Shulou(Shulou.com)11/24 Report--

CTOnews.com, April 15, Microsoft originally planned to release phase 3 Kerberos patches during the Patch Tuesday event in April. However, Microsoft has now announced that it will be postponed until June 13, 2023.

The Kerberos patch for Win11 systems was deployed in Phase 1 last November and Phase 2 in December last year. According to the latest official news from Microsoft, the deployment of Phase 3 has been postponed to June.

The Kerberos authentication problems encountered by Win10 and Win11 devices occurred after installing the cumulative updates released on Tuesday, November patch, resulting in domain user login failure, domain user remote desktop connection failure, and printing may require domain user authentication.

The official explanation of the CTOnews.com translation is as follows:

Each phase increases the default minimum of CVE-2022-37967 security hardening changes to reduce the impact of this vulnerability on the environment.

Previously, you could disable the addition of KrbtgtFullPacSignature signatures by setting the PAC subkey to 0. The third phase patch for Kerberos disables this method and forces the value of the KrbtgtFullPacSignature subkey to be set to 1.

Related readings:

"Microsoft will release Phase 3 patch next month to further fix the Kerberos vulnerability in Win10 / Win11."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.