Badpwdcount on PDC isn't reset when you use NTLM authentication to log on to Windows Server 2012 R2

This article describes an issue when you log on to Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you install this update, see the Prerequisites section.
Symptoms
When you use a user principal name (UPN) format and log on successfully to Windows Server 2012 R2 by using NT LAN Manager (NTLM) authentication, the attempt to reset the badpwdcount attribute on the primary domain controller (PDC) fails.

How to get this update
You can get this update by using one of the following methods. We have released an update through Windows Update and Microsoft Download Center. Even though this issue is observed only in Windows Server 2012 R2, the update also applies to Windows 8.1 and Windows RT 8.1.

Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Method 1: Windows Update

This update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8.1DownloadDownload the package now.
All supported x64-based versions of Windows 8.1 DownloadDownload the package now.
All supported x64-based versions of Windows Server 2012 R2DownloadDownload the package now.
Note The update for Windows RT 8.1 can be downloaded only from Windows Update.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Update detail information

Prerequisites

To apply this update, you must have April 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) installed in Windows 8.1 or Windows Server 2012 R2.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.

Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.18 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x86 Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Netlogon.dll6.3.9600.18169696,32020-Dec-201514:43x86
x64 Windows 8.1 and Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Netlogon.dll6.3.9600.18169839,16820-Dec-201514:57x64
Netlogon.dll6.3.9600.18169696,32020-Dec-201514:43x86
Windows RT 8.1
File nameFile versionFile sizeDateTimePlatform
Netlogon.dll6.3.9600.18169615,42420-Dec-201514:43Not applicable

Additional file information

x86 Windows 8.1
File propertyValue
File nameUpdate.mum
File versionNot applicable
File size1,574
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameX86_d651031d04dd7c58794be0288b9c99d2_31bf3856ad364e35_6.3.9600.18170_none_71adf9aa42ee164e.manifest
File versionNot applicable
File size705
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameX86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.18170_none_925e1932538f353c.manifest
File versionNot applicable
File size38,654
Date (UTC)21-Dec-2015
Time (UTC)15:37
PlatformNot applicable
x64 Windows 8.1 and Windows Server 2012 R2
File propertyValue
File nameAmd64_049e5eac9f761a840d9c27e1d35d5559_31bf3856ad364e35_6.3.9600.18170_none_432f942d477c3e59.manifest
File versionNot applicable
File size709
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameAmd64_c57313365110d7a888497710470b4fc8_31bf3856ad364e35_6.3.9600.18170_none_cb8a4d90534b73a8.manifest
File versionNot applicable
File size709
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameAmd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.18170_none_ee7cb4b60beca672.manifest
File versionNot applicable
File size38,660
Date (UTC)21-Dec-2015
Time (UTC)15:46
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size1,792
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameWow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.18170_none_f8d15f08404d686d.manifest
File versionNot applicable
File size18,997
Date (UTC)21-Dec-2015
Time (UTC)15:36
PlatformNot applicable
Windows RT 8.1
File propertyValue
File nameArm_5b7eeb6422cf9dfee4e47c20560ffcc5_31bf3856ad364e35_6.3.9600.18170_none_acb8c376da3862d1.manifest
File versionNot applicable
File size705
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
File nameArm_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.18170_none_92608b8a538c5402.manifest
File versionNot applicable
File size38,654
Date (UTC)21-Dec-2015
Time (UTC)15:35
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size1,574
Date (UTC)21-Dec-2015
Time (UTC)22:55
PlatformNot applicable
Properties

Article ID: 3125210 - Last Review: 03/08/2016 18:47:00 - Revision: 2.0

, , , , , , ,

  • kbsurveynew kbfix atdownload kbexpertiseinter KB3125210
Feedback