After update KB5028166 trust relationship broken

Question

After update KB5028166 trust relationship broken

Edwin Hop 45

After update KB5028166 is installed the trust relation between the windows 10 pc and our old samba domain controller is broken. After removing the KB5028166 update the trusted relation is good again. How can we fix the trusted relation with the samba domain controller and install the KB5028166 update?

JL 5 Reputation points

2023-07-13T10:24:43+00:00

We have the exact same issue on our organization, we have an old Samba domain controller.

It's afecting both windows 10 pcs that have installed the KB5028166 update, and windows 11 pcs that installed the KB5028185 update.

The only solution so far is to halt windows updates on the afected pcs and remove the updates that caused the issue.

We have been looking for a more permanent solution but so far no joy.

Hope Microsoft can fix this, or someone finds a workaround that does not involve halting windows updates.
Brian D 15 Reputation points

2023-07-14T03:09:11.8366667+00:00
This is also our issue,

Uninstall KB5028166

download wushowhide.diagcab

Hide the specific update

Then it should be good to go for now.

another workaround we did is to "unplug the network cable on the impacted computer, then login once in the desktop, plug back the network cable". in some cases it works if you need the computer urgently.

There were already discussions about this on reddit but still no solution was seen. will wait for Microsoft to fix the issue too .
JL 5 Reputation points

2023-07-14T08:22:16.0333333+00:00

The Samba team already has a solution:

https://bugzilla.samba.org/show_bug.cgi?id=15418

Sadly, this only applies to whom has the new version of Samba installed as the Domain Controller and can install the fixed update, in our case, which is an old system, that solution does not apply, a windows side solution is what we need in order to solve the issue and resume updates on the affected machines.

4 answers

Your answer

JL 5 Reputation points

2023-07-13T10:24:43+00:00

We have the exact same issue on our organization, we have an old Samba domain controller.

It's afecting both windows 10 pcs that have installed the KB5028166 update, and windows 11 pcs that installed the KB5028185 update.

The only solution so far is to halt windows updates on the afected pcs and remove the updates that caused the issue.

We have been looking for a more permanent solution but so far no joy.

Hope Microsoft can fix this, or someone finds a workaround that does not involve halting windows updates.
Brian D 15 Reputation points

2023-07-14T03:09:11.8366667+00:00

This is also our issue,

Uninstall KB5028166

download wushowhide.diagcab

Hide the specific update

Then it should be good to go for now.

another workaround we did is to "unplug the network cable on the impacted computer, then login once in the desktop, plug back the network cable". in some cases it works if you need the computer urgently.

There were already discussions about this on reddit but still no solution was seen. will wait for Microsoft to fix the issue too .
JL 5 Reputation points

2023-07-14T08:22:16.0333333+00:00

The Samba team already has a solution:

https://bugzilla.samba.org/show_bug.cgi?id=15418

Sadly, this only applies to whom has the new version of Samba installed as the Domain Controller and can install the fixed update, in our case, which is an old system, that solution does not apply, a windows side solution is what we need in order to solve the issue and resume updates on the affected machines.

Answer 1

Hello Edwin,

Thank you for your question and for reaching out with your question today.

If the trust relationship between your Windows 10 PC and the Samba domain controller is broken after installing the KB5028166 update, you can try the following steps to resolve the issue and install the update:

Re-establish the trust relationship:
- Disconnect your Windows 10 PC from the domain by joining a workgroup.
- Remove the existing computer account for the Windows 10 PC from the Samba domain controller.
- Reboot the Windows 10 PC.
- Re-join the Windows 10 PC to the Samba domain by connecting it back to the domain using the appropriate credentials.
Verify Samba compatibility:
- Ensure that your Samba domain controller is running a version that is compatible with the KB5028166 update. Check the Samba documentation or community forums to determine if any updates or patches are available to address compatibility issues with the specific Windows update.
Install the KB5028166 update:
- After re-establishing the trust relationship or ensuring compatibility with your Samba domain controller, proceed with installing the KB5028166 update on your Windows 10 PC.
- Download the KB5028166 update from the official Microsoft website or use Windows Update to install it.
Monitor for any issues:
- Once the KB5028166 update is installed, monitor the Windows 10 PC's behavior and ensure that the trust relationship with the Samba domain controller remains intact.
- If any issues arise, such as trust relationship problems reoccurring, consider reaching out to Microsoft support or the Samba community for further assistance. They can provide more targeted guidance based on your specific environment and configurations.

Remember to always ensure that you have appropriate backups and a testing environment to validate any changes or updates before applying them in a production environment.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

If the reply was helpful, please don’t forget to upvote or accept as answer.

Brian D 15 Reputation points

2023-07-13T01:34:17.5+00:00

We also have the same issue and found out it was this specific patch that caused the problems in our end.

We uninstalled it for now as there were so many users were affected.

We run an 8 hour troubleshooting with this problem yesterday and now uninstalling to the patch to the affected users.

Re-establishing it doesn't work because the moment you disconnect you can't connect back, also tried forcing the login by

typing this in cmd
Reg add HKLM\System\CurrentControlSet\Control\Lsa /v NetJoinLegacyAccountReuse /t REG_DWORD /d 1 /f

[Make sure to remove that by this following command
Reg delete HKLM\System\CurrentControlSet\Control\Lsa /v NetJoinLegacyAccountReuse /f

You will be able to login but you wont be able to add the users that you need for some reason. my first reaction was to just full wipe and re-install everything. the 2 computers so far has been working with no issue as probably the patch hasn't installed yet.

Our current resolution is to just uninstall that specific update as it causes issues to samba. i may need to update this in the future if we found other solutions.

No, at this time i didnt find any of this information on the update. My question is what changed on this for samba to have issues like that.

The problem is when you install it regardless on how the trust relationship is . it breaks for some reason update update. so this solution doesn't work.

The current "fix" we had is currently on monitoring. we will wait for any official information from windows to fix the issues until then.

Answer 2

Pavel yannara Mirochnitchenko 13,341 MVP

At our customer enviroment, Wifi broke down probably because of Active Directory autherization and some other network issues occured which were simply fixed by uninstalling this patch. Just thinking, have Microsoft done anything regarding this and is there new version of KB5028166 being released. Currently we have paused patch distribution for all computers.

Answer 3

Pavel yannara Mirochnitchenko 13,341 MVP

I also have to bring the bad news that also August CU-08-2023 does not fix problems, and problems remains or re-appears, so be carefull!

Answer 4

RK-Germany 0

Hello together, i have the same issue, because of use an very old samba server.

But I did the following:

If you does not need NetBIOS, try to disable NetBIOS on IPv4 settings in the networkadapter settings. Normally Default has been set. Still this moment i does not have any issues without NetBIOS. So all my Win10 workstations has been patched with latests OCT23 patches, and i can login successfully.

Share via

After update KB5028166 trust relationship broken

4 answers

Your answer