Microsoft Windows Server | WI336263

Impact: Scenarios which rely on synthetic RODC machine accounts might fail if they do not have a linked KRBTGT account. Originating KB URL: https://support.microsoft.com/en-us/topic/5009610 Originating KB Release Date: 2022-01-11T10:00:00-08:00 Originating Build: N/A Resolved KB URL: N/A Vendor Message History: ======================= Published: 2022-02-25T02:06:48.013+00:00 ---------------------------------------- After installing KB5009610 (https://support.microsoft.com/help/5009610) or any updates released January 11, 2022 and later on your domain controllers, scenarios which rely on Read-only domain controllers (RODCs) (https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771030(v=ws.10)) or synthetic RODC machine accounts might fail to establish a Netlogon secure channel. RODC accounts must have a linked and compliant KRBTGT account (https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn745899(v=ws.11)#krbtgt-account) to successfully establish a secure channel. Affected applications or network appliances, such as Riverbed SteelHead WAN Optimizers, might have issues joining domains or limitations after joining a domain. Next Steps: Affected apps and network appliances will need an update from their developer or manufacturer to resolve this issue. Microsoft and Riverbed are presently investigating and will provide an update when more information is available. Affected platforms: - Server: Windows Server 2022; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012; Windows Server 2008 R2 SP1; Windows Server 2008 SP2