Nov 9 server update - authentication updates



With the Nov 9th update, (CVE-2021-42287), the PacRequestorEnforcement registry key was supposed to have been added, but when I check the Domain Controllers, I do not see this key.

Also I get a warning on all Domain Controllers regarding "Ticket without a PAC".  Concern is that once this update is enforced early next year, it appears that I will have authentication problems.

Anyone know of further information on this, and how to resolve?

I have not seen much information on this other than MS article:

KB5008380—Authentication updates (CVE-2021-42287) (


0 Replies