/
← Voltar ao feed
low

Microsoft extends quick machine recovery (QMR) to Windows Server 2025 with the October 2026 security update

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 08:21 · coletado há 3 dias

Microsoft announced that quick machine recovery (QMR) is now available on Windows Server 2025 after installing the October 2026 security update. The feature lets IT administrators fix critical boot failures through targeted Windows Update remediations, without physical access to affected systems. QMR was introduced in November 2024 under the Windows Resiliency Initiative, in response to the July 2024 outage caused by a faulty CrowdStrike Falcon update. This is product news with no direct threat to defenders.

Detalhes técnicos

  • When enabled, a system that fails to boot after a configuration change or a new driver starts into the Windows Recovery Environment (WinRE) and launches the QMR Tool.
  • The tool sends crash data to Microsoft, which can remotely fix the problem by adjusting settings or removing problematic drivers or updates.
  • On Windows Server 2025, cloud remediation is disabled by default. Admins can enable it through Group Policy under Computer Configuration > Administrative Templates > System > Quick Machine Recovery.
  • Local configuration requires administrator sign-in and the Local Group Policy Editor. In domain environments, admins use Group Policy Management and need permission to edit the GPO and link it to the target OU.

Remediação

  • To turn QMR off, set both Enable Cloud Remediation and Enable Auto Remediation to Disabled in the local policy or domain GPO that manages the target servers. The first blocks cloud-sourced remediation and the second blocks automatic application of local remediation packages.
  • Verify the effective configuration afterwards.

Linha do tempo

  1. bleepingcomputer.com ↗ · pub. 20/10/2026 08:21 · coletado 20/10 10:00 primeiro registro

    Microsoft extends quick machine recovery (QMR) to Windows Server 2025 with the October 2026 security update

    ler a análise desta fonte

    Microsoft announced that quick machine recovery (QMR) is now available on Windows Server 2025 after installing the October 2026 security update. The feature lets IT administrators fix critical boot failures through targeted Windows Update remediations, without physical access to affected systems. QMR was introduced in November 2024 under the Windows Resiliency Initiative, in response to the July 2024 outage caused by a faulty CrowdStrike Falcon update. This is product news with no direct threat to defenders.

    Technical Details

    • When enabled, a system that fails to boot after a configuration change or a new driver starts into the Windows Recovery Environment (WinRE) and launches the QMR Tool.
    • The tool sends crash data to Microsoft, which can remotely fix the problem by adjusting settings or removing problematic drivers or updates.
    • On Windows Server 2025, cloud remediation is disabled by default. Admins can enable it through Group Policy under Computer Configuration > Administrative Templates > System > Quick Machine Recovery.
    • Local configuration requires administrator sign-in and the Local Group Policy Editor. In domain environments, admins use Group Policy Management and need permission to edit the GPO and link it to the target OU.

    Remediation

    • To turn QMR off, set both Enable Cloud Remediation and Enable Auto Remediation to Disabled in the local policy or domain GPO that manages the target servers. The first blocks cloud-sourced remediation and the second blocks automatic application of local remediation packages.
    • Verify the effective configuration afterwards.