Warning: Windows update breaks authentication for some server admins

Microsoft is warning a security update may cause authentication failures for Windows domain controllers. "After installing updates released May 10, 2022 on your domain controllers, you might see authentication failures on the server or client for services such as Network Policy Server (NPS), Routing and Remote access Service ( …

[Anonymous Coward]

/r/sysadmin

Either our industries standard canary in a coalmine or Microsoft's volunteer army of uncompensated QA and tech support depending on who you ask.

Remember, listen to others wails of pain before adding your own, and silence doth not equal success, for Redmond may have broken the TCP stack again, and the screams may have to wait till someone can hack together a working internet connection.

[John Brown (no body)]

Re: /r/sysadmin

Shirley MS should be rolling out these patches across their entire company a day or two before everyone else gets them. If they are good, fine, if not, well, eat your own dogshit MS and stop feeding it to us for testing.

[Trixr]

Cue the black helicopters

They've almost succeeded with getting rid of on-prem Exchange with their diligent work on b0rked CUs in the last several years. Since November last year, they seem to be getting into high gear with stealth-deprecating Active Directory too.

I think every major AD-related update since then has had issues. And that's not counting Server 2022, every month's update for those seems to have something that screws up some AD-related service (me, to boss re deploying 2022 DCs: "NOT YET").

[Anonymous Coward]

Re: Cue the black helicopters

Of course you need to move on Azure Active Directory, everything on-prem now is frowned upon....

[Zedexx]

It's not related to NPS specifically... haha Yoy, again

[anothercynic]

Unless you are using EAP-TLS to authenticate your users...

[Anonymous Coward]

Another month, another DC break. Nice going from MS.

[chivo243]

Greater risk?

Patching on Patch Bluesday, and waiting to approve the updates on WSUS for a week to 10 days as not to get burned by a simple update? Or get pwnd by a gaping hole they're finally trying to fix?

Paris doesn't know either...

[Doctor Syntax]

"the Windows Cryptography, Identity, and Authentication team"

The CIA?

[Dan 55]

Featuring _NSAKEY.