Windows 10 Authentication Errors Fixed Via Update

Microsoft has started distributing an unscheduled update for Windows to fix authentication errors related to Kerberos tickets. The problem is addressed in Windows 10 version 1607 and 1809 and is thus made available for the LTSC.

Microsoft has released an out-of-band cumulative update to address a known issue. This emergency update is currently offered for Windows 10 Enterprise 2019 LTSC, Windows 10 IoT Enterprise 2019 LTSC, Windows 10 IoT Core 2019 LTSC, and Windows Server 2019. This means that only users who pay for the updates as part of the Long Term Servicing Channel receive it. The bug fixes are also available for other, older Windows Server versions.

Only Available Through Microsoft update catalog

We have added a list of the updates and the content at the end of the post. This new update does not fix all known issues. There is still a list of existing errors. This out-of-band update can currently only be installed manually as a stand-alone package that is available for download from the Microsoft update catalog. The updates are only available via the Microsoft update catalog.

Available updates

• KB5008601 – Windows 10 1607, Server 2016
• KB5008602 – Windows 10 1809, Server 2019
• KB5008603 – Windows 8.1, Windows Server 2012r2
• KB5008604 – Windows Server 2012
• KB5008605 – Windows 7, Windows Server 2008r2
• KB5008606 – Windows Server 2008

Microsoft support now says about the contents of the update:

Details

• Highlights: Updates a known issue that could cause authentication failures on domain controllers running on Windows Server after installing the November 9, 2021 security updates.
• Improvements and corrections: This non-security update contains quality improvements.
• Important Changes: Addresses a known issue that could lead to authentication errors related to Kerberos tickets purchased from Service for User to Self (S4U2 self). This problem occurs after you install the November 9, 2021 security updates on domain controllers (DC) that are running on Windows Server.