Microsoft said it's working on a resolution to address this Windows Server issue and estimates that it will provide a solution soon. The complete list of originating updates for this Windows Server known issue includes: 'The authentication failures are a result of Kerberos Tickets acquired via S4u2self and used as evidence tickets for protocol transition to delegate to backend services which fail signature validation.'

'After installing the November security updates, you might have authentication failures on servers relating to Kerberos Tickets acquired via S4u2self,' Microsoft explains on the Windows health dashboard. The authentication issues prevent end-users in Active Directory on-premises or hybrid Azure Active Directory environments from signing into services or applications using Single Sign-On (SSO). The list of affected platforms also includes Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2. These authentication issues impact systems running Windows Server 2019 and lower versions with certain Kerberos delegation scenarios. after installing security updates released during the November Patch Tuesday.

Microsoft says users might experience authentication issues on Domain Controllers (DC) running Windows Server. Update November 15, 04:37 EST : Microsoft has released out-of-band updates to address the authentication issues on DCs running impacted Windows Server versions.

Kcd patches download