Following the set up of the October 2024 safety replace, some clients report that the OpenSSH (Open Safe Shell) service fails to start out, stopping SSH connections. The service fails with no detailed logging, and handbook intervention is required to run the sshd.exe course of.

This challenge is affecting each enterprise, IOT, and training clients, with a restricted variety of gadgets impacted. Microsoft is investigating whether or not shopper clients utilizing House or Professional editions of Home windows are affected.

Clients can quickly resolve the difficulty by updating permissions (ACLs) on the affected directories. Observe these steps:

1. Open PowerShell as an Administrator.

2. Replace the permissions for C:ProgramDatassh and C:ProgramDatasshlogs to permit full management for SYSTEM and the Directors group, whereas permitting learn entry for Authenticated Customers. You may prohibit learn entry to particular customers or teams by modifying the permissions string if wanted.

   Use the next instructions to replace the permissions:

   $directoryPath = “C:ProgramDatassh” $acl = Get-Acl -Path $directoryPath $sddlString = “O:BAD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)” $securityDescriptor = New-Object System.Safety.AccessControl.RawSecurityDescriptor $sddlString $acl.SetSecurityDescriptorSddlForm($securityDescriptor.GetSddlForm(“All”)) Set-Acl -Path $directoryPath -AclObject $acl

3. Repeat the above steps for C:ProgramDatasshlogs.

Microsoft is actively investigating the difficulty and can present a decision in an upcoming Home windows replace. Additional communications might be offered when a decision or extra workarounds can be found.

Units which have sure Citrix elements put in is likely to be unable to finish set up of the January 2025 Home windows safety replace. This challenge was noticed on gadgets with Citrix Session Recording Agent (SRA) model 2411. The 2411 model of this software was launched in December 2024.

Affected gadgets may initially obtain and apply the January 2025 Home windows safety replace appropriately, akin to through the Home windows Replace web page in Settings. Nonetheless, when restarting the machine to finish the replace set up, an error message with textual content just like “One thing didn’t go as deliberate. No want to fret – undoing modifications” seems. The machine will then revert to the Home windows updates beforehand current on the machine.

This challenge possible impacts a restricted variety of organizations as model 2411 of the SRA software is a brand new model. House customers will not be anticipated to be affected by this challenge.

Citrix has documented this challenge, together with a workaround, which will be carried out previous to putting in the January 2025 Home windows safety replace. For particulars, see Citrix’s documentation.

Microsoft is working with Citrix to deal with this challenge and can replace this documentation as soon as a decision is offered.

The Home windows Occasion Viewer may show an error associated to SgrmBroker.exe, on gadgets which have put in Home windows updates launched January 14, 2025 or later. This error will be discovered below Home windows Logs > System as Occasion 7023, with textual content just like ‘The System Guard Runtime Monitor Dealer service terminated with the next error: %%3489660935’.

This error is just observable if the Home windows Occasion Viewer is monitored carefully. It’s in any other case silent and doesn’t seem as a dialog field or notification.

SgrmBroker.exe refers back to the System Guard Runtime Monitor Dealer Service. This service was initially created for Microsoft Defender, nevertheless it has not been part of its operation for a really very long time. Though Home windows updates launched January 14, 2025 battle with the initialization of this service, no impression to efficiency or performance must be noticed. There isn’t any change to the safety stage of a tool ensuing from this challenge. This service has already been disabled in different supported variations of Home windows, and SgrmBroker.exe presently serves no goal.

Be aware: There isn’t any must manually begin this service or configure it in any approach (doing so may set off errors unnecessarily). Future Home windows updates will modify the elements utilized by this service and SgrmBroker.exe. Because of this, please don’t try and manually uninstall or take away this service or its elements.

No particular motion is required, nonetheless, the service will be safely disabled to be able to stop the error from showing in Occasion Viewer. To take action, you possibly can observe these steps:

1. Open a Command Immediate window. This may be achieved by opening the Begin menu and typing ‘cmd’. The outcomes will embrace “Command Immediate” as a System software. Choose the arrow to the precise of “Command Immediate” and choose “Run as administrator”.
2. As soon as the window is open, fastidiously enter the next textual content: sc.exe config sgrmagent begin=disabled
3. A message could seem afterwards. Subsequent, enter the next textual content: reg add HKLMSystemCurrentControlSetServicesSgrmBroker /v Begin /d 4 /t REG_DWORD
4. Shut the Command Immediate window.

This can stop the associated error from showing within the Occasion Viewer on subsequent machine begin up. Be aware that a few of these steps is likely to be restricted by group coverage set by your group.

We’re engaged on a decision and can present an replace in an upcoming launch.