How the Issue Unfolded
Microsoft has resolved a service degradation affecting Microsoft 365 that temporarily bypassed Windows driver auto-update controls on managed devices. The problem impacted systems configured with policies to block automatic driver installations, especially in enterprise environments with strict update governance.
According to Microsoft, a failure in a caching service used by Windows Update caused the system to lose device enrollment information. This data is essential for identifying managed devices under policies like Microsoft Intune or MDM solutions. When enrollment data was lost, affected systems were incorrectly classified as non-enrolled, allowing driver installations to proceed without administrative approval, despite existing restrictions.
Impact and Scope
The incident, reported on June 3, 2026 and resolved the following day, did not involve malicious drivers. Microsoft confirmed all drivers installed during this window were officially signed and approved through standard validation processes, posing no direct security threat.
However, the event exposed a gap in policy enforcement mechanisms. In sectors like healthcare and finance, where strict compliance and change control are critical, even approved changes outside defined procedures can trigger incident reviews. Microsoft has fully mitigated the issue, with systems now respecting configured policies. The company continues its internal investigation into the caching service failure to prevent recurrence.
Source: Cyber Security News
