Nov 16 2021 02:53 PM - edited Nov 16 2021 02:54 PM
Hi,
With the Nov 9th update, (CVE-2021-42287), the PacRequestorEnforcement registry key was supposed to have been added, but when I check the Domain Controllers, I do not see this key.
Also I get a warning on all Domain Controllers regarding "Ticket without a PAC". Concern is that once this update is enforced early next year, it appears that I will have authentication problems.
Anyone know of further information on this, and how to resolve?
I have not seen much information on this other than MS article:
KB5008380—Authentication updates (CVE-2021-42287) (microsoft.com)
Thanks.