Displaying 1 result from an estimated 1 matches for "kb5051987".
2025 Apr 27
1
Fwd: Domain member fails to map SID>*ID after DC migrated from Server 2022 to 2025
...in AD [...]
Ah, my own naivete then. Thank you.
With an N=3, I can reliably reproduce this on upgrading the domain
controller from Server 2022 to *the latest version of* Server 2025 -
with any of my home domain or lab configurations.
Doing a little bit of bisecting... it looks like specifically
KB5051987, the 2025.02B update, causes this failure.
It appears there is a new access control check for DsrGetDcName in
netlogon (which is visible with debug logging enabled) which fails for
Samba clients.
+ [CRITICAL] Rejecting an RPC call due to error from AccessCheck:
0x6e4 OpNum:20 Method:DsrGetDcName...