Today, Microsoft has released OOB emergency updates that Windows admins must install on all Domain Controllers (DCs) in affected environments. “You do not need to install any update or make any changes to other servers or client devices in your environment to resolve this issue. If you used any workaround or mitigations for this issue, they are no longer needed, and we recommend you remove them,” Microsoft advised. The OOB updates released today are available only via the Microsoft Update Catalog and will not be offered via Windows Update. Microsoft also released standalone updates which can be imported into Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. The only affected platform still waiting for a fix is Windows Server 2008 R2 SP1; Redmond says that a dedicated update will be made available next week.
Detailed WSUS deployment instructions are available on the WSUS and the Catalog Site and Configuration Manager instructions on the Import updates from the Microsoft Update Catalog page. “If you are using security-only updates for these versions of Windows Server, you only need to install these standalone updates for the month of November 2022,” Microsoft added. “If you are using Monthly rollup updates, you will need to install both the standalone updates listed above to resolve this issue, and install the Monthly rollups released November 8, 2022, to receive the quality updates for November 2022.”
https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-kerberos-auth-issues-in-emergency-updates/
