netlogon

Microsoft’s security advisory for CVE-2025-53809 warns that improper input validation in the Windows Local Security Authority Subsystem Service (LSASS) can be abused by an authorized attacker to cause a denial of service (DoS) over a network, putting authentication services and domain...

August 12’s cumulative rollup for Windows Server 2022 (KB5063880, OS Build 20348.4052) is a pivotal update that continues Microsoft’s multi-year campaign to harden identity and boot integrity in Windows environments—most notably by reinforcing the Microsoft RPC Netlogon protocol against...

Microsoft has quietly but decisively reworked how Active Directory domain controllers answer certain Netlogon RPC calls — a change rolled into the July and August 2025 cumulative updates that hardens the Microsoft RPC Netlogon protocol, closes an unauthenticated resource‑exhaustion vector...

Microsoft's recent servicing cycle for Windows Server 2022 ties together two urgent security themes: Microsoft has pushed a cumulative update (KB5063880) that carries fixes and quality improvements while reiterating critical remediation guidance for a Netlogon Remote Protocol hardening released...

Attention Windows enthusiasts and IT admins: Microsoft has just refreshed its playbook for hardening the most vulnerable corners of its operating systems. Yes, we're talking about the nitty-gritty of keeping your Windows environment safe from increasingly devious cyberthreats. If you're...

On October 8, 2024, Microsoft announced a significant vulnerability within the Windows Netlogon service, cataloged as CVE-2024-38124. This vulnerability allows an attacker to gain elevated privileges in a Windows environment, exposing systems to a high risk of unauthorized access and control...

Original release date: October 9, 2020 Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint...

Discusses event ID 5719 or Group Policy event 1129, which are logged if you have a Gigabit network adapter installed on a Windows-based compute. Provides a resolution. Continue reading...

Continue reading...

Continue reading...

Continue reading...

Hope someone can help me I have Windows 2003 server and domain control at home. Which has been working fine for years? All of my laptops/pc has been able to connect to it in the most part as they are joined to my AD. I however I got a new laptop a month ok which had windows 8.1 home installed...

Severity Rating: Important Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker who is logged on to a domain-joined system runs a specially crafted...

Severity Rating: Important Revision Note: V1.0 (March 10, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow spoofing if an attacker who is logged on to a domain-joined system runs a specially crafted application...

Severity Rating: Important Revision Note: V1.0 (March 10, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow spoofing if an attacker who is logged on to a domain-joined system runs a specially crafted application...

Link Removed

Hey there guys, I'm running a 2003 and 2008 server the 2003 is the primary DC. Most of our PC's are XP and were testing 2 windows 7 machines. The desktops and some shared drives were stored on a nas box but it was unstable so I shifted the desktops and some public shares to a server on one...

Severity Rating: Important - Revision Note: V1.0 (December 14, 2010): Bulletin published.Summary: This security update resolves a privately reported vulnerability in the Netlogon RPC Service on affected versions of Windows Server that are configured to serve as domain controllers. The...

Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in the Netlogon RPC Service on affected versions of Windows Server that are configured to serve as domain controllers. The vulnerability could allow denial of service if an attacker sends a...