Microsoft has acknowledged that its October 2026 Windows 11 cumulative updates did not resolve the Always On VPN connection problems listed as fixed in the release notes, according to BleepingComputer. The company said the underlying bug had been incorrectly marked as resolved.
What is broken
The defect causes Always On VPN — the tunnel type Microsoft positions for always-connected enterprise remote access — to fail to establish or maintain connections after the monthly updates are installed. The symptom has been reported in connection with Windows 11 updates, but the precise builds, knowledge-base identifiers, and workaround status are not detailed in the source report.
Organisations that deployed the October updates based on the vendor's status metadata are in scope for the breakage.
The labelling error
Microsoft's October release notes indicated the VPN issue was among the items addressed by the updates. The company has since said that marking was a mistake — the fix had not shipped in that form, and the entry misrepresented the true state of the bug.
The source report does not specify whether the corrected record constitutes a formal amendment to the advisory or a reversal of the original entry, nor does it give a confirmed date for a genuine repair. Administrators checking the live advisory will therefore need to confirm its current status directly with Microsoft.
What administrators are advised to do
Guidance for enterprise administrators centres on treating the "Fixed" tag as unverified: re-check the live Microsoft advisory for current status rather than relying on cached changelogs or aggregator pages, keep existing workarounds in force until an independently confirmed fix is available, and hold or stage remaining rollouts in rings with connection success as a pass criterion. Patch calendars should also allow room for a possible out-of-band update.
Source: BleepingComputer.
據 BleepingComputer 報道，微軟已承認其 2026 年 10 月 Windows 11 累積更新並未解決在發行說明中列為已修復的 Always On VPN 連線問題。微軟表示，相關的底層缺陷被錯誤地標記為已解決。
出現甚麼問題
該缺陷導致 Always On VPN —— 微軟定位為企業持續連線遠端存取用途的隧道類型 —— 在安裝每月更新後無法建立或維持連線。有關症狀在與 Windows 11 更新相關的報告中曾有出現，但來源報導並未詳列確切的組建版本、knowledge base 編號及變通方法的狀態。
所有根據供應商狀態中繼資料而部署十月更新的機構，均屬此缺陷的影響範圍之內。
標籤錯誤
微軟的十月發行說明指出，VPN 問題屬更新所處理的項目之一。微軟其後表示該標記屬錯誤 —— 修正程式並未以該形式推出，而該條目誤述了缺陷的真實狀態。
來源報導並未指明經更正的紀錄是否構成對安全通告的正式修訂，抑或只是推翻原有條目，亦未提供真正修復的確認日期。因此，管理員如查閱即時安全通告，須直接向微軟確認其最新狀態。
建議管理員採取的措施
針對企業管理員的指引核心在於將「Fixed（已修復）」標籤視為未經核實：應重新查閱微軟的安全通告以獲取最新狀態，而非依賴已快取的變更日誌或聚合網頁；在獲得獨立確認的修正程式之前，繼續維持現有變通方法；並以連線成功率作為通過準則，暫緩或分階段以環形（ring）方式推行其餘部署。修補程式日程表亦應預留空間，以應付可能出現的帶外（out-of-band）更新。
來源：BleepingComputer。