You are currently offline, waiting for your internet to reconnect

Your browser is out-of-date

You need to update your browser to use the site.

Update to the latest version of Internet Explorer

Description of the update that implements Extended Protection for Authentication in the Server service

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows.
INTRODUCTION
This article describes a nonsecurity update that implements Extended Protection for Authentication in the Server service.

When Extended Protection for Authentication is enabled, authentication requests are bound to the Service Principal Name (SPN) of the server to which the client tries to connect.

To use the features that this update includes, you must have Windows 7, Windows 2008 R2, or update 968389 installed on the computer.  For more information, click the following article number to view the article in the Microsoft Knowledge Base:  
968389 Extended Protection for Authentication
MORE INFORMATION

Update information

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows XP and Windows Server 2003 file information notes
  • The files that apply to a specific service branch (QFE, GDR) are noted in the "Service branch" column.
  • GDR service branches contain only those fixes that are widely released to address widespread, extremely important issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.
For all supported x86-based versions of Windows XP SP3
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Srv.sys5.1.2600.6031357,24826-Aug-201013:39x86SP3SP3GDR
Srvsvc.dll5.1.2600.603199,84027-Aug-201005:57x86SP3SP3GDR
Xpsp4res.dll5.1.2600.60315,12026-Aug-201012:52x86SP3SP3GDR
Srv.sys5.1.2600.6031357,24826-Aug-201013:37x86SP3SP3QFE
Srvsvc.dll5.1.2600.603199,84027-Aug-201006:05x86SP3SP3QFE
Xpsp4res.dll5.1.2600.60315,12026-Aug-201012:52x86SP3SP3QFE
For all supported x86-based versions of Windows Server 2003 SP2
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Srv.sys5.2.3790.4758380,92816-Aug-201017:09x86SP2SP2GDR
Srvsvc.dll5.2.3790.475899,32817-Aug-201012:31x86SP2SP2GDR
W03a3409.dll5.2.3790.475844,54416-Aug-201016:01x86SP2SP2GDR
Srv.sys5.2.3790.4758381,44016-Aug-201016:50x86SP2SP2QFE
Srvsvc.dll5.2.3790.475899,32817-Aug-201012:42x86SP2SP2QFE
W03a3409.dll5.2.3790.475844,54416-Aug-201016:01x86SP2SP2QFE
For all supported x64-based versions of Windows Server 2003 SP2
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Srv.sys5.2.3790.4758673,28008-Sep-201001:22x64SP2SP2GDR
Srvsvc.dll5.2.3790.4758166,91208-Sep-201001:22x64SP2SP2GDR
W03a3409.dll5.2.3790.475845,05608-Sep-201001:22x64SP2SP2GDR
Ww03a3409.dll5.2.3790.475844,54408-Sep-201001:22x86SP2SP2GDR\WOW
Srv.sys5.2.3790.4758676,86408-Sep-201001:18x64SP2SP2QFE
Srvsvc.dll5.2.3790.4758166,91208-Sep-201001:18x64SP2SP2QFE
W03a3409.dll5.2.3790.475845,05608-Sep-201001:18x64SP2SP2QFE
Ww03a3409.dll5.2.3790.475844,54408-Sep-201001:18x86SP2SP2QFE\WOW
For all supported IA-64-based versions of Windows Server 2003 SP2
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Srv.sys5.2.3790.47581,157,12008-Sep-201001:21IA-64SP2SP2GDR
Srvsvc.dll5.2.3790.4758211,96808-Sep-201001:21IA-64SP2SP2GDR
W03a3409.dll5.2.3790.475843,52008-Sep-201001:21IA-64SP2SP2GDR
Ww03a3409.dll5.2.3790.475844,54408-Sep-201001:21x86SP2SP2GDR\WOW
Srv.sys5.2.3790.47581,158,65608-Sep-201001:17IA-64SP2SP2QFE
Srvsvc.dll5.2.3790.4758211,96808-Sep-201001:17IA-64SP2SP2QFE
W03a3409.dll5.2.3790.475843,52008-Sep-201001:17IA-64SP2SP2QFE
Ww03a3409.dll5.2.3790.475844,54408-Sep-201001:17x86SP2SP2QFE\WOW
Windows Vista and Windows Server 2008 file information notes
  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
    VersionProductSR_LevelService branch
    6.0.600 0. 16xxxWindows VistaRTMGDR
    6.0.600 0. 20xxxWindows VistaRTMLDR
    6.0.600 1. 18xxxWindows Vista and Windows Server 2008SP1GDR
    6.0.600 1. 22xxxWindows Vista and Windows Server 2008SP1LDR
    6.0.600 2. 18xxxWindows Vista and Windows Server 2008SP2GDR
    6.0.600 2.ERROR: PhantomJS timeout occurred