Microsoft has admitted that several Windows devices have experienced problems related to Kerberos authentication after installing the November update. Kerberos authentication is a computer network security protocol used to authenticate service requests from two or more trusted hosts on an untrusted network, such as the Internet.
Microsoft writes in the changelog that
“After installing the November 8, 2022, and later updates on Windows servers with the domain controller role, users will experience authentication issues when using Kerberos. This issue may affect all authentication operations in the current environment.
When this issue is encountered, the domain controller’s event log records Microsoft-Windows-Kerberos-Key-Distribution-Center Event ID 14″ with the text description “the missing key has an ID of 1.”
Microsoft indicates that the above problem occurs in many authentication scenarios, including the possible failure of domain user logins (which may affect Active Directory Federation service authentication), failure of authentication of Group Management Service accounts to services such as Internet Information Services, failure of remote desktop connections using domain users, failure of access to workstation shared folders and server file shares, and failure of printing related to domain user authentication.
The official list from Microsoft shows that many Windows versions are affected, and the affected individual system versions include.
- Windows 11, version 22H2
- Windows 10, version 22H2
- Windows 11, version 21H2
- Windows 10, version 21H2
- Windows 10, version 21H1
- Windows 10, version 20H2
- Windows 10 Enterprise LTSC 2019
- Windows 10 Enterprise LTSC 2016
- Windows 10 Enterprise 2015 LTSB
- Windows 8.1
- Windows 7 SP1
Affected server versions include
- Windows Server 2022
- Windows Server 2019
- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2012
- Windows Server 2008 R2 SP1
- Windows Server 2008 SP2
