Symptoms

In a Microsoft Exchange Server 2019, 2016, 2013, or 2010 on-premises environment that’s configured to use Kerberos for authentication, the Microsoft Outlook and mobile device clients continually prompt for authentication after you install the November 2021 Windows Server update on domain controllers to fix the problem that's described in security advisory CVE-2021-42278.

Resolution

An out-of-band Windows update is available to resolve this problem. Install the following fix on domain controllers, as appropriate for your system version.
 

OS

Resolving KB article

Windows 10, version 1809

Windows Server 2019

5008602

Windows 10, version 1607

Windows Server 2016

5008601

Windows Server 2012 R2

5008603

Windows Server 2012

5008604

Windows Server 2008 R2

5008605

Windows Server 2008

5008606


 

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×