Domain Controllers Windows (server 2012 R2) update to address Netlogon Elevation of Privilege Vulnerability

Question

Hi,

We are planning to update Domain Controllers runing Windows server 2012 R2 to address Netlogon Elevation of Privilege Vulnerability.

For this we are installing following updates:

1. KB4566425 (pre-requisite)
2. KB4571723 (Security update only)

With reference to roll back these updates what are our options?, if someone can please suggest exact steps for roll back or uninstalling the updates.

Also, if anyone can please share their past experiences on installing these updates on Domain Controllers (preparations, issues, back-ups etc.)

Best Regards,

Ali

Answer 1

SSUs (KB4566425) cannot be uninstalled. The security update KB4571723 can be uninstalled. Regardless should not be any issues. You can use
Test-ComputerSecureChannel
to test suspect clients.
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/test-computersecurechannel?view=powershell-5.1

--please don't forget to Accept as answer if the reply is helpful--