![]() (I've tried both allowing RC4 and Not Defined and restarting the DC and no luck.) Is this the proper GPO setting? Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options: Network security: Configure encryption types allowed for Kerberos When you got things working, can you confirm these specifics:ġ. Exchange services are the obvious thing that breaks for us (Exchange RPC, Information Stores, and others simply won't start when the DC's are patched). So far allowing RC4 or having the setting undefined through GPO is not working for us, but we have only tried those settings on the domain controllers. But I'm trying to find a way to get things working when the Domain Controllers are patched. If we uninstall the patch from the domain controllers and restart the servers having problems, then we see the issue resolved, even if the non-DC servers have the November patch. Have a plan to roll back if something doesn't work.Deploy to a pilot/test group before the whole org.Deploy to a test/dev environment before prod.NOTE: This thread is usually posted before the release of Microsoft's updates, which are scheduled to come out at 5:00PM UTC. While this thread is timed to coincide with Microsoft's Patch Tuesday, feel free to discuss any patches, updates, and releases, regardless of the company or product. We do this both to keep clutter out of the subreddit, and provide you, the dear reader, a singular resource to read.įor those of you who wish to review prior Megathreads, you can do so here. We put this thread into place to help gather all the information about this month's updates: What is fixed, what broke, what got released and should have been caught in QA, etc. This is the ( mostly) safe location to talk about the latest patches, updates, and releases. Hello r/sysadmin, I'm /u/AutoModerator, and welcome to this month's Patch Megathread!
0 Comments
Leave a Reply. |