Patch Lady – Domain admins and issues with KB4489878

Topic

New Reply

Sandeep pointed out that after he installed KB4489878 on a Server 2008 R2 he can no longer use the netdom query commands.  I can attest that commands
[See the full post at: Patch Lady – Domain admins and issues with KB4489878]

Susan Bradley Patch Lady/Prudent patcher

4 users thanked author for this post.

PhotM, lawrenceB, woody, GreatAndPowerfulTech

Reply | Quote

Replies

This also affects the Security Only March 2019 patch, KB4489885

1 user thanked author for this post.

woody

Reply | Quote

Yes, I confirm the same on one of our 2008R2 servers with the security only patch from this month.

Reply | Quote

Same here, 2008R2 DC, at 2008R2 functional levels. March security only.

‘netdom /?’ doesn’t even work, gives same error.

Runs successfully against my domain when run from a non-DC Server 2016 machine.

Reply | Quote

Confirmed here with 2008R2 member servers in a 2012 forest / domain.  Confirmed that is affected with both the security only KB4489885 as well as the rollup KB4489878.

 

Jim

Reply | Quote

How do know when Microsoft acknowledges this problem?

We confirmed the problem exists  in our virtual environment for the the Security only patch KB4489885 on both Member and Domain Controller servers.

FYI – I’m annonymous because I can’t login due to a proxy error going through my corporate network.

r/  pmacS33

 

Reply | Quote

When they finally list it as a known issue in the KB.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

PhotM

Reply | Quote

I noticed the same issue for Windows 2008 R2 DC’s with the lastest update (2/22/2019) not working. The servers which still have netdom.exe (7/14/2009) are working.  I hope they fix this soon.

Reply | Quote

Now known:

After installing this update, NETDOM.EXE fails to run, and the on-screen error, “The command failed to complete successfully.” appears.
Run NETDOM.EXE on versions of the operating system other than Windows Server 2008 R2 SP1 or Windows Server 2008 SP2.
Or
Use an alternate command-line utility and graphical tool, such as PowerShell, NLTEST.EXE, Active Directory Users and Computers (DSA.MSC), and Active Directory Domains and Trusts Snap-in (domain.msc).
Microsoft is working on a resolution and will provide an update in an upcoming release.

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

alQamar, PhotM

Reply | Quote

One question: are there features to netdom.dom where there are no equivalents in powershell or will the PS commandlets like add-computer fail too after the patch?

 

I would encourage anyone to use Active Directory Administrative Center over ADUC (Active Directory users and computers).

 

It will take a time but can do much more and vastly quicker. Esp. Searching, adding, password resets etc

Reply | Quote