{"id":33873,"date":"2024-05-02T00:46:16","date_gmt":"2024-05-01T22:46:16","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=33873"},"modified":"2024-05-02T00:46:16","modified_gmt":"2024-05-01T22:46:16","slug":"windows-server-april-2024-updates-causes-ntlm-traffic-issues","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2024\/05\/02\/windows-server-april-2024-updates-causes-ntlm-traffic-issues\/","title":{"rendered":"Windows Server: April 2024 updates causes NTLM traffic issues"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" title=\"Windows\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2021\/04\/Windows-klein.jpg\" alt=\"Windows\" width=\"200\" align=\"left\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2024\/05\/02\/windows-server-april-2024-updates-stoeren-ntlm-authentifizierung\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]Another addendum from the April 2024 patchday. The updates cause problems with NTLM connections to Windows Server. In any case, Microsoft has received corresponding user reports and is investigating the incident, as the company announced on April 30, 2024.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg07.met.vgwort.de\/na\/121ac469ac4e4a3a8a0c07010afcc56b\" alt=\"\" width=\"1\" height=\"1\" \/>I also became aware via the patchmanagement.org list that there is a problem with the April 2024 updates. Microsoft has published the entry <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/release-health\/status-windows-server-2022#3292msgdesc\" data-linktype=\"self-bookmark\">NTLM traffic issue after installing the April 2024 security update<\/a>.<\/p>\n<p>It states that administrators may notice a significant increase in NTLM authentication traffic on domain controllers (DCs) after installing the April 2024 security update (KB5036909).<\/p>\n<p>According to Microsoft, this issue is likely to affect organizations that have a very small percentage of primary domain controllers in their environment and high NTLM traffic. The following Windows versions are affected:<\/p>\n<ul>\n<li>Windows Server 2022: <a href=\"https:\/\/support.microsoft.com\/help\/5036909\" target=\"_blank\" rel=\"noopener\">KB5036909<\/a><\/li>\n<li>Windows Server 2019: <a href=\"https:\/\/support.microsoft.com\/help\/5036896\" target=\"_blank\" rel=\"noopener\">KB5036896<\/a><\/li>\n<li>Windows Server 2016: <a href=\"https:\/\/support.microsoft.com\/help\/5036899\" target=\"_blank\" rel=\"noopener\">KB5036899<\/a><\/li>\n<li>Windows Server 2012 R2: <a href=\"https:\/\/support.microsoft.com\/help\/5036960\" target=\"_blank\" rel=\"noopener\">KB5036960<\/a><\/li>\n<li>Windows Server 2012: <a href=\"https:\/\/support.microsoft.com\/help\/5036969\" target=\"_blank\" rel=\"noopener\">KB5036969<\/a><\/li>\n<li>Windows Server 2008 R2 SP1: <a href=\"https:\/\/support.microsoft.com\/help\/5036967\" target=\"_blank\" rel=\"noopener\">KB5036967<\/a><\/li>\n<li>Windows Server 2008 SP2: <a href=\"https:\/\/support.microsoft.com\/help\/5036932\" target=\"_blank\" rel=\"noopener\">KB5036932<\/a><\/li>\n<\/ul>\n<p>Microsoft is working on a solution and wants to provide an update in one of the next versions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Another addendum from the April 2024 patchday. The updates cause problems with NTLM connections to Windows Server. In any case, Microsoft has received corresponding user reports and is investigating the incident, as the company announced on April 30, 2024.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,22,2],"tags":[47,2852,195,159],"class_list":["post-33873","post","type-post","status-publish","format-standard","hentry","category-issue","category-update","category-windows","tag-issue","tag-patchday-4-2024","tag-update","tag-windows-server"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=33873"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33873\/revisions"}],"predecessor-version":[{"id":33874,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/33873\/revisions\/33874"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=33873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=33873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=33873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}