Patch side effects November updates – Domains only @ AskWoody

Patch side effects November updates – Domains only

Posted on November 17, 2020 at 23:05 CST by Susan Bradley • Comment in the Forums

Hat’s off to EP for spotting these:

https://support.microsoft.com/en-us/help/4594439/kerberos-authentication-and-ticket-renewal-issues

https://support.microsoft.com/en-us/help/4594438/kerberos-authentication-and-ticket-renewal-issues

Addresses issues with Kerberos authentication related to the PerformTicketSignature registry subkey value in CVE-2020-17049, which was a part of the November 10, 2020 Windows update. The following issues might occur on writable and read-only domain controllers (DC) :
- Kerberos service tickets and ticket-granting tickets (TGT) might not renew for non-Windows Kerberos clients when PerformTicketSignature is set to 1 (the default).
- Service for User (S4U) scenarios, such as scheduled tasks, clustering, and services for line-of-business applications, might fail for all clients when PerformTicketSignature is set to 0.
- S4UProxy delegation fails during ticket referral in cross-domain scenarios if DCs in intermediate domains are inconsistently updated and PerformTicketSignature is set to 1.
The issue ONLY effects those with domains (businesses). It will not impact peer to peer or standalone computers. I expect to see more of these fixes for other platforms.

Spotted another one… https://support.microsoft.com/en-us/help/4594442 November 17, 2020—KB4594442 (OS Build 17763.1579) for 1809 Out-of-band (uh no that’s not an out of band patch for security the way I define out of band…)

And more (thanks EP):KB4594441 for Win10 v1607:
https://support.microsoft.com/help/4594441

KB4594443 for Win10 v1903 & 1909:
https://support.microsoft.com/help/4594443/

KB4594440 for Win10 v2004 & 20H2:
https://support.microsoft.com/help/4594440/

Windows Security Patch Lady Posts

Plus Membership

Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.

AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.

Welcome to our unique respite from the madness.

It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

S	M	T	W	T	F	S
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

Patch side effects November updates – Domains only

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Key Links

Remembering Woody

Patch side effects November updates – Domains only

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Login and Registration

Key Links

Remembering Woody