KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967

In the article titled "KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967" there is a lot of talk about the registry value KrbtgtFullPacSignature 

However, there is no mention of whether this value needs to be manually created, or if it is supposed to have been automatically created in due course with the install of the appropriate Windows Updates.

Each of our Server 2016 Domain Controllers have seemingly never had the KrbtgtFullPacSignature registry value created and I'm starting to wonder why?

Each server has had its OS updates apply including the most recent update KB5028169 as mentioned as a requirement in CVE 2022 37967.

Why does the registry key not exist even though all the related updates are installed?

Hello its_Tricky83,

Good day! I'm John DeV a Windows user like you and I'll be happy to assist you today.

I want to apologize that this is just a consumer forum for home users. Due to the scope of your question, it is best to ask this on Microsoft Site Q&A which is a technical community platform where most of the members were IT professionals that would greatly help you with the issue.

Microsoft Site Q&A
https://learn.microsoft.com/en-us/answers/quest...

Stay safe and have a great day.

Kind regards,

John DeV
Independent Advisor

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thanks John,

Soon after posting this I found the more Technical forum and posted over there.

Not sure why the initial KB page pointed me here first. But hey, thanks for replying. Cheers 🍻

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hello its_Tricky83,

You're most welcome. I'm glad to help.

Kind regards,

John DeV
Independent Advisor

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated February 11, 2024 Views 89 Applies to: