Forum Discussion

Andrew Emmett's avatar
Andrew Emmett
Brass Contributor
Aug 11, 2022
Solved

KB5016623 Issues with AAD App Proxy

Hello We have encountered some issues with KB5016623. The is causing the server, Win 2019 server running IIS, to crash after 5 to 10 minutes and to be unable to use AAD App Proxy connections that ar...
azure ad application proxy
  • hawkboy's avatar
    hawkboy
    Aug 12, 2022

    Andrew Emmett 

    Hi Andrew,

     

    We had the same issue today.   Uninstalling KB016623 resolved it as well.  I've logged it with Microsoft.  Will report back when they respond. 

     

    Glen. 

Andrew_Allston's avatar
Andrew_Allston
Iron Contributor
Aug 24, 2022
GeirF. I was mistaken, I did have RunAaPPL enabled. I also disabled the ASR rule so I don't know if that has any impact. When its safe to try I will reenable the ASR LSASS rule and update the thread for anyone interested. Also, if anyone has any idea how to disable this in Azure it would be greatly appreciated. As per the doc UEFI boxes can tattoo the setting in its UEFI. MS offers a efi file to help remove the setting but requires access to UEFI to accept the setting change. To my knowledge this is not possible in Azure so I just moved the apps to on prem proxies till I rebuild or figure that part out. Thanks again!
GeirF's avatar
GeirF
Copper Contributor
Aug 25, 2022
To get access to UEFI on an Azure machine I think you will be able if you use a "Repair VM with nested hyper-v".

Ref the "Repair VM with Nested Hyper-V example":
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/repair-windows-vm-using-azure-virtual-machine-repair-commands

Resources