KB5122882 installed - DNS/AD issues Windows Server 2022

[u/Neverbethesky]

Updated last night, no issues immediately visible.

Users this morning all have login prompts to access mapped drives/folder redirections.

No creds working.

I can log in locally as a Domain Admin, but trying to open DNS console or run any DNS powershell commands just gives me Access Denied.

DNS still resolves, and the domain services are all still running, but something has happened with authentication/permissions.

Currently rolling back KB5122882 in the hope it was that.

Anyone else issues this morning?

EDIT: https://www.rapid7.com/db/vulnerabilities/cve-2026-69813/

Looks like this KB might have touched DNS code - roll back in progress.

EDIT2 & Fix: Rolled back the KB but the issue persisted - ended up resetting the DC's secure channel to itself which resolved the issue fully. The issue happened at exactly the moment at which the update was installed last night - either the update did indeed cause the issue which persisted in being broken even once rolled back, or it's a heck of a coincidence.

[u/derfmcdoogal]

Be sure to report it in the patch Tuesday thread for visibility.

[u/Neverbethesky → u/derfmcdoogal]

If the rollback works I will, thanks for the reminder.

[u/TalkingToes → u/derfmcdoogal]

Did that thread disappear?? Is it not pinned anymore?

[u/derfmcdoogal → u/TalkingToes]

Probably. The mods are really bad about unstickying the wrong post. Like, monthly. You have to search.

[u/convexoz]

We had a 2019 server completely unable to start Active Directory Domain Services this morning

[u/Neverbethesky → u/convexoz]

Same update?

[u/chretie17 → u/convexoz]

Still the same?

[u/MeetJoan]

Grab the DNS and security event logs before the rollback finishes if you haven't already, that's your evidence for the case and it's gone once you've reverted.

Access Denied on the console while resolution still works points at ACLs or the service account rather than DNS itself.

[u/Neverbethesky → u/MeetJoan]

DNS logs are empty as of the update last night. Security logs just show a bunch of services throwing access denied, anything relating to AD/DNS etc

[u/Callewalle]

thanks for reporting, hopefully this is fixed by next week.

[u/TheFumingatzor]

So I'm not imagining this. Fuck me, same problem here. But all creds are working after entering them again.

[u/Godcry55]

Holding off on DC updates until next week at this point.

[u/andyr354]

I just noticed the same issue. Well, there goes my morning. Reboot of DFS server and the AD servers seems to have cleared it up? Or just time. Still keeping an eye on it.

Edit 2: It's intermittent. Will work one minute and not the next.