domain controllers

Microsoft’s security feed now lists CVE-2026-21243 as a vulnerability in the Windows Lightweight Directory Access Protocol (LDAP) that can be leveraged to cause a denial-of-service condition against Windows systems, and the advisory emphasizes uncertainty around the detailed technical root cause...

Microsoft has quietly shipped a set of emergency, out‑of‑band updates to repair a Kerberos authentication regression that broke sign‑ins and remote access on domain controllers after the November 8, 2022 Patch Tuesday rollup — and administrators must install the fixes manually on every Domain...

Microsoft pushed a set of emergency, out‑of‑band patches in May 2022 after a security hardening in the May 10 cumulative updates changed how domain controllers map client certificates to machine accounts — a change that briefly broke certificate‑based authentication for services such as Network...

Microsoft’s May 2022 cumulative update KB5013943 introduced a certificate-mapping change that briefly broke certificate-based authentication on domain controllers, disrupting Network Policy Server (NPS), RADIUS, RRAS, EAP/PEAP flows and leaving administrators scrambling for workarounds until...