NTLM authentication fails intermittently after the computer password is changed through a Windows Server 2008 R2-based RODC

Article translations Article translations
Article ID: 2696718 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

Consider the following scenario:
  • NTLM authentication is used in and between two Active Directory forests.
  • The resource server has a security channel to a Windows Server 2008 R2-based read-only domain controller (RODC).
  • The resource server has a limited connectivity to the Read/Write Domain Controller (RWDC). For example, the resource server connects the RWDC only through UDP port 389.
  • The Password Replication policy for the RODC is configured. Therefore, the resource server is cacheable on the RODC.
  • The computer password of the resource server is changed.
  • You try to use a user account from one of the Active Directory forests to access a resource server in the other Active Directory forest.
In this scenario, NTLM authentication fails intermittently. That is, you are prompted repeatedly to input your user name and password for some time.

CAUSE

This issue occurs because the write and read targets of the password change are mismatched. Therefore, no password is present in the attribute metadata for the resource server on the RODC.

RESOLUTION

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Note To resolve this issue, apply the hotfix on the Windows Server 2008 R2-based RODC.

Prerequisites

To apply this hotfix, you must be running Windows Server 2008 R2 or Windows Server 2008 R2 Service Pack 1 (SP1). For more information about how to obtain a Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

Registry information

To apply this hotfix, you do not have to change the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Collapse this tableExpand this table
    VersionProductMilestoneService branch
    6.1.760 0.16xxxWindows Server 2008 R2RTMGDR
    6.1.760 1.21xxxWindows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2" section. MANIFEST files and the associated security catalog (.cat) files, are very important for maintaining the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Samlib.dll6.1.7600.16385107,00814-Jul-200901:41x64
Samsrv.dll6.1.7601.21970770,56018-Apr-201205:20x64
Samsrv.mofNot applicable62,54110-Jun-200920:35Not applicable
Samlib.dll6.1.7601.2197060,92818-Apr-201204:24x86
Samsrv.mofNot applicable62,54112-Nov-201023:39Not applicable
For all supported IA-64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Samlib.dll6.1.7600.16385171,00814-Jul-200901:48IA-64
Samsrv.dll6.1.7601.219701,424,89618-Apr-201204:14IA-64
Samsrv.mofNot applicable62,54110-Jun-200920:39Not applicable
Samlib.dll6.1.7601.2197060,92818-Apr-201204:24x86
Samsrv.mofNot applicable62,54112-Nov-201023:39Not applicable

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Additional file information for Windows Server 2008 R2

Additional files for all supported x64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameAmd64_026899b669a493115bfc514ef87f5405_31bf3856ad364e35_6.1.7601.21970_none_66c8a7df5973b0df.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_06d0fe0710427c5ddfd0bf28c51c9058_31bf3856ad364e35_6.1.7601.21970_none_c41c4a7b1006df21.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_0d0d6b90e59ac870f9b2c7a480b282a2_31bf3856ad364e35_6.1.7601.21970_none_00e95f2546f6462d.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_0e1e5a7bc3d95c06cf38bfc03491e1a3_31bf3856ad364e35_6.1.7601.21970_none_a524c72be0cbf3d0.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_0e259ff5b44b1dffbab62d5ff5ef807f_31bf3856ad364e35_6.1.7601.21970_none_66d260f7e8e497cb.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_17494aa043418fce8487e50a8ede3168_31bf3856ad364e35_6.1.7601.21970_none_0e117a9d9cae11ea.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_28a0cb087d12f1909445154f20fb2301_31bf3856ad364e35_6.1.7601.21970_none_e2da1fc1c1b5e575.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_2f29052edfd42b009718ae9c991f3642_31bf3856ad364e35_6.1.7601.21970_none_b3c7c201d0e47c6d.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_3041f00afb5d29221f0881f401de82de_31bf3856ad364e35_6.1.7601.21970_none_54727333f668408d.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_33fba4dbad22b336f1d7db894c0d01d7_31bf3856ad364e35_6.1.7601.21970_none_65c11ba1bfa47f5d.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_37a62c0c9cbf656aa59b1584c57b407a_31bf3856ad364e35_6.1.7601.21970_none_7a1edcffc8e88120.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_38d7759e60006778879a2c85138e6758_31bf3856ad364e35_6.1.7601.21970_none_ee5adeff14946773.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_39c332c822073d22d8968ebfa7f562d6_31bf3856ad364e35_6.1.7601.21970_none_d80ff911f0ff184e.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_41a017c2062bd54501c73277abf8162c_31bf3856ad364e35_6.1.7601.21970_none_16fc2cf703b01517.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_41c11260fb6da5c04a522165ca52053f_31bf3856ad364e35_6.1.7601.21970_none_f3fa573635176d3d.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_456c1b21bd44e25c1330fc6a0c447a2f_31bf3856ad364e35_6.1.7601.21970_none_fb3e3645e8a73cf4.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_55a3e940213799866d7e32a26510d031_31bf3856ad364e35_6.1.7601.21970_none_5144066f0765115e.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_5c04e8bba31776b6d1da5e895dcb9741_31bf3856ad364e35_6.1.7601.21970_none_30621c0bf94d15fd.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_5d91ef65476e3643fc48004b79aeb601_31bf3856ad364e35_6.1.7601.21970_none_c88e34f24b6db48a.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_69d1ba8e14a63fc42f09d6327e4e8c6f_31bf3856ad364e35_6.1.7601.21970_none_d97e2a1c069f93ed.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_6a255f2497440612434107d6d6b51545_31bf3856ad364e35_6.1.7601.21970_none_70051fda945aa780.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_6a6706933864e1acbecd57713ec1cf76_31bf3856ad364e35_6.1.7601.21970_none_8490ddd777b192f6.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_7ed89864232dbacde5e01f60eb9207b9_31bf3856ad364e35_6.1.7601.21970_none_3743cced3d262979.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_80df424b958cdc2e1d36c54166f7f9f3_31bf3856ad364e35_6.1.7601.21970_none_4eba7bb665cea69a.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_89a780448ac555ce5a1571bbc38af05b_31bf3856ad364e35_6.1.7601.21970_none_1915409ff052f9fd.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_9064bd18844b7e5711025ccb14f29b48_31bf3856ad364e35_6.1.7601.21970_none_d298f497eff5e6d0.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_9bd72744a4b2c180f066c1c705932a1a_31bf3856ad364e35_6.1.7601.21970_none_13a1328e32e38fd1.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_9c6d35a94f5bf489b4fdb07cac0f5af6_31bf3856ad364e35_6.1.7601.21970_none_27a901676fac101d.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_a707d9ea7f106dbcb74a3d75711a6cdb_31bf3856ad364e35_6.1.7601.21970_none_1305a38c2f8c78e8.manifest
File versionNot applicable
File size714
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_aaaea02cf05575ee972f0caef456a751_31bf3856ad364e35_6.1.7601.21970_none_5ce52cd7719b0865.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_aec336855d743c9735738e8e7d84059b_31bf3856ad364e35_6.1.7601.21970_none_e89d18138ac1fc6c.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_afde32020a3657d915b2ea639a97c9c1_31bf3856ad364e35_6.1.7601.21970_none_788b759d8c75d336.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_b246c3c5398cd807e204da194c8611a1_31bf3856ad364e35_6.1.7601.21970_none_ddfc234d1e6cb5ee.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_b4b01846dc24d67c566997c3b23e2da4_31bf3856ad364e35_6.1.7601.21970_none_b6fd1776ebfcce60.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_b91f8eff3504861b24435be609e67606_31bf3856ad364e35_6.1.7601.21970_none_ed36f03e4d12adaf.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_c4b36a130371e9803256e83f5b9615d4_31bf3856ad364e35_6.1.7601.21970_none_03150b207ea92d77.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_d1b24aa1b302a572327b8ccf60fecabd_31bf3856ad364e35_6.1.7601.21970_none_0231a995f5770184.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_d345b254a2ef5f9bcedf11a65ebf8bcf_31bf3856ad364e35_6.1.7601.21970_none_c7d9c929c540a616.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_d489676644cdd10b49bfe5907b3c4c89_31bf3856ad364e35_6.1.7601.21970_none_af821030bdcf123e.manifest
File versionNot applicable
File size1,070
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_dadb7fcd962ccf514452906d1afc7e08_31bf3856ad364e35_6.1.7601.21970_none_dba14f262a1cce44.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_e0493d7dc04668e5ad3106169f9a6ef3_31bf3856ad364e35_6.1.7601.21970_none_4b7cb4f8dae8f4e7.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_e0fc316e3bd1f0421d21e5b416e4d2bc_31bf3856ad364e35_6.1.7601.21970_none_b9328e31956955b9.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_e1ef37191c9297189b0ab87bdc2113fd_31bf3856ad364e35_6.1.7601.21970_none_2db7386f7cccf7ef.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_e1fd328f8e7b98102487e0b0fe2d036b_31bf3856ad364e35_6.1.7601.21970_none_bd6e63ae596a8df4.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_e209a299bb9ba1d929938ad0e3da7623_31bf3856ad364e35_6.1.7601.21970_none_10fe0cf46c54b895.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_eec7565a5d9df7257b81876658888dfa_31bf3856ad364e35_6.1.7601.21970_none_8d7da8abf725b8f7.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_faaf589256308c20b484ad7060c0909b_31bf3856ad364e35_6.1.7601.21970_none_bdc508248544ca33.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_fba85d4b4c3ce46080e2d0d2dd212b14_31bf3856ad364e35_6.1.7601.21970_none_19ce0b7701f08ce2.manifest
File versionNot applicable
File size1,084
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_fc8be9926f322fab1340936d9112ab9d_31bf3856ad364e35_6.1.7601.21970_none_3a85ac8f6d1a360e.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_ffbd37784b7fc3be8f7bc9f310fa887e_31bf3856ad364e35_6.1.7601.21970_none_14373bb80ec0299c.manifest
File versionNot applicable
File size722
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameAmd64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.1.7601.21970_none_10592099d0e5f22e.manifest
File versionNot applicable
File size101,702
Date (UTC)19-Apr-2012
Time (UTC)09:33
PlatformNot applicable
File nameWow64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.1.7601.21970_none_1aadcaec0546b429.manifest
File versionNot applicable
File size83,443
Date (UTC)18-Apr-2012
Time (UTC)04:40
PlatformNot applicable
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameIa64_14cf2a179adfeb0c8e14a1adc22ea055_31bf3856ad364e35_6.1.7601.21970_none_6d11fcea51000d48.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_2558d9fb810225e463869a41d94e60fb_31bf3856ad364e35_6.1.7601.21970_none_518bb30eff2b369f.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_4927c139268329dcd4fef5b5153c6fe5_31bf3856ad364e35_6.1.7601.21970_none_952e17ea72c35163.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_8f749b306d6ed739752a224426833bad_31bf3856ad364e35_6.1.7601.21970_none_01f8c34c89e9ac80.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_a983a8eacd62490da157144e7a3725cd_31bf3856ad364e35_6.1.7601.21970_none_71c5f057c77c54df.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_d30d6da38fd9947f56e6ba1fc30f47fe_31bf3856ad364e35_6.1.7601.21970_none_6460d47c0b0d7e65.manifest
File versionNot applicable
File size1,068
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_ddb301125d68c1a5e4ea75eac012b10d_31bf3856ad364e35_6.1.7601.21970_none_70cb678c36be8401.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_e85697bd46692d78740e771475fb202a_31bf3856ad364e35_6.1.7601.21970_none_24376c86bed2aa49.manifest
File versionNot applicable
File size1,082
Date (UTC)19-Apr-2012
Time (UTC)09:00
PlatformNot applicable
File nameIa64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.1.7601.21970_none_b43c290c188689f4.manifest
File versionNot applicable
File size101,698
Date (UTC)19-Apr-2012
Time (UTC)09:01
PlatformNot applicable
File nameWow64_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.1.7601.21970_none_1aadcaec0546b429.manifest
File versionNot applicable
File size83,443
Date (UTC)18-Apr-2012
Time (UTC)04:40
PlatformNot applicable

Properties

Article ID: 2696718 - Last Review: June 13, 2012 - Revision: 1.0
APPLIES TO
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 for Itanium-Based Systems
  • Windows Server 2008 R2 Foundation
  • Windows Web Server 2008 R2
Keywords: 
kbautohotfix kbqfe kbhotfixserver kbfix kbsurveynew kbexpertiseadvanced KB2696718

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com