On Friday afternoon, Microsoft wrote it’s fully deployed a fix for an issue in Windows that caused application shortcuts in the Start menu or taskbar to disappear. Multiple IT admins have detailed the problem on Twitter and Reddit this morning, and it appears to be related to a recent update to the Microsoft Defender threat detections.
The problem is affecting businesses and organizations using Microsoft 365 and Defender for protection against malware, viruses, and other threats. In a note to customers, Microsoft said it received reports that a certain attack surface reduction (ASR) rule is causing the problems. Earlier in the day, IT admins tried to work around the issue by setting the “Block Win32 API calls from Office macro” rule to audit only.
The revert is in progress and may take several hours to complete. We recommend placing the offending ASR rule into Audit Mode to prevent further impact until the deployment has completed. For more details and instructions, please follow the SI MO497128 in your admin center.
— Microsoft 365 Status (@MSFT365Status) January 13, 2023
Microsoft says it “reverted the rule to prevent further impact whilst we investigate further.”
However, it took hours for the fix to deploy before Microsoft announced it was fully rolled out at 4:46PM ET. Now that the fix is out, machines should be back to normal.
The fix has completed its deployment, which will prevent additional impact from occurring. We’re also continuing our investigation into the issue, and further detail can be found under MO497128 in the Microsoft 365 admin center.
— Microsoft 365 Status (@MSFT365Status) January 13, 2023
“This has caused a bad day,” says one IT admin on Twitter, replying to Microsoft’s acknowledgment of the issue. “Happy Friday 13th!” joked another. IT admins have been scrambling to fix the problem and bring the shortcuts back, with many having to tell their Windows users to manually launch their apps from where they’re installed or by using Start > Run and the executable name.
Three IT admins currently experiencing the problem at their organizations confirmed to The Verge that all shortcuts disappeared — and not just ones to Microsoft applications.
Hi Tom! We see all shortcuts gone, office apps Edge, custom web apps. Defender seems to delete .lnk files since update of ASR rule.
— Steven Bink (@sbink) January 13, 2023
Regular Windows users and consumers aren’t affected by this strange bug, and it will only affect managed machines inside organizations. That’s still hundreds or thousands of machines inside big businesses that rely on Microsoft’s threat detection security.
We’ve reached out to Microsoft to comment on the situation, and we’ll update you accordingly.
Update, January 13th, 8:20AM ET: Article updated with more information from Microsoft.
Update, January 13th, 5:43PM ET: Article updated with more information from Microsoft.
Source: The Verge Microsoft fixed an issue that made Windows Start menu and taskbar shortcuts disappear