Windows 11/2025 #DoH (DNS over https)

DNS over https (DoH) is a protocol that permit to encrypt DNS queries and sending them over Https.

This protocol has been developed to override security concerns of DNS traffic.

Windows has supported DoH on the client side since Windows 11. While Windows 10 includes the underlying client support in later builds

The encryption operates at the Application Layer (Layer 7) of the OSI model and integrates directly into applications such as web browsers. This approach differs from traditional DNS, which transmits queries over UDP or TCP on port 53 without encryption, leaving them visible to ISPs, network operators, and potential attackers.

be aware about DNS over HTTPS (DoH) (better privacy)  (operate at 443 port more difficult to be detected vs DNS over TLS ( DoT) ( operates at the Transport Layer, using a dedicated port 853 and it is easily to be identified.

DoH verifies DNS server's identity and prevents impersonation attacks. The other advantage is DNS queries and not interceptable.

Microsoft introduced DoH resolver support for Windows DNS Server in the February 10, 2026, cumulative update for Windows Server 2025.

When you enable DoH resolver functionality on a Windows DNS Server, all queries received from clients and responses sent on port 443 are encrypted. However, this implementation has a significant limitation: queries sent by the Windows DNS Server to upstream DNS servers, such as conditional forwarders or authoritative servers, remain unencrypted on port 53.

The traditional DNS service on port 53 continues to operate alongside DoH, ensuring backward compatibility with clients that do not support the encrypted protocol.

So, on Windows 2025 you must install this cumulative update, and doH can be enabled through powershell

I would suggest to read fullo/original article about more interesting and useful details.

[Original/other articles

Enable DoH (DNS over HTTPS) in Windows Server 2025 DNS server, configure Windows 11 DNS clients

Sophos #How to override ACS compatibility problem

If you try to install Sophos on O.S. that not support Azure Code Signing this will not receive Sophos updates and/or install it

KB5022661—Windows support for the Trusted Signing (formerly Azure Code Signing) program

In the past there was a build that fixed problem but is is no longer supported

October 12, 2021—KB5006669 (OS Build 14393.4704) - EXPIRED

to override problem you might arrange to download new Trusted CA Certificate ( Microsoft Identity Verification Root Certificate Authority 2020) that it is related to ACS from this repository:

PKI Repository - Microsoft PKI Services

start --> certmgr.msc --> local computer --> Trusted Root Certification Authorities --> Certificates

In this way Sophos installation works properly.

Extra IT #Leadership e gestione del cambiamento

Partendo dall’analisi di numerose situazioni problematiche reali, il testo offre indicazioni teorico-pratiche e soluzioni concrete per gestire al meglio il rapporto tra il manager e il personale. Analizzando temi come l’importanza di stimolare per sé e per gli altri il cambiamento e di sviluppare le proprie capacità manageriali a tutto campo, l’Autore definisce la figura del leader quale risorsa strategica in grado di guidare il personale verso l’eccellenza, in un percorso di miglioramento continuo

Parole dell'autore Cesare Sansavini

Sono diventato autore di libri casualmente, dopo un morso di un cane che mi aveva procurato una lunga degenza. La mia reazione all’immobilità fu quella di documentare le mie tante esperienze di vendita e trasformarle in una pubblicazione. Nacque così il mio primo libro, edito da Giunti, dal titolo “Dell’arte di vendere e di cos’è il marketing”. Il successo per un autore sconosciuto andò al di là di ogni aspettativa con oltre 100.000 copie vendute negli anni successivi.

Quel libro aprì la porta a numerose altre pubblicazioni, tutte caratterizzate dalla stessa metodologia comunicativa: scrivere libri originali che nascono dalla propria esperienza. Ho chiamato questo metodo Osservazione induttiva, riconoscendo che la più grande qualità umana è imparare dalla propria esperienza, osservando situazioni e comportamenti per trarne conclusioni applicabili ad altri contesti.

Questa capacità di uscire dagli schemi per introdurre soluzioni innovative ha portato alla nascita della collana manageriale Change Project.

https://www.changeproject.it/prodotto/leadership-e-gestione-del-cambiamento-edizione-2023/
 

Microsoft #Windows Server end of support Microsoft 365 Apps on Windows Server 2016, 2019, 2022, or 2025.

TOPIC: Microsoft 365 Apps (*) end of support (a.e. Word, Excel, Outlook ...) on Windows Server 2016, 2019, 2022, or 2025.

END OF SUPPORT DEADLINES until:

• Windows Server 2025: October 2029
• Windows Server 2022: October 2026
• Windows Server 2019: October 2025
• In the interest of maintaining security while customers complete their migrations to a supported configuration, Microsoft will continue providing security updates for Microsoft 365 desktop apps running on Windows Server 2019 for a total of three years, ending on October 10, 2028.(**)
• Windows Server 2016: October 2025
• In the interest of maintaining security while customers complete their migrations to a supported configuration, Microsoft will continue providing security updates for Microsoft 365 desktop apps running on Windows Server 2016 for a total of three years, ending on October 10, 2028. (**)

IMPACTS:

1. Microsoft 365 Apps (*) will not be longer supported after previous deadlines  related to O.S. versions earlier mentioned (but it does not mean that they will stop immediately to work properly ) 
2. These deadlined will affect Virtual Desktops environments such Citrix VDA and gold image...

(*) Word, Excel, Powerpoint, Outlook for email, OneNote, OneDrive, Teams, Sharepoint

[Original articles]

Microsoft 365 Apps migration from Windows Server

(**) Windows Server end of support and Microsoft 365 Apps 

https://www.linkedin.com/pulse/microsoft-windows-server-end-support-365-apps-2016-2019-mazzanti-olgre

Vmware #RVTools

Today I would like to discuss regarding RVTools that it can be downloaded here.

Thi is a lightweight but powerful Windows application used by VMware administrators to collect, analyze, and export detailed information about their vSphere environments. It connects to vCenter Server or directly to ESX/ESXi hosts and provides a comprehensive inventory of virtual machines, hosts, datastores, networks, snapshots, VMware Tools status, and much more. 

It has become something of an industry standard for quick audits, health checks, and documentation of VMware infrastructures. 

What RV Tools can do

RVTools gathers and displays a wide range of information, including:

• VM inventory (CPU, memory, disk usage, network configuration)

• Snapshots (including old or orphaned snapshots)

• Datastore usage

• VMware Tools and VM hardware versions

• ESXi host details

• vNIC and vDisk information

• Zombie objects (disconnected NICs, stale CD-ROMs, etc.)

It’s especially useful for:

• Audits and compliance checks

• Capacity planning

• Identifying misconfigurations

• Exporting reports to Excel for documentation or management review

https://www.dacos.net/rvtools.php

How it Works (High Level)

RVTools connects to vCenter or ESXi using read‑only credentials, making it safe for environments where you want visibility without risk. Typical workflow:

• Install RVTools on a Windows machine.
• Connect to vCenter/ESXi using a read‑only account.
• RVTools collects data across dozens of categories.
• Export results to Excel for reporting or analysis.

Download & Security Notes

RVTools is now maintained by Dell Technologies, and the only supported download location is Dell’s official site. This is important because older third‑party sites (like robware.net) are no longer updated.

Why It’s Popular

• Extremely easy to use
• No impact on production systems
• Fast, comprehensive reporting
• Ideal for troubleshooting and audits
• Free to download and use

Books - Non-Deterministic Software Engineering: How to Build Reliable Software with AI Assistants Without Losing Quality, Security, or Control (English Edition)

Today I would like mention a book written from an University classmate, I hope that it would be helpful, this mention, for him all are insterested about this topic.

https://medium.com/@enrico.papalini/ship-faster-with-ai-dont-crash-why-i-wrote-non-deterministic-software-engineering-904b2a089fbf

on Amazon book purchase possibility and more details about it

https://www.amazon.it/Non-Deterministic-Software-Engineering-Reliable-Assistants-ebook/dp/B0G7LPR4KB

Mobile #Qstudio parental control software

Today I would like to mention Qstodio software that is a nice parental control that work properly on these devices:

https://www.qustodio.com/en/

1. Windows
2. Mac
3. Chromebook
4. Android
5. iPhone/iPad
6. Kink mobile phone, tablets

Numbers 8 million families protected

Top-rated app – 4.3

Major topics are:

• Filter content & apps
• Monitor activity
• Set time limits
• Schedule screen-free moments
• Track calls & SMS for Android and iOS
• Locate family
• Reports, alerts & SOS
• AI applied to WhatsApp, SMS, calls, Tik Tok, Instagram, Facebook etc. etc.

I would add that they have technical support that is a very nice feature.

Be Aware that it does not have Antivirus capabilities and, in any case, it permit to block proxy and/or VPN addon/app/software (obviously you need to find them on app list and block them)

From my side I utilize, on Windows device, https://www.opendns.com/ too (to improve security and reporting)

From my side I will evaluate to create a more detailed technical article.

In any case, from my usage point of view, I am satisfied with that (price is not lo but, where Family link was not able to block child’s workarounds, Qstodio it does =)

<===============>

What happens when I set time limits with Qustodio

What is extra time and how can I use it?

What is extra time and how can I use it?

Server #Error 0x800f0922 installing windows update KB5066793

On microsoft Windows server at the end of installing windows update KB5066793 (at 98%) the update rolls back and shows Error 0x800f0922 in windows update.

Solution is opening regedit.exe and delete this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{53e3d721-2aa0-4743-b2db-299d872b8e3d}

More details con be found here

https://learn.microsoft.com/en-us/answers/questions/5597589/error-0x800f0922-installing-windows-update-kb50667

Edge #How to reset profile

If you need to reset Edge settings profile (you will lose only stored password, bookmarks can be easily reimported, plugin/extentions could be re-downloaded) you need to go to this path and rename following folder

C:\Users\%username%\AppData\Local\Microsoft\Edge\User Data\

https://learn.microsoft.com/en-us/answers/questions/1355083/delete-all-microsoft-edge-profiles-(complete-reset

https://angolodiwindows.com/2022/04/come-resettare-microsoft-edge/

Windows 11 #Real time subtitles #Live Captions

Windows 11 has a built in feature (Windows Live Captions) that provides real-time audio trasnscription.

This way, everything heard by the device can be read out in real time, increasing accessibility for people with hearing problems or those wishing to improve their audio comprehension.

Consider that there are no privacy concerns due to fact that translation occur locally and it work offline as well.

Additionally, real-time subtitles aren't limited to specific apps; they work seamlessly with any audio source on Windows 11.

Windows 11 24H2 or newer are necessary to have full features working properly. There are Drivers and CPU requirements that should be considered.

Live captions can provide automatic transcription of audio to text on the screen. To turn on live captions, do one of the following:

• Turn on the Live captions toggle in the quick settings Accessibility flyout. (To open quick settings, select the battery, network, or volume icon on the taskbar.)
• Press the Windows logo key  + Ctrl + L.
• Select Start > All apps > Accessibility > Live captions.
• Go to Settings  > Accessibility > Captions and turn on the Live captions toggle. 

[original articles]

https://www.microsoft.com/en-us/windows/tips/live-captions

https://www.microsoft.com/it-it/windows/tips/live-captions

https://it.windowsnoticias.com/Come-attivare-i-sottotitoli-in-tempo-reale-in-Windows-11/

FIREWALL #PALO ALTO advisory about Device Certificate for CDSS #deadline February 11, 2026

To avoid Palo Alto service destruption be aware that beginning February 11, 2026, Device Certificates will be required for connecting with the cloud-delivered security services (CDSS) listed below. 

If you are registered complete advisory could be found here

It will result in a partial or complete loss of functionality for the impacted features, products, or services.

For example, neglecting to deploy the hotfix and complete the onboarding process for the Device Certificate for CDSS will compromise the effectiveness of security rules linked to critical services like URL Filtering and WildFire. As a result, these cloud security services will be unable to deliver accurate detections or verdicts. 

Device Certificate enforcement impacts the following services and products: 

• Cloud Delivered Security Services (CDSS): 

• DNS Security

• URL Filtering and Advanced URL Filtering

• WildFire and Advanced WildFire

• NGFW models: 

• PA-200

• PA-220

• PA-220R

• PA-500

• PA-8XX

• PA-30XX Series

• PA-32XX Series

• PA-50XX Series

• PA-52XX Series

• PA-70XX Series

• VM-Series and CN-Series 

• Panorama appliances both virtual appliances and M-Series

• WildFire appliances WF-500 and WF-500-B

Please follow these steps to review and remediate your impacted devices: 

1. Log in to your CSP account.

2. Navigate to Products → Assets.

3. In the "Asset Dashboard" section, click the Remediation Required button. 

4. Scroll down to the table. Impacted devices are identified by the message “Device Certificate Required for Cloud-Delivered Security Services (CDSS)” in the Remediation Required column. 

5. Take the specific action listed in the Remediation Required column for each device.