Blog Post

Ask the Directory Services Team
14 MIN READ

What happened to Kerberos Authentication after installing the November 2022/OOB updates?

DavidFisher's avatar
DavidFisher
Icon for Microsoft rankMicrosoft
Dec 13, 2022
Hello, Chris here from Directory Services support team with part 3 of the series.   With the November 2022 security update, some things were changed as to how the Kerberos Key Distribution Center...
Updated Jan 18, 2023
Version 6.0
KenFarrell's avatar
KenFarrell
Copper Contributor
Feb 15, 2023

Hi,

 

In KB5021131 it says: 

 

"My devices running an unsupported version of Windows are no longer able to access resources in my environment. Also, these devices are unable to be accessed from updated Windows devices in my environment. What can I do?

Unsupported versions of Windows includes Windows XP, Windows Server 2003, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1 cannot be accessed by updated Windows devices unless you have an https://learn.microsoft.com/lifecycle/faq/extended-security-updates

Next Steps Install updates, if they are available for your version of Windows and you have the applicable ESU license. If updates are not available, you will need to upgrade to a supported version of Windows or move any application or service to a compliant device."

 

I am trying to understand the impact as we do not have or have ever had ESU. I know 2003 Server will be broken after 11th of April as the krbtgtFullPacSignature=0 key will be gone (or moved to 1), we are currently using DES on User accounts to get us past the RC4 issue.

 

Would it be possible to tell me the impact and timeline for 2008 and 2008 R2 that were last patched 14/01/2020?

 

Many Thanks.