App Control: Active Directory logins failing after recent Windows updates

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

After installing the mid-January Windows patches all Active Directory users can no longer login to the web console using their AD credentials

Environment

App Control Server: All Supported Versions

Cause

The following Windows updates have been linked to causing the App Control's  Active Directory integration to fail:

• Windows Server 2019 - KB5010791, KB5009557
• Windows Server 2016 - KB5010790
• Windows Server 2012R2 - KB5010794

Resolution

Microsoft has identified a known issue with AD logins after Jan patches were installed: https://docs.microsoft.com/en-us/windows/release-health/status-windows-server-2022#2781msgdesc

• Uninstalling the above mentioned Windows KBs has resolved the AD login issues
• Alternatively, local console users like admin or SAML logins are not affected