V
Vince ng1
Do you know what is the patch that superseded KB5014754? if we can't find the patchesis it we need to do the 2 steps then will be ok?Set the time range that a certificate can predate an account to 10 years. CISA recommends this value to ensure complete coverage of active certificates. Agencies may also determine their own value (PIV/CAC certificates are valid for three years).Registry SubkeyHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KdcValueCertificateBackdatingCompensationData TypeREG_DWORDData0x12CC03002.Set the enforcement mode to 1 (Compatibility). This is the default value after
Continue reading...
Continue reading...