Upcoming AD Security Changes

[free780]

The November Windows updates have introduced some changes that will enforce in 2022. It might be worth checking for any impact on your environment.CVE-2021-26414

https://support.microsoft.com/en-gb/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

 

Enforcement won’t be until Q2 2022.

 

CVE-2021-42278

https://support.microsoft.com/en-us/topic/kb5008102-active-directory-security-accounts-manager-hardening-changes-cve-2021-42278-5975b463-4c95-45e1-831a-d120004e258e

 

Enforced after November 2021 updates.

 

CVE-2021-42287

https://support.microsoft.com/en-us/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041

 

Enforcement 12 July 2022.

 

CVE-2021-42291

https://support.microsoft.com/en-us/topic/kb5008383-active-directory-permissions-updates-cve-2021-42291-536d5555-ffba-4248-a60e-d6cbc849cde1

 

Enforcement is scheduled for 12 April 2022.