14 DAY TRIAL // Microsoft has released a new series of out-of-band updates, though this time, they are specifically aimed at Windows Server (no consumer version of Windows is targeted).
The new updates are supposed to resolve authentication issues on DCs relating to Kerberos delegation scenarios, as explained by Microsoft, with the company telling IT admins to download the patches manually and then use WSUS to install them.
“Microsoft is releasing Out-of-band (OOB) updates today, November 14, 2021, to resolve issues in which authentication might fail on DCs with certain Kerberos delegation scenarios on all supported versions of Windows Server when used as a Domain Controller. To get the standalone update package, search for it in the Microsoft Update Catalog. You can import this update into Windows Server Update Services (WSUS) manually,” the company explains.
The list of updates available for Windows Server is the following:
- Windows Server 2019: KB5008602
- Windows Server 2016: KB5008601
- Windows Server 2012 R2: KB5008603
- Windows Server 2012: KB5008604
- Windows Server 2008 R2 SP1: KB5008605
- Windows Server 2008 SP2: KB5008606
Microsoft explains that the issue, which caused authentication failures on domain controllers with Windows Server, is happening specifically after installing the security updates rolled out on November 9.
The November 9 patches were issued as part of this month’s Patch Tuesday and included security fixes aimed at all Windows devices.
“[The update] addresses a known issue that might cause authentication failures related to Kerberos tickets you acquired from Service for User to Self (S4U2self). This issue occurs after you install the November 9, 2021 security updates on domain controllers (DC) that are running Windows Server,” Microsoft explains in the description of the new OOB updates released this week.
You can find the download link for the new updates in the links above, and make sure you deploy them ASAP especially if you’re hitting authentication issues after the November 9 updates.