Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add new DC test for PacRequestorEnforcement (KB5008380—Authentication updates) #150

Open
PrzemyslawKlys opened this issue Nov 29, 2021 · 0 comments
Labels
potential test Potential/Proposed Tests

Comments

@PrzemyslawKlys
Copy link
Member

As per: https://support.microsoft.com/en-gb/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041

To protect your environment and avoid outages, please complete the following steps:

  • Update all devices that host the Active Directory domain controller role by installing the November 9, 2021 update.
  • After the November 9, 2021 update has been installed on all Active Directory domain controllers for at least 7 days, we strongly suggest that you enable Enforcement mode on all Active Directory domain controllers.
  • Starting with the July 12, 2022 Enforcement Phase update, Enforcement mode will be enabled on all Windows domain controllers and will be required.

Must exists: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Kdc
Value: PacRequestorEnforcement
No value minimum, 2 preferred.

image

@PrzemyslawKlys PrzemyslawKlys added enhancement New feature or request potential test Potential/Proposed Tests and removed enhancement New feature or request labels Oct 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
potential test Potential/Proposed Tests
Projects
None yet
Development

No branches or pull requests

1 participant