Agent Packages for Microsoft KB Update (March 10, 2026) Released

Want the full details? Click the link below!

Bug Fixes and Miscellaneous Updates

On March 10, 2026 Microsoft distributed KBs that conflict with existing Netwrix Threat Prevention agents. If these KBs are applied to your systems, they will conflict with current agents, as described in this announcement.

Netwrix has issued updated agent packages that have support for new Microsoft KBs.

Updated agent builds:

  • 8.0.0.42
  • 7.5.0.287
  • 7.4.0.293

Additional Fixes Included in This Release

This update also includes the following fixes and improvements:

403245: The alert for automatic host list refresh is now suppressed. “Policy updated” alerts are only raised when an administrator explicitly modifies and saves a policy.

414091: The collection revision number is now synchronized between the collection and the expanded collection. Identical configurations deployed to test and production now produce consistent results.

417987: All Kerberos principal name fields are now decoded with UTF-8 (CP_UTF8). Accented characters in account names are preserved correctly across all captured event data.

417370: Agents are fully functional with Exchange SE SU5. Agent parsing has been updated to accommodate the February 2026 Exchange Security Update, restoring full Exchange monitoring coverage.

How to Upgrade Netwrix Threat Prevention Agents

There are two options to obtain the updated agents:

  1. Using the existing Netwrix Threat Prevention Console and the “Update Agent Installer” button on the Agents panel. Then verify the version obtained matches the relevant version listed at the top of this Product Notification email

–– or ––

  1. Manually obtain the latest Agent build(s) from the portal and place in the current “..\SIEnterpriseManager\Setup\” folder

Once one of the above two options is completed, use the Netwrix Threat Prevention Console to upgrade all agents.

Need help with this update?

There are many different ways to get help with our products!

Situation Action
If you feel the product is broken and not working as intended… Contact Support
If you have a question you’d like to ask other experts… Create a discussion in the community: Threat Prevention > Discussions & Questions
If you have a feature request… Let our product team know directly: Threat Prevention > Ideas
If you have something cool to show… Show everyone what you built: Threat Prevention > Show & Tell

What are your thoughts?

We are always happy to hear from our users on what you like, and what you hope to see in the future. Please, share your thoughts below!