MC1276259 — Windows Deployment Services (WDS): Hands-free deployment hardening (Phase 2)

As announced in January 2026, the unattend.xml file used in hands‑free deployment poses a vulnerability when transmitted over an unauthenticated RPC channel. Beginning with the April 2026 security update, the second phase of hardening for CVE-2026-0386 is now in effect. These changes make hands‑free deployment disabled by default to enforce secure behavior. After this update, hands‑free deployment no longer works unless explicitly overridden with registry settings. When will this happen:Starting...

Open in Message Center Email this update View in the live feed