Windows Domain Auth Issues after Patch Tuesday

  • I just spent the better part of two days tracking down a weird authentication problem with our build server and our developers.

    It turns out that applying MS patches 3002657 and 3046049 on a Server 2003 DC will hose your Kerberos authentication.  Removing those two patches restores functionality.

    FYI for anyone running ancient servers.  And ya ya ya I know about running ancient servers.  Not my choice nor my call.

  • But ancient servers are time tested and if you close all your ports and disconnect your modem, they are pretty secure.  (-:

  • And if you stop applying patches then you won't get new Microsoft bugs.