Microsoft says that users may experience authentication issues on Domain Controllers (DC) running Windows Server after installing security updates released on November Patch Tuesday.
See also: Microsoft releases the very affordable Surface Laptop SE
These authentication issues affect systems running Windows Server 2019 and earlier versions with certain Kerberos delegation scenarios.
The list of affected platforms includes Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.
See also: Microsoft Patch Tuesday November 2021: Fixes 55 vulnerabilities
Authentication issues prevent end-users in on-premises Active Directory environments or hybrid Azure Active Directory environments from connecting to services or applications using Single Sign-On (SSO).
The full list of initial updates for this known Windows Server issue includes:
- KB5007206 – Windows Server 2019
- KB5007192 – Windows Server 2016
- KB5007247 – Windows Server 2012 R2
- KB5007260 – Windows Server 2012
- KB5007236 – Windows Server 2008 R2 SP1
- KB5007263 – Windows Server 2008 SP2
Microsoft said it is working on a resolution to address this Windows Server issue and expects to provide a solution soon.
See also: PowerShell 7.2: Available and integrated into Microsoft Update
Affected environments
According to Microsoft, affected environments may be using one of the following services or applications:
- Azure Active Directory (AAD) Application Proxy Integrated Windows Authentication (IWA) using Kerberos Constrained Delegation (KCD)
- Active Directory Federated Services (ADFS)
- Microsoft SQL Server
- Internet Information Services (IIS) using Integrated Windows Authentication (IWA)
- Intermediate devices, including Load Balancers that perform authentication delegation
Users may see one or more errors on affected systems.
Information source: bleepingcomputer.com
