MS16-081: Security Update for Active Directory: June 14, 2016

Summary
This security update resolves a vulnerability in Active Directory that could allow denial of service if an authenticated attacker creates multiple machine accounts. To exploit the vulnerability, an attacker must have an account that has privileges to join machines to the domain. 

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-081.
More information
Important
  • All future security and non-security updates for Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows Server 2012 R2-based computer so that you receive future updates.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, seeGet security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-081 that corresponds to the version of Windows that you are running.
More information

Security update deployment information

Windows Server 2008 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3160352-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementYes, you must restart your system after you apply this security update.
Removal informationTo uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, and then under Windows Update, click View installed updates and select from the list of updates.
File informationSee the file information section
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Windows Server 2012:
Windows8-RT-KB3160352-x64.msu
For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3160352-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementYes, you must restart your system after you apply this security update.
Removal informationTo uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File informationSee the file information section
Registry key verificationNote A registry key does not exist to validate the presence of this update.

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support
malicious attacker exploit
File Information

File hash information

File nameSHA1 hashSHA256 hash
Windows8.1-KB3160352-x64.msu6E752C35AAFCDD2600FE28A369CA555181B42BC85601164720769DF8929F35E41647089F9790FEF46B34C82AE9A970A766A9C086
Windows6.1-KB3160352-x64.msuA1C3224988596A2A75EA83384BA46798CABE39904A55221FCA124D158A24A4226D7061273E9106462A7869E7571C9CEEE14DD2FB
Windows8-RT-KB3160352-x64.msu5FA0460E17B9ED20A25638F237938FE166121C6381A5B999B22F6D724C23A934C50FA5EEA5D6041243DBF5E7A4441CAEFF2186D1

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows Server 2012 R2 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.16xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
    6.3.960 0.17xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
    6.3.960 0.18xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Ntdsa.mofNot applicable227,76518-Jun-201314:45Not applicable
Ntdsai.dll6.3.9600.183313,688,96003-May-201615:40x64

Windows Server 2008 R2 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.1.760 1.23xxxWindows 7 or Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Ntdsctrs.iniNot applicable58,48603-May-201622:44Not applicable
Report.ad.xmlNot applicable25,55003-May-201622:40Not applicable
Rules.ad.xmlNot applicable8,36803-May-201622:43Not applicable
Ntdsctrs.iniNot applicable61,68403-May-201622:43Not applicable
Report.ad.xmlNot applicable24,06903-May-201622:45Not applicable
Rules.ad.xmlNot applicable7,69503-May-201622:42Not applicable
Ntdsctrs.iniNot applicable54,28603-May-201622:29Not applicable
Report.ad.xmlNot applicable22,92903-May-201622:29Not applicable
Rules.ad.xmlNot applicable7,25503-May-201622:29Not applicable
Ntdsctrs.iniNot applicable60,80003-May-201622:45Not applicable
Report.ad.xmlNot applicable24,50303-May-201622:42Not applicable
Rules.ad.xmlNot applicable8,03103-May-201622:43Not applicable
Ntdsctrs.iniNot applicable61,50203-May-201622:44Not applicable
Report.ad.xmlNot applicable24,82103-May-201622:42Not applicable
Rules.ad.xmlNot applicable8,16803-May-201622:41Not applicable
Ntdsctrs.iniNot applicable58,15603-May-201622:46Not applicable
Report.ad.xmlNot applicable25,48203-May-201622:45Not applicable
Rules.ad.xmlNot applicable8,28403-May-201622:45Not applicable
Ntdsctrs.iniNot applicable58,59003-May-201622:44Not applicable
Report.ad.xmlNot applicable24,09003-May-201622:43Not applicable
Rules.ad.xmlNot applicable8,17703-May-201622:46Not applicable
Ntdsctrs.iniNot applicable40,58003-May-201622:43Not applicable
Report.ad.xmlNot applicable23,02703-May-201622:45Not applicable
Rules.ad.xmlNot applicable8,89103-May-201622:44Not applicable
Ntdsctrs.iniNot applicable40,03403-May-201622:45Not applicable
Report.ad.xmlNot applicable23,79003-May-201622:42Not applicable
Rules.ad.xmlNot applicable8,29303-May-201622:42Not applicable
Ntdsctrs.iniNot applicable63,53003-May-201622:46Not applicable
Report.ad.xmlNot applicable23,90003-May-201622:41Not applicable
Rules.ad.xmlNot applicable7,83903-May-201622:41Not applicable
Ntdsctrs.iniNot applicable58,99003-May-201622:41Not applicable
Report.ad.xmlNot applicable24,77903-May-201622:42Not applicable
Rules.ad.xmlNot applicable8,33203-May-201622:41Not applicable
Ntdsctrs.iniNot applicable57,83403-May-201622:46Not applicable
Report.ad.xmlNot applicable24,29703-May-201622:45Not applicable
Rules.ad.xmlNot applicable7,82103-May-201622:43Not applicable
Ntdsctrs.iniNot applicable60,31003-May-201622:45Not applicable
Report.ad.xmlNot applicable24,92203-May-201622:44Not applicable
Rules.ad.xmlNot applicable8,11503-May-201622:42Not applicable
Ntdsctrs.iniNot applicable57,25803-May-201622:43Not applicable
Report.ad.xmlNot applicable27,90603-May-201622:40Not applicable
Rules.ad.xmlNot applicable10,52603-May-201622:46Not applicable
Ntdsctrs.iniNot applicable59,23003-May-201622:46Not applicable
Report.ad.xmlNot applicable24,06203-May-201622:40Not applicable
Rules.ad.xmlNot applicable7,62303-May-201622:46Not applicable
Ntdsctrs.iniNot applicable54,78003-May-201622:43Not applicable
Report.ad.xmlNot applicable23,88903-May-201622:42Not applicable
Rules.ad.xmlNot applicable7,63503-May-201622:46Not applicable
Ntdsctrs.iniNot applicable34,78203-May-201622:45Not applicable
Report.ad.xmlNot applicable22,75703-May-201622:45Not applicable
Rules.ad.xmlNot applicable7,02403-May-201622:42Not applicable
Ntdsctrs.iniNot applicable36,46403-May-201622:41Not applicable
Report.ad.xmlNot applicable22,78103-May-201622:42Not applicable
Rules.ad.xmlNot applicable7,05903-May-201622:44Not applicable
Ntdsa.mofNot applicable227,76523-Mar-201622:39Not applicable
Ntdsai.dll6.1.7601.234452,753,53603-May-201622:30x64

Windows Server 2012 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.2.920 0.17xxxWindows 8, Windows RT, or Windows Server 2012RTMGDR
    6.2.920 0.21xxxWindows 8, Windows RT, or Windows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Ntdsctrs.iniNot applicable58,61407-Feb-201307:07Not applicable
Report.ad.xmlNot applicable25,55007-Feb-201307:09Not applicable
Rules.ad.xmlNot applicable8,40307-Feb-201307:07Not applicable
Ntdsctrs.iniNot applicable58,20207-Feb-201305:37Not applicable
Report.ad.xmlNot applicable23,91407-Feb-201305:39Not applicable
Rules.ad.xmlNot applicable7,52407-Feb-201305:37Not applicable
Ntdsctrs.iniNot applicable61,94607-Feb-201303:24Not applicable
Report.ad.xmlNot applicable24,07607-Feb-201303:29Not applicable
Rules.ad.xmlNot applicable7,69507-Feb-201303:24Not applicable
Ntdsctrs.iniNot applicable62,83607-Feb-201305:22Not applicable
Report.ad.xmlNot applicable28,89107-Feb-201305:26Not applicable
Rules.ad.xmlNot applicable11,54607-Feb-201305:22Not applicable
Ntdsctrs.iniNot applicable54,53807-Feb-201303:24Not applicable
Report.ad.xmlNot applicable22,92907-Feb-201303:30Not applicable
Rules.ad.xmlNot applicable7,25507-Feb-201303:24Not applicable
Ntdsctrs.iniNot applicable61,05207-Feb-201303:24Not applicable
Report.ad.xmlNot applicable24,50307-Feb-201303:29Not applicable
Rules.ad.xmlNot applicable8,03007-Feb-201303:24Not applicable
Ntdsctrs.iniNot applicable66,98007-Feb-201306:21Not applicable
Report.ad.xmlNot applicable23,64607-Feb-201306:23Not applicable
Rules.ad.xmlNot applicable7,87407-Feb-201306:21Not applicable
Ntdsctrs.iniNot applicable61,82807-Feb-201303:24Not applicable
Report.ad.xmlNot applicable24,82107-Feb-201303:28Not applicable
Rules.ad.xmlNot applicable8,16807-Feb-201303:24Not applicable
Ntdsctrs.iniNot applicable58,40807-Feb-201305:20Not applicable
Report.ad.xmlNot applicable25,48207-Feb-201305:24Not applicable
Rules.ad.xmlNot applicable8,28407-Feb-201305:19Not applicable
Ntdsctrs.iniNot applicable58,87007-Feb-201307:28Not applicable
Report.ad.xmlNot applicable24,09007-Feb-201307:30Not applicable
Rules.ad.xmlNot applicable8,17707-Feb-201307:28Not applicable
Ntdsctrs.iniNot applicable40,80407-Feb-201303:24Not applicable
Report.ad.xmlNot applicable23,02707-Feb-201303:29Not applicable
Rules.ad.xmlNot applicable8,89107-Feb-201303:24Not applicable
Ntdsctrs.iniNot applicable40,26607-Feb-201306:27Not applicable
Report.ad.xmlNot applicable23,78907-Feb-201306:29Not applicable
Rules.ad.xmlNot applicable8,29307-Feb-201306:27Not applicable
Ntdsctrs.iniNot applicable57,74407-Feb-201305:21Not applicable
Report.ad.xmlNot applicable23,94507-Feb-201305:24Not applicable
Rules.ad.xmlNot applicable7,44407-Feb-201305:20Not applicable
Ntdsctrs.iniNot applicable63,83407-Feb-201306:28Not applicable
Report.ad.xmlNot applicable23,90607-Feb-201306:31Not applicable
Rules.ad.xmlNot applicable7,83907-Feb-201306:28Not applicable
Ntdsctrs.iniNot applicable59,30607-Feb-201306:11Not applicable
Report.ad.xmlNot applicable24,77907-Feb-201306:13Not applicable
Rules.ad.xmlNot applicable8,33207-Feb-201306:11Not applicable
Ntdsctrs.iniNot applicable58,10207-Feb-201305:45Not applicable
Report.ad.xmlNot applicable24,29707-Feb-201305:47Not applicable
Rules.ad.xmlNot applicable7,82507-Feb-201305:45Not applicable
Ntdsctrs.iniNot applicable60,37807-Feb-201305:44Not applicable
Report.ad.xmlNot applicable24,89407-Feb-201305:46Not applicable
Rules.ad.xmlNot applicable8,08007-Feb-201305:44Not applicable
Ntdsctrs.iniNot applicable57,34407-Feb-201306:16Not applicable
Report.ad.xmlNot applicable27,90607-Feb-201306:18Not applicable
Rules.ad.xmlNot applicable10,52607-Feb-201306:16Not applicable
Ntdsctrs.iniNot applicable59,49807-Feb-201306:22Not applicable
Report.ad.xmlNot applicable24,06207-Feb-201306:24Not applicable
Rules.ad.xmlNot applicable7,62307-Feb-201306:22Not applicable
Ntdsctrs.iniNot applicable55,04607-Feb-201306:55Not applicable
Report.ad.xmlNot applicable23,88907-Feb-201306:58Not applicable
Rules.ad.xmlNot applicable7,63507-Feb-201306:55Not applicable
Ntdsctrs.iniNot applicable35,61207-Feb-201305:48Not applicable
Report.ad.xmlNot applicable22,75707-Feb-201305:50Not applicable
Rules.ad.xmlNot applicable7,03607-Feb-201305:48Not applicable
Ntdsctrs.iniNot applicable36,70807-Feb-201307:01Not applicable
Report.ad.xmlNot applicable22,78107-Feb-201307:03Not applicable
Rules.ad.xmlNot applicable7,05907-Feb-201307:00Not applicable
Ntdsctrs.iniNot applicable36,68807-Feb-201305:19Not applicable
Report.ad.xmlNot applicable22,78107-Feb-201305:23Not applicable
Rules.ad.xmlNot applicable7,05907-Feb-201305:19Not applicable
Ntdsa.mofNot applicable227,76502-Jun-201214:31Not applicable
Ntdsai.dll6.2.9200.218563,291,64806-May-201615:40x64
Properties

Article ID: 3160352 - Last Review: 06/14/2016 17:23:00 - Revision: 1.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation, Windows Server 2008 R2 Service Pack 1

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3160352
Feedback