November 2022 Out of Band update released! Take action!

image

Greetings from the Windows Directory Services team!

The team wanted to bring to your attention the November 17th, 2022 release of an Out of Band (OOB), non-security update that addresses the issues experienced in some environments after installing November 8, 2022 (or later) updates on domain controllers.

After installing Windows Updates released on November 8, 2022 on Windows domain controllers, you might have issues with Kerberos .

This specific failure is identified by the logging of Microsoft-Windows-Kerberos-Key-Distribution-Center Event ID 14 in the System event log of DC role computers with this unique signature in the event message text:

While processing an AS request for target service , the account did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes : . The accounts available etypes : . Changing or resetting the password of will generate a proper key.

Where

  • (a.) “the missing key has an ID 1” and (b.) “4” is not listed in the “requested etypes” or “account available etypes” fields.

Some scenarios that might be affected:

For important details about obtain and install the November OOB update, please see the following link on Windows Release Health Message Center at:

 

This article was originally published by Microsoft's Directory Services Team. You can find the original article here.