This article describes a problem that occurs when you change the domain account password in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows Server 2012, Windows 7 Service Pack 1 (SP1), Windows Server 2008 R2 SP1, Windows Vista SP2, or Windows Server 2008 SP2. Before you install this update, see the Prerequisites section.
Symptoms
This problem affects operating systems that use the "Windows Kerberos Security Feature Bypass" (related to CVE-2016-0049). After you install security update 3126041, when you try to change your password through an untrusted domain, you may receive an error message that looks something like this:
The security database on the server does not have a computer account for the workstation trust relationship
For example, this problem may occur when you try to change your "domain B" password from a computer that is joined to "domain A", and the trust from "domain A" to "domain B" isn't configured. Note The password is successfully changed even though you receive the error message.
How to get this update
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.Notes
-
To fix this issue for Windows 7 or Windows Server 2008 R2, install security update 3140410.
-
To fix this issue for Windows 8.1, Windows Server 2012 R2, Windows Vista SP2, or Windows Server 2008 SP2, install the update that is described in this article.
-
To fix this issue for Windows Server 2012, install update 3125424.
Method 1: Windows Update
This update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Update detail information
Prerequisites
To install this update, you should first install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows 8.1 or Windows Server 2012 R2. Or, install Service Pack 2 for Windows Vista and for Windows Server 2008.
Registry information
To apply this update, you don't have to make any changes to the registry.
Restart requirement
You may have to restart the computer after you apply this update.
Update replacement information
This update doesn't replace a previously released update.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Notes
-
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version
Product
Milestone
Service branch
6.3.960 0.18 xxx
Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2
RTM
GDR
-
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
-
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
Windows RT 8.1
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.3.9600.18230 |
664,576 |
06-Feb-2016 |
16:22 |
Not applicable |
x64 Windows 8.1 and Windows Server 2012 R2
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.3.9600.18230 |
987,648 |
06-Feb-2016 |
16:58 |
x64 |
|
Kerberos.dll |
6.3.9600.18230 |
801,792 |
06-Feb-2016 |
16:32 |
x86 |
x86 Windows 8.1
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.3.9600.18230 |
801,792 |
06-Feb-2016 |
16:32 |
x86 |
Notes
-
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version
Product
Milestone
Service branch
6.0.600 2.19xxx
Windows Vista or Windows Server 2008
SP2
GDR
6.0.600 2.23xxx
Windows Vista or Windows Server 2008
SP2
LDR
-
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
-
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x86 Windows Vista
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.0.6002.19615 |
501,760 |
10-Mar-2016 |
17:07 |
x86 |
|
Kerberos.dll |
6.0.6002.23929 |
504,320 |
10-Mar-2016 |
16:36 |
x86 |
x64 Windows Vista and Windows Server 2008
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.0.6002.19615 |
660,480 |
10-Mar-2016 |
16:43 |
x64 |
|
Kerberos.dll |
6.0.6002.23929 |
665,600 |
10-Mar-2016 |
16:35 |
x64 |
|
Kerberos.dll |
6.0.6002.19615 |
501,760 |
10-Mar-2016 |
17:07 |
x86 |
|
Kerberos.dll |
6.0.6002.23929 |
504,320 |
10-Mar-2016 |
16:36 |
x86 |
ia64 Windows Server 2008
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Kerberos.dll |
6.0.6002.19615 |
1,400,320 |
10-Mar-2016 |
16:29 |
IA-64 |
|
Kerberos.dll |
6.0.6002.23929 |
1,410,560 |
10-Mar-2016 |
16:06 |
IA-64 |
|
Kerberos.dll |
6.0.6002.19615 |
501,760 |
10-Mar-2016 |
17:07 |
x86 |
|
Kerberos.dll |
6.0.6002.23929 |
504,320 |
10-Mar-2016 |
16:36 |
x86 |
Windows RT 8.1
|
File property |
Value |
|---|---|
|
File name |
Arm_1bcaf602f58f503e6504731e93bb88c4_31bf3856ad364e35_6.3.9600.18230_none_dcab96d676390bb0.manifest |
|
File version |
Not applicable |
|
File size |
705 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
Arm_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_7baaf308cc3f8906.manifest |
|
File version |
Not applicable |
|
File size |
47,925 |
|
Date (UTC) |
06-Feb-2016 |
|
Time (UTC) |
17:46 |
|
Platform |
Not applicable |
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
1,998 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
x64 Windows 8.1 and Windows Server 2012 R2
|
File property |
Value |
|---|---|
|
File name |
Amd64_a85a10c736ac3fabbf6a18bf49fda882_31bf3856ad364e35_6.3.9600.18230_none_fde550c58080cbd2.manifest |
|
File version |
Not applicable |
|
File size |
709 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
Amd64_ab6c3baf2f161fe62e4f62fac858c051_31bf3856ad364e35_6.3.9600.18230_none_cdbeb87d5d48681f.manifest |
|
File version |
Not applicable |
|
File size |
709 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
Amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_d7c71c34849fdb76.manifest |
|
File version |
Not applicable |
|
File size |
47,929 |
|
Date (UTC) |
06-Feb-2016 |
|
Time (UTC) |
19:30 |
|
Platform |
Not applicable |
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
2,898 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
Wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_e21bc686b9009d71.manifest |
|
File version |
Not applicable |
|
File size |
37,746 |
|
Date (UTC) |
06-Feb-2016 |
|
Time (UTC) |
18:37 |
|
Platform |
Not applicable |
x86 Windows Vista
|
File property |
Value |
|---|---|
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
3,078 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
X86_7cc06129dd42a90f117e9a314d945330_31bf3856ad364e35_6.0.6002.19615_none_74be9ee517217664.manifest |
|
File version |
Not applicable |
|
File size |
705 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
X86_be67f93bd3ec900a6f9ce1c758caa251_31bf3856ad364e35_6.0.6002.23929_none_3ffb11c7b1910793.manifest |
|
File version |
Not applicable |
|
File size |
705 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
X86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_e8b77ae7adf77fc0.manifest |
|
File version |
Not applicable |
|
File size |
38,326 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
17:54 |
|
Platform |
Not applicable |
|
File name |
X86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_e93a4cbac7199b25.manifest |
|
File version |
Not applicable |
|
File size |
38,326 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:53 |
|
Platform |
Not applicable |
x86 Windows 8.1
|
File property |
Value |
|---|---|
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
1,998 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
X86_bc068e6458872418e8d16da87d8adecf_31bf3856ad364e35_6.3.9600.18230_none_80b2ddad8de6a1a1.manifest |
|
File version |
Not applicable |
|
File size |
705 |
|
Date (UTC) |
15-Mar-2016 |
|
Time (UTC) |
18:16 |
|
Platform |
Not applicable |
|
File name |
X86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.3.9600.18230_none_7ba880b0cc426a40.manifest |
|
File version |
Not applicable |
|
File size |
47,925 |
|
Date (UTC) |
06-Feb-2016 |
|
Time (UTC) |
18:38 |
|
Platform |
Not applicable |
x64 Windows Vista and Windows Server 2008
|
File property |
Value |
|---|---|
|
File name |
Amd64_6a942950e717883311970309aadc546f_31bf3856ad364e35_6.0.6002.19615_none_f8d778728fbcaef3.manifest |
|
File version |
Not applicable |
|
File size |
1,060 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Amd64_9df43765e557655b545489e5510e7e02_31bf3856ad364e35_6.0.6002.23929_none_8e407db28ed66ad4.manifest |
|
File version |
Not applicable |
|
File size |
1,060 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_44d6166b6654f0f6.manifest |
|
File version |
Not applicable |
|
File size |
38,362 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:58 |
|
Platform |
Not applicable |
|
File name |
Amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4558e83e7f770c5b.manifest |
|
File version |
Not applicable |
|
File size |
38,362 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:49 |
|
Platform |
Not applicable |
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
3,102 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_4f2ac0bd9ab5b2f1.manifest |
|
File version |
Not applicable |
|
File size |
38,939 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
17:18 |
|
Platform |
Not applicable |
|
File name |
Wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4fad9290b3d7ce56.manifest |
|
File version |
Not applicable |
|
File size |
38,939 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:49 |
|
Platform |
Not applicable |
ia64 Windows Server 2008
|
File property |
Value |
|---|---|
|
File name |
Ia64_3b7a3438b55f58f00e6e53ab027851f6_31bf3856ad364e35_6.0.6002.19615_none_b96e3141c180d309.manifest |
|
File version |
Not applicable |
|
File size |
1,058 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Ia64_7b34955135263072475ef11a509ca362_31bf3856ad364e35_6.0.6002.23929_none_a7b8a78f776798e3.manifest |
|
File version |
Not applicable |
|
File size |
1,058 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Ia64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_e8b91eddadf588bc.manifest |
|
File version |
Not applicable |
|
File size |
38,344 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:44 |
|
Platform |
Not applicable |
|
File name |
Ia64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_e93bf0b0c717a421.manifest |
|
File version |
Not applicable |
|
File size |
38,344 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:22 |
|
Platform |
Not applicable |
|
File name |
Update.mum |
|
File version |
Not applicable |
|
File size |
2,256 |
|
Date (UTC) |
11-Mar-2016 |
|
Time (UTC) |
19:33 |
|
Platform |
Not applicable |
|
File name |
Wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.19615_none_4f2ac0bd9ab5b2f1.manifest |
|
File version |
Not applicable |
|
File size |
38,939 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
17:18 |
|
Platform |
Not applicable |
|
File name |
Wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.23929_none_4fad9290b3d7ce56.manifest |
|
File version |
Not applicable |
|
File size |
38,939 |
|
Date (UTC) |
10-Mar-2016 |
|
Time (UTC) |
16:49 |
|
Platform |
Not applicable |
