Loading...

Immediate Action: Enforce PAC Validation for CVE-2024-26248 & CVE-2024-29056

Immediate Action: Enforce PAC Validation for CVE-2024-26248 & CVE-2024-29056

Last year, Windows updates released on and after April 9, 2024 added new behaviors that start the process of addressing a security risk in the Kerberos PAC Validation Protocol. Starting today, the Enforcement phase of deployment begins. After installing the April 2025 Windows security update and later updates on all Windows domain controllers and Windows clients, support for Compatibility mode will be removed, and the new secure behavior will be enabled by default. This will properly mitigate the vulnerabilities described in CVE-2024-26248 and CVE-2024-29056. When will this happen? The Enforcement phase starts today with the release of the April 2025 Windows security update. How will this affect your organization? To mitigate the risks described in CVE-2024-26248 and CVE-2024-29056, you must update your entire Windows environment. This must include all Windows domain controllers and Windows clients. Environments that are not up to date will not recognize the new request structure and security checks will fail.   What do you need to do to prepare? Additional information: Install the April 2025 Windows security update on all Windows domain controllers and Windows clients. Enforcement mode will be fully enabled in your environment. This will properly mitigate the vulnerabilities described in CVE-2024-26248 and CVE-2024-29056. KB5037754: How to manage PAC Validation changes related to CVE-2024-26248 and CVE-2024-29056 KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 Message ID: MC1050817

The post Immediate Action: Enforce PAC Validation for CVE-2024-26248 & CVE-2024-29056 appeared first on M365 Admin.

Published on:

Learn more
Need help with this product?

We can help you with Immediate Action: Enforce PAC Validation for CVE-2024-26248 & CVE-2024-29056

If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.

M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

Intune: Windows Health Attestation Migration to Microsoft Azure Attestation

Microsoft Intune will migrate Windows Health Attestation compliance evaluation from the current Device Health Attestation (DHA) service to Mic...

3 days ago

Dynamics 365 Commerce – Print receipts using Adyen payment terminal printers

We are announcing the ability to print receipts using the built-in printer on supported Adyen payment terminals in Dynamics 365 Commerce. This...

3 days ago

Outlook: Multi Account Search

Users will be able to see results from multiple mailboxes interweaved in a single ranked list and will be able to do standard mail actions. Pr...

3 days ago

Dynamics 365 Field Service: Manage rental service demand with work order requests

Rental organizations need to coordinate commercial rental activity, equipment availability, asset condition, and service execution across mult...

3 days ago

Microsoft Teams: Schedule Channel Meetings from Outlook Calendar

Users will be able to schedule Microsoft Teams channel meetings directly from Outlook Calendar. This streamlines meeting creation and helps ke...

3 days ago

Microsoft 365 admin center: Optional Public CDN Support in Brand Center Setup

We are updating the Brand Center setup experience so that administrators can set up Brand Center without enabling Public CDN. Today, Public CD...

3 days ago

Dynamics 365 Field Service: Book Work Orders with Multiple Requirements

Dispatchers can now select which resource requirement to schedule when booking a work order that has multiple requirements. The new Book exper...

3 days ago

Brand Skill support now available in PPT Copilot [Web]

Brand managers can upload custom presentation skills as Markdown files to Brand Kit for use with Copilot in PowerPoint Web, enabling consisten...

4 days ago

Brand Skill support now available in PPT Copilot [Desktop]

Brand managers can now upload custom presentation skills as Markdown files to Brand Kit for use with Copilot in PowerPoint Desktop, enabling c...

4 days ago

Newsletter

Get the latest Dynamics 365 and Power Platform content in your inbox

A curated digest of community blogs, product news, videos, and podcasts — delivered without the noise.

Weekly updates Unsubscribe anytime Fresh community picks
We use your email only for the newsletter and you can unsubscribe at any time.
By subscribing, you agree to the privacy policy.