still exist? Honest question. I was one of those years ago and layoffs, forced back to office bullshit drove me away

    • superkret@feddit.orgOP
      link
      fedilink
      English
      arrow-up
      65
      arrow-down
      1
      ·
      2 个月前

      yes, but we spend most of our time in meetings with cloud service vendors now.
      I haven’t been inside the server room for a month.

      • Buttflapper@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        2
        ·
        2 个月前

        I’m not necessarily talking about being in the server room, I’m talking about more like doing power shell stuff and the stuff you would think system administrators do. They are still teaching active directory in IT classes in college

      • njordomir@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        2 个月前

        I knew a guy with almost that exact resume, except he told me it was chickens. He worked in Lagos during the week and went back to his chickens in rural Nigeria on the weekend.

    • Passerby6497@lemmy.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      2 个月前

      There are dozens of us (working for MSPs because in house doesn’t pay as well and companies are cheap and want to outsource that cost center)!

      • superkret@feddit.orgOP
        link
        fedilink
        English
        arrow-up
        30
        ·
        2 个月前

        I switched from an MSP to a unionized in-house position, doubled my salary and my days of paid time off.

        • Lettuce eat lettuce@lemmy.ml
          link
          fedilink
          English
          arrow-up
          9
          ·
          2 个月前

          I worked for a classic MSP a while back, barely lasted 3 months. Such a toxic environment, tons of pressure to spread yourself thinner and thinner.

          It was one of those places where you were expected to be there an hour early, stay an hour late, and work through your lunch.

          Even though that’s illegal, it was never explicit, just one of those, wink wink type things. But the workload was always so heavy, you couldn’t stay on top of everything unless you were working 50+ hours a week.

          And of course, all salary, no overtime or double time for weekend work.

          I do internal IT now, much better. Trying to get my own one-person shop going to eventually be fully self-employed. Actually, it would be really cool to become a worker-owned co-op, but that’s still a faint dream.

          • DokPsy@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            ·
            2 个月前

            Currently in an MSP. It’s all on the company culture as to if it’s shit or not. We’re fully wfh with no plans to move back to the office.

            Overtime is never forced. If we have to work through lunch because all hell is breaking loose, we’re practically encouraged to leave an hour early unless the CEO is allowing ot and we want it. No pressure either direction.

            If users are rude or generally hard to deal with, manager has our back in dealing with them.

            Pay isn’t top dollar but there’s trade-offs

          • Trainguyrom@reddthat.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            1 个月前

            I just accepted a job with a small MSP starting early next year. I kept a close ear out during the interview for signs of the classic MSP hell stuff that would chew through techs but it does look like I got a good one (small 8 or so man shop) but check in in about 3 months and we’ll see how I’m feeling haha

            My longer term plan is to use this as a stepping stone to then move onto being in-house then figuring out my exit strategy before burnout takes me, which I’m thinking I’ll either be aiming to move into IT management or possibly moving into a business analytics or cloud administration type role. Technical sales probably wouldn’t be too bad either.

        • Passerby6497@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          2 个月前

          Nice! I’ve job hopped a few times and tripped my salary in 5 years and am at a unicorn msp with unlimited PTO and management that cares about employees.

          I wish I could find a union IT shop, but nothing around that I’ve seen available. Happy to hear my first statement isn’t as universal as my experience suggests!

          • superkret@feddit.orgOP
            link
            fedilink
            English
            arrow-up
            17
            ·
            edit-2
            2 个月前

            “Unlimited PTO” is a meaningless term, and a trap.
            I have 42 days of PTO per year, plus 13 state holidays.
            I have a right to take those days off, they can’t be denied by anyone.
            And if I don’t take them, my team lead will have a talk with me in October at the latest, because the company would get in legal trouble if I didn’t get them.

            With “unlimited PTO” you have no such right to any amount of PTO.
            Sure, you could try to schedule lots of PTO, but it can just be denied (“not possible right now”), or if you take too many, you’re just fired.

            • Johnny5@lemm.ee
              link
              fedilink
              English
              arrow-up
              9
              ·
              2 个月前

              Plus they don’t have to book the liability on the balance sheet!

    • Baggie@lemmy.zip
      cake
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 个月前

      Idk dude, I got a redundancy about a year ago. There are still jobs out there but it feels like it’s dwindling.

  • DirkMcCallahan@lemmy.world
    link
    fedilink
    English
    arrow-up
    37
    arrow-down
    2
    ·
    2 个月前

    I know this has nothing to do with my home computer, but this just further affirms my decision to switch to Linux earlier this year.

    • Appoxo@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      4
      ·
      1 个月前

      When reading comprehension is limited to the title.
      MS mislabeled the update
      Heimdal (apparently a patchmanagement) auto-installed the falsely labeled update.

      If OP (this was reported by a Redditor on r/sysadmin) and their company is unable to properly set grace periods for windows updates I can’t help them either.
      IMHO you are supposed to manually review and release updates either on a WSUS or the management interface of your patching solution.
      Not just “Hehe, auto install and see what happens”.
      And if you do that shit, set a timeout for 14 days at least for uncritical rated updates.

      • Cethin@lemmy.zip
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        1 个月前

        They said they believe it was a mislabeled update. MS didn’t respond. Before criticizing others for their reading comprehension, I think you could work on yourself too.

        There is a world, and it may be ours, where MS purposefully pushes this out. As the end of the article makes clear, this will be only a minor issue for those with good backup (which they probably all should but they don’t), but for those who don’t they’ll be stuck with the new version and have to pay for the license of it. This is a large benefit to MS while they also get to pretend like it’s just a mistake and not having backups makes it your issue, not theirs.

        • Appoxo@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 个月前

          Reading (the TLDR) without complaining: Fine
          Complaining while only reading the comments: Not fine

  • CriticalMiss@lemmy.world
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    8
    ·
    1 个月前

    Hate to be that guy but if you automatically patch critical infrastructure or apply patches without reading their description first, you kinda did it to yourself. There’s a very good reason not a single Linux distribution patches itself (by default) and wants you to read and understand the packages you’re updating and their potential effects on your system

    • Gimpydude@lemmynsfw.com
      link
      fedilink
      English
      arrow-up
      25
      ·
      1 个月前

      While you are generally correct, in this case the release notes labeled this as a security update and not an OS upgrade. The fault for this is Microsoft’s not the sysadmin.

    • festus@lemmy.ca
      link
      fedilink
      English
      arrow-up
      15
      ·
      1 个月前

      Many distros (at least Ubuntu) auto-installs security updates, and here a mislabeled “security update” was auto-installed. This is not the fault of the sysadmins.

      • starman2112@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        1
        ·
        1 个月前

        here a mislabeled “security update” was auto-installed.

        To be fair, you would have to read all the way to the first paragraph to get this information from the article. Hard to blame people for not knowing this critical bit of information when it was buried so deep

    • rumba@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 个月前

      There’s a lot of people out there running automation to keep their servers secure. Well I agree any automation out there should be able to flag and upgrade excluded, It would seem to me like Microsoft should own some of the blame for a full ass hard to uninstall OS update fed in with the same stream and without it interaction. I kind of expect my OS in stall pop up a window and say hey a****** this is going to upgrade your system, are you cool with that. I don’t know how it works these days but I know back in the day going between versions you would have to refresh your licensing on a large upgrade.

      • CriticalMiss@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 个月前

        Unlike with other OSes Microsoft releases all of their patches on Tuesday at around the same time in one big batch. I spend my Tuesday morning reading the patch descriptions and selectively applying them. A method that hasn’t failed me once.

        • rumba@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 个月前

          Yeah, I’m using Ninja on about 120 boxes. It’s set to auth critical only. If someone reports a problem, we’ll go ahead and blacklist that update temporarily while we sorted out even though it’s semi-automated they never happen all at once there’s always a couple of canaries that get up a little early.

    • superkret@feddit.orgOP
      link
      fedilink
      English
      arrow-up
      10
      ·
      1 个月前

      We have an app running on CentOS 6. The vendor of the app informed us they expect to have a new version that can run on RHEL 8 by the end of the year - 2025.