RSAT "Active Directory Users and Computers" in Windows 10 22H2 communication problems with Windows Server 2008 R2 Domain Controllers

Question

Hi all,

I'm experiencing communication problems with the "Active Directory Users and Computers" snap-in, belonging to the RSAT, installed on a Windows 10 22H2 client for managing a Windows Domain based on two Windows Server 2008 R2 domain controllers. The forest and domain functional levels are Windows Server 2000. I have noticed that some operations performed on the snap-in, such as creating a new user or resetting a user password, are not allowed and generate some errors. I can perform the same operations through the "Active Directory Administrative Center", or by connecting directly to the Domain Controllers.

In a Windows 10 1903 version I have no problem.

I list below the text included in the generated error for each action:

• for user creation: "An error occurred. Contact your system administrator."
• for user password reset: "Windows cannot complete the password change for <username> because: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation."

This Windows 10 22H2 client is correctly trusted for delegation with the domain.

I tried to install the RSAT both by adding the feature from the system apps and by manually installing KB2693643; the problems are the same in both cases.

Can someone help me to understand the cause? Is it maybe related to a kerberos protocol security restrictions?

How can I inspect the problems? I can't find the errors in the event viewer.

Thank you so much