April 2023 Patches Impacting Active Directory

[FN-GM]

Hello,

 

I haven’t found a thread on this so apologies if I missed it!

 

The April 2023 windows updates will have an impact on AD in 3 areas and thought I would make you aware.

 

1. AD Permissions Issue becomes enforced.

 

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42291

 

https://support.microsoft.com/en-us/topic/kb5008383-active-directory-permissions-updates-cve-2021-42291-536d5555-ffba-4248-a60e-d6cbc849cde1

 

 

2. Kerberos PAC changes - 3rd Deployment Phase.

 

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37967

 

https://support.microsoft.com/en-us/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb#timing

 

3. NetLogon RPC initial enforcement.

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-38023

 

https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25

[free780]

I'd setup a event forwarding server. If you have multiple DCs.

 

I try and create a filter for each change and monitor.

 

[MYK-IT]

Found a very useful post on Reddit covering these and more for April 2023 and the year ahead.