Windows Server 2022 Update Causing DNS and Active Directory Access Issues?
Asked by
MellowCedar47
After installing KB5122882 last night, users began receiving repeated credential prompts when accessing mapped drives and folder redirections, but none of their credentials were accepted. I can still log on locally with a Domain Admin account, yet opening the DNS console or running DNS PowerShell commands returns "Access Denied." DNS resolution continues to work, and the domain services appear to be running, so this looks like an authentication or permissions problem rather than a complete DNS outage. I'm currently rolling back the update because it may have changed behavior in the DNS or security components. Has anyone else seen similar DNS, Active Directory, or authentication problems after installing this update?
Answers
Collect the DNS, Directory Service, and Security event logs before the rollback completes. They could provide useful evidence for troubleshooting or a support case, and some of the relevant details may be harder to recover after reverting. DNS resolution still working while the management console reports Access Denied suggests an ACL, authentication, or service-account problem rather than DNS being completely down.
Reply to this answer
The symptoms sound broader than a normal DNS failure: existing lookups can continue working while administrative access and domain authentication are broken. I’d compare the Security and Directory Service events before and after the update, verify service-account permissions, and test whether the issue clears after the rollback. If it does, preserve the logs and document the exact affected servers and services before redeploying the patch.
Reply to this answer
We saw a Windows Server 2019 machine that could no longer start Active Directory Domain Services this morning. It may be related if that server received the same update, although we haven’t confirmed the cause yet.
MellowCedar47: Did that server receive KB5122882 as well? I’m trying to determine whether the update is the common factor.
Reply to this answer
Add your answer
Answers are reviewed before publication.
MellowCedar47: The DNS logs are empty since last night, but the Security log contains many Access Denied events from services associated with Active Directory and DNS.