{"id":23152,"date":"2022-01-25T00:10:00","date_gmt":"2022-01-24T23:10:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=23152"},"modified":"2022-01-24T19:36:48","modified_gmt":"2022-01-24T18:36:48","slug":"windows-january-2022-updates-bricks-active-directory-federation-services","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/01\/25\/windows-january-2022-updates-bricks-active-directory-federation-services\/","title":{"rendered":"Windows January 2022 updates bricks Active Directory Federation Services"},"content":{"rendered":"

\"Windows\"[German]It seems, that the January 2022 security updates like KB5009557 bricks Active Directory Federation Services ADFS-Farm-Servers. I receive a report, where update KB5009557 breaks LDAP queries to domain controllers from a ADFS Farm Server. Here are a few details about that issue.<\/p>\n

<\/p>\n

I received the following comment<\/a> within my German blog, regarding update KB5009557. Blog reader Phil wrote:<\/p>\n

\n

ADFS problem
Hello all.
I have the following problem after installing KB5009557 on an ADFS farm server.
The ADFS farm server could no longer make LDAP queries to a DC in another forest (one-way trust).
EventID 325
Microsoft.IdentityServer.Service.IssuancePipeline.CallerAuthorizationException: MSIS5007: The caller authorization failed for caller identity Domain\\User for relying party trust example.com. -> Microsoft.IdentityServer.ClaimsPolicy.Language.PolicyEvaluationException: POLICY0018: Query 'SAMAccountName={0};Attribute_X' to attribute store 'examle.local' failed: 'The supplied credential is invalid.<\/p>\n

After uninstalling the patch, it worked again.<\/p>\n

The patch was not installed on any DC, only on an ADFS farm server.<\/p>\n<\/blockquote>\n

Perhaps it's helpful for administrators affected by the same issue. <\/p>\n

Similar articles:
<\/strong>Windows Server: Out-of-Band Update fixes Remote Desktop issues (2022\/01\/04)<\/a>
Microsoft Office Updates (January 4, 2022)<\/a>
Microsoft Security Update Summary (January 11, 2022)<\/a>
Patchday: Windows 8.1\/Server 2012 R2 Updates (January 11, 2022), boot loop reported<\/a>
Patchday: Windows 10 Updates (January 11, 2022)<\/a>
Patchday: Windows 11 Updates (January 11, 2022)<\/a>
Patchday: Updates for Windows 7\/Server 2008 R2 (January 11, 2022)<\/a> <\/p>\n

Windows Server: January 2022 security updates are causing DC boot loop<\/a>
Windows VPN connections (L2TP over IPSEC) broken after January 2022 update<\/a>
Windows Server 2012\/R2: January 2022 Update KB5009586 bricks Hyper-V Host<\/a>
Microsoft patch day issues Jan. 2022: bugs confirmed, but updates not pulled<\/a> <\/p>\n

Microsoft Microsoft Januar 2022 Patchday Revisions (2022\/01\/14)<\/a>
Windows Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)<\/a>
Windows 10\/Server: Out-of-band Updates fixes Jan. 2022 patch day issues (Jan. 17, 2022)<\/a>
Out-of-band Updates for Windows Server 2019 fixes Jan. 2022 Patch day issues (Jan. 18, 2022)<\/a>
Windows 7\/8.1; Server 2008R2\/2012R2: Out-of-band Updates with Fixes for Jan. 2022 Patch day Issues (2022\/01\/17)<\/a> <\/p>\n

Review: Fix for Windows IPSec VPN Connection Issues<\/a>
Out-of-Band Updates for Windows (Jan. 17\/18, 2022) doesn't fixes ReFS Issues complete<\/a>
Review: Fix for Hyper-V Host Startup Problem in Windows (January 2022)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]It seems, that the January 2022 security updates like KB5009557 bricks Active Directory Federation Services ADFS-Farm-Servers. I receive a report, where update KB5009557 breaks LDAP queries to domain controllers from a ADFS Farm Server. Here are a few details about … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,2],"tags":[47,195,194],"class_list":["post-23152","post","type-post","status-publish","format-standard","hentry","category-issue","category-windows","tag-issue","tag-update","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/23152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=23152"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/23152\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=23152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=23152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=23152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}