KB4586830 question

Question

HI,

We must install KB4586830 on all of DC's in the domain.
I understand that after installing this upsdate we should also add this registery key "PerformTicketSignature" to

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Kdc

And set the value to 1, is this correct?

Also I hear that installing this update can create some problem in domain and if we come accross any problem we should install this update kb4594441, what this update do? does this update change the the above registry key as well? does anyone install this update?

Thanks

Answer 1

Yes, basically. I wouldn't necessarily expect problems but if you encounter the Kerberos authentication issues described here.
https://learn.microsoft.com/en-us/windows/release-information/status-windows-10-1607-and-windows-server-2016#november-2020

then installing this Out-of-band update (KB4594441) should resolve the issue.
https://support.microsoft.com/en-us/help/4594441

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi,

I am glad to hear that your issue was successfully resolved\I am pleased to know that the information is helpful to you. If there is anything else we can do for you, please feel free to post in the forum.

Best Regards
Vicky

Answer 3

@Dave Patrick So if I understood you correctly we should first install the KB4586830 on our server 2016 DC and if we come across any problem we should install the KB459444, am I right?

What problems should we expect?