A misconfiguration in the Windows Update caching service caused some Windows devices to lose enrollment status temporarily, leading to the installation of driver updates despite administrative policies preventing auto-updates. This bypassed driver-approval controls, resulting in unexpected driver and BIOS updates on affected devices. Microsoft confirmed the drivers were signed and posed no security threat. The issue was mitigated by updating the service cache and enrollment data, and Microsoft has resolved the problem. The company is investigating the root cause to improve detection and prevention of similar issues.

Devices with policies configured to block automatic driver updates received unexpected Microsoft-approved driver and BIOS updates. This caused functional disruptions such as audio and video device failures. No security threat or exploitation was reported, and the drivers installed were verified as safe by Microsoft. The incident affected device management and policy enforcement but did not introduce a vulnerability or active exploit.

Microsoft has resolved the issue by updating the Windows Update caching service and correcting device enrollment status. No further action is required by administrators as the drivers installed are signed and pose no security threat. Microsoft is reviewing the caching service to prevent recurrence. Administrators should verify that their devices have received the update and monitor official Microsoft communications for any additional guidance.