{"id":211103,"date":"2018-10-29T01:17:10","date_gmt":"2018-10-29T00:17:10","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=211103"},"modified":"2022-09-21T12:46:40","modified_gmt":"2022-09-21T10:46:40","slug":"windows-10-update-kb4462917-rger-bei-domain-controllern","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2018\/10\/29\/windows-10-update-kb4462917-rger-bei-domain-controllern\/","title":{"rendered":"Windows Update KB4462917: &Auml;rger bei Domain Controllern"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2015\/01\/win102.jpg\" width=\"58\" align=\"left\" height=\"58\"\/>Kurze Information f\u00fcr Administratoren in Firmenumgebungen, die Domain Controller mit Active Directory-Domains betreiben. Das Oktober 2018-Update KB4462917 f\u00fcr Windows 10 V1607 und Windows Server 2016 macht \u00c4rger in Verbindung mit Domain Controller-Promotions f\u00fcr neue Active Directory-Domains in bestehenden Forests.<\/p>\n<p><!--more--><\/p>\n<h2>Update KB4462917 f\u00fcr Windows 10<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/vg05.met.vgwort.de\/na\/27ef3a71ecdc4eb78772cd5243d31fb2\" width=\"1\" height=\"1\"\/>Update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4462917\/windows-10-update-kb4462917\" target=\"_blank\" rel=\"noopener\">KB4462917<\/a> wurde am 9. Oktober 2018 f\u00fcr Windows 10 V1607 (Enterprise sowie Education) und Windows Server 2016 freigegeben. Es hebt die OS-Build auf 14393.2551 und soll u.a. eine Schwachstelle in der Microsoft JET Database Engine beseitigen. Ich hatte im Artikel <a href=\"https:\/\/borncity.com\/blog\/2018\/10\/10\/patchday-windows-10-updates-9-oktober-2018\/\">Patchday Windows 10-Updates (9. Oktober 2018)<\/a> \u00fcber das Update berichtet. <\/p>\n<h2>Probleme mit Domain Controllern in neuen AD-Domains <\/h2>\n<p>Nach einem Hinweis von MVP-Kollege Meinolf Weber gibt es scheinbar Probleme bei Domain Controllern, die Active Directory-Dom\u00e4nen in Forests verwalten. Laut <a href=\"https:\/\/web.archive.org\/web\/20200805192740\/https:\/\/dirteam.com\/sander\/2018\/10\/26\/knowledgebase-kb4462917-breaks-domain-controller-promotions-for-new-active-directory-domains-in-existing-forests\/?fbclid=IwAR2pSZn5v4bSR-4RxJrc31hfBuqoKESCVdLTV9Kw8Qyug3Bff3YbfO0P4Qg\" target=\"_blank\" rel=\"noopener\">diesem Blog-Beitrag<\/a> verursacht das Update KB4462917 Probleme unter Windows Server 2016, wenn diese zum Active Directory Domain Controller umgestellt werden sollen. <\/p>\n<p>Das Problem tritt auf, wenn eine Active Directory Domain Services (AD DS)-Umgebung vorliegt, wobei die optionale Funktion <em>Active Directory Recycle Bin<\/em> aktiviert ist. Dann m\u00f6chten Sie einen neuen Windows Server 2016-basierten Dom\u00e4nencontroller f\u00fcr eine neue Active Directory-Dom\u00e4ne in dieser Umgebung implementieren. <\/p>\n<p>Dazu verwenden Sie die Option <em>Add a new domain to a existing forest <\/em>im Active Directory Domain Services Configuration Wizard oder im Install-ADDSDomain PowerShell Cmdlet. In diesem Szenario schl\u00e4gt die Erstellung der Unterdom\u00e4ne fehl. Wenn Sie den Konfigurationsassistenten f\u00fcr Active Directory-Dom\u00e4nendienste verwenden, werden die folgenden Informationen angezeigt:<\/p>\n<blockquote>\n<p><strong>An error occurred while trying to configure this machine as a Domain Controller<\/strong>  <\/p>\n<p>The operation failed because:<br \/>Active Directory Domain Services could not replicate the directory partition CN=Schema,CN=Configuration, DC=<em>domain<\/em>,DC=<em>tld<\/em> from the remote Active Directory Domain Controller <em>FullyQualifiedDCName.<\/em>  <\/p>\n<p>\"The replication operation encountered a database error.\"<\/p>\n<\/blockquote>\n<p>Bei Verwendung des PowerShell Cmdlet <em>Install-ADDSDomain <\/em>erhalten Sie den folgenden Fehler:<\/p>\n<blockquote>\n<p>Install-ADDSDomain : The operation failed because:<br \/>Active Directory Domain Services could not replicate the directory partition CN=Schema,CN=Configuration, DC=<em>domain<\/em>,DC=<em>tld<\/em> from the remote Active Directory Domain Controller <em>FullyQualifiedDCName<\/em>.  <\/p>\n<p>\"The replication operation encountered a database error.\"<\/p>\n<\/blockquote>\n<p>Das Problem wird durch das optional aktivierbare Feature <em>Active Directory Recycle Bin<\/em> verursacht. Wird Update KB4462917 deinstalliert, verschwindet der Fehler wieder. Im Blog-Beitrag gibt es <a href=\"https:\/\/web.archive.org\/web\/20200805192740\/https:\/\/dirteam.com\/sander\/2018\/10\/26\/knowledgebase-kb4462917-breaks-domain-controller-promotions-for-new-active-directory-domains-in-existing-forests\/?fbclid=IwAR2pSZn5v4bSR-4RxJrc31hfBuqoKESCVdLTV9Kw8Qyug3Bff3YbfO0P4Qg\" target=\"_blank\" rel=\"noopener\">weitere Hinweise<\/a> zum Problem , wobei der Blog-Autor folgende Updates ebenfalls im Verdacht hat, den Fehler zu erzeugen:  <\/p>\n<ul>\n<li><a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4464330\/windows-10-update-kb4464330\" target=\"_blank\" rel=\"noopener\">KB4464330<\/a> f\u00fcr Windows Server 2019 (der Server ist zur\u00fcckgezogen)  <\/li>\n<li><a href=\"https:\/\/support.microsoft.com\/help\/4462926\" target=\"_blank\" rel=\"noopener\">KB4462926<\/a> and <a href=\"https:\/\/support.microsoft.com\/help\/4462941\" target=\"_blank\" rel=\"noopener\">KB4462941<\/a> for Windows Server 2012 R2  <\/li>\n<li><a href=\"https:\/\/support.microsoft.com\/help\/4462929\" target=\"_blank\" rel=\"noopener\">KB4462929<\/a> and <a href=\"https:\/\/support.microsoft.com\/help\/4462931\" target=\"_blank\" rel=\"noopener\">KB4462931<\/a> for Windows Server 2012  <\/li>\n<li><a href=\"https:\/\/support.microsoft.com\/help\/4462923\" target=\"_blank\" rel=\"noopener\">KB4462923<\/a> and <a href=\"https:\/\/support.microsoft.com\/help\/4462915\" target=\"_blank\" rel=\"noopener\">KB4462915<\/a> for Windows Server 2008 R2<\/li>\n<\/ul>\n<p>Irgend jemand betroffen, der das best\u00e4tigen kann?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kurze Information f\u00fcr Administratoren in Firmenumgebungen, die Domain Controller mit Active Directory-Domains betreiben. Das Oktober 2018-Update KB4462917 f\u00fcr Windows 10 V1607 und Windows Server 2016 macht \u00c4rger in Verbindung mit Domain Controller-Promotions f\u00fcr neue Active Directory-Domains in bestehenden Forests.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[185,3694,2557],"tags":[7278,24,4315,4380],"class_list":["post-211103","post","type-post","status-publish","format-standard","hentry","category-update","category-windows-10","category-windows-server","tag-kb4462917","tag-problem","tag-update","tag-windows-server-2016"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/211103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=211103"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/211103\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=211103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=211103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=211103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}