Website Technology Profiler

{
  "PageContent": "just another windows noob ?IntroductionI started my day as always and launched the Windows app, I clicked my Cloud PC, entered my credentials and after a short delay I got an error shown below.The error shown above was “something went wrong” with a very not useful error code, -895352830. I tried this on multiple tenants with the same error code being generated.I asked Copilot what this meant and got the following detailsThis code corresponds to an AADSTS65002 token/permission issue during authentication.Microsoft documentation shows the same error pattern:Error: -895352830 (0xCAA20002) — occurs when a Microsoft first‑party app is missing required preauthorized API consent, causing token broker authentication to fail.[learn.microsoft.com]This means the Windows App cannot obtain a valid authentication token due to a Microsoft Entra (Azure AD) app permission issue, often triggered by:Broken SSO token brokerA corrupted local identity cacheA bad Windows Update interfering with Windows App authenticationThe last point above (a bad Windows Update) is indeed the cause.  More details below:January 2026 security patches (notably KB5074109) are currently breaking logins in the Windows App and Remote Desktop authentication:Microsoft confirms widespread credential failures after the January 2026 update, impacting Windows App sign-ins for Azure Virtual Desktop & Windows 365.[theregister.com]Users report the app immediately fails with authentication errors after pressing Connect.[theregister.com]Removing KB5074109 restores normal Windows App login functionality (confirmed by multiple users on Jan 15–16, 2026).[learn.microsoft.com]According to theregister.comThe upshot is that connecting to Windows 365 or Azure Virtual Desktop from the Windows App could be borked due to credential problems. Microsoft posted: “Investigation and debugging are ongoing, with coordination between Azure Virtual Desktop and Windows Update teams.”The problem is widespread and appears to affect every supported version of Windows, from Windows 10 Enterprise LTSC 2016, right up to Windows 11 25H2. Windows Servers 2019 to 2025 are also affected.Great, so now what ?Suggested workarounds are that you can connect to your Cloud PC using the soon to be unsupported Remote Desktop Client Agent available from here.I tried it, but it too failed to connect.Next, I tried via a web-browser, but that also didn’t work. The Cloud PC I’m trying to connect to is protected using the new CKIO feature and the web browser version does not support that.Verifying the problemA quick look in Intune, revealed that indeed the problematic CU was indeed applied to my Cloud PC’s and the PC I was making the connection from (Windows 11 25H2 ARMx64).Here’s a sample. As you can see belowBelow you can see the CU details…10.0.26200.762310.0.26100.7623https://support.microsoft.com/en-us/topic/january-13-2026-kb5074109-os-builds-26200-7623-and-26100-7623-3ec427dd-6fc4-4c32-a471-83504dd081cband within that you can see the known issues including the suggested workaround, which is to install KB5077744.As it’s so new this update is not even available in Windows Autopatch so you cannot currently use expedite updates policy to deploy this.KB5077744 is an Out‑of‑Band (OOB) update for Windows 11 25H2/24H2.It is not delivered through Windows Update automatically and must be manually downloaded and installed from the Microsoft Update Catalog.You must use the Microsoft Update Catalog to obtain the standalone package (MSU). [support.mi…rosoft.com]The fixAs KB5077744 is only currently available (at the time of writing, 2026/01/19) via Microsoft’s Catalog, you must deploy it (the msu) from Intune by wrapping it as a Win32 app.Because Intune does not directly deploy .MSU updates as updates, the supported method is to wrap the MSU as a Win32 app and deploy it to your affected clients.Go to Microsoft Update Catalog and search for kb5077744.Download the update that is applicable to your Windows OS version. Be aware that the file size is big, my download was approx 3.6GB.Place the downloaded msu file and this Powershell script in a folder called KB5077744.here’s the contents of the Powershell script, modify it so that it has the exact file name of the msu file you downloaded otherwise it won’t install. Save the file as Install_KB5077744.ps1.wusa.exe windows11.0-kb5077744-x64_fb63f62e4846b81b064c3515d7aff46c9d6d50c8.msu /quiet /forcerestart\r\nexit $LASTEXITCODENote: If you want to control reboot notifications and other options, package this instead using Powershell Application Deployment Toolkit and customize those options as necessary.Using Intunewinapputil.exe wrap the package as a Win32 app.Then add the Win32 appuse this command linepowershell.exe -ExecutionPolicy Bypass -File Install_KB5077744.ps1and the following detection script.$sysinfo = systeminfo.exe\r\n$result = $sysinfo -match \"KB5077744\"\r\n\r\n\r\nif ($result) {\r\nWrite-Output \"Found KB5077744\"\r\nexit 0\r\n\r\n} else {\r\nWrite-Output \"KB5077744 not found\"\r\nexit 1\r\n\r\n}Finally, after deploying the update to your affected clients, and waiting for it to install and restart, you’ll be able to connect again.Phew.What a relief.The new Windows build number is highlighted below.10.0.26200.7627 from a Windows 11 25H2 Cloud PC.and here you can see it successfully installed on the clientand of course, via Intune, however Intune still has not yet updated the build number of the CPC yet in the Win32 app install status.UpdateMake sure you patch the host PC making the connection to the Cloud PC and the Cloud PC if it has the .7623 patch level (January update). Also make sure to restart the patched computer at least twice.Related reading",
  "Url": "https://www.niallbrady.com",
  "IpAddress": "95.211.218.10",
  "ReverseDns": null,
  "Asn": null,
  "Http2": false,
  "Http3": false,
  "ResponseTimeMs": 1836,
  "StatusCode": 200,
  "ServerHeaders": [
    "Apache"
  ],
  "Ssl": {
    "Issuer": "CN=R13, O=Let's Encrypt, C=US",
    "Subject": "CN=amstrad-noob.com",
    "NotBefore": "2025-12-19T22:07:22-08:00",
    "NotAfter": "2026-03-19T23:07:21-07:00",
    "SubjectAltNames": [
      "DNS Name=amstrad-noob.com",
      "DNS Name=anneliegullberg.com",
      "DNS Name=linux-noob.com",
      "DNS Name=mb180db.com",
      "DNS Name=niallbrady.com",
      "DNS Name=someonealreadyhasmyurl.com",
      "DNS Name=windows-noob.com",
      "DNS Name=www.amstrad-noob.com",
      "DNS Name=www.anneliegullberg.com",
      "DNS Name=www.linux-noob.com",
      "DNS Name=www.mb180db.com",
      "DNS Name=www.niallbrady.com",
      "DNS Name=www.someonealreadyhasmyurl.com",
      "DNS Name=www.windows-noob.com"
    ],
    "Hsts": false,
    "Ciphers": [],
    "Protocol": "Tls13",
    "DaysUntilExpiry": 48
  },
  "Cdns": [
    "Cloudflare",
    "cdnjs"
  ],
  "HostingHints": [],
  "Cms": [
    "WordPress",
    "WordPress (robots.txt)"
  ],
  "Frameworks": [
    "jQuery"
  ],
  "JsLibraries": [],
  "Analytics": [
    "Google Analytics GA4"
  ],
  "AdsAndMarketing": [
    "Google AdSense"
  ],
  "PaymentGateways": [],
  "EcommerceHints": [
    "PrestaShop"
  ],
  "SocialSignals": [
    "Reddit"
  ],
  "MediaProviders": [],
  "SeoTags": [
    "content-type: text/html; charset=UTF-8"
  ],
  "HtmlLanguage": "en-US",
  "HasRobots": true,
  "HasSitemap": true,
  "SecurityHeaders": [],
  "CookiesObserved": [],
  "XhrApiHints": [],
  "SitemapCounts": {
    "total_urls": 5
  },
  "ChatWidgets": [],
  "ABTesting": [],
  "PrivacyConsent": [],
  "EmailMarketing": [
    "SendGrid"
  ],
  "WebFonts": [],
  "DynamicJs": [
    "jQuery (script Resource)",
    "Cloudflare (script CDN)",
    "CDNJS (script CDN)",
    "Web Server: Apache",
    "React (Script Analysis)",
    "ES6+ JavaScript Features",
    "Bootstrap (CSS Classes)",
    "jQuery (CDN Detection)",
    "jQuery (Script Analysis)"
  ],
  "ResourceHosts": [
    "www.niallbrady.com",
    "pagead2.googlesyndication.com",
    "cdnjs.cloudflare.com",
    "gmpg.org"
  ],
  "CssFrameworks": [],
  "BuildTools": [
    "Rollup"
  ],
  "ServerTech": [
    "Generator: WordPress 6.9",
    "PHP (inferred from WordPress)"
  ],
  "DatabaseHints": [],
  "PageTitle": "just another windows noob ? | This is a blog by  Niall C. Brady. Enterprise Mobility MVP.",
  "MetaDescription": null,
  "ImageCount": 13,
  "ScriptCount": 17,
  "LinkCount": 9,
  "Errors": [
    "Reverse DNS failed: No such host is known."
  ],
  "UiFrameworks": [
    "Vuetify (Class Names)",
    "Angular Material (Class Names)",
    "Bootstrap (Class Names)"
  ]
}