KB5014754: Certificate-based authentication changes on Windows domain controllers. No Certificate authority

Question

Does this KB apply to an organization that does not have PKI servers?

In reading the KB announcement it mentions, "Update all servers that run Active Directory Certificate Services and Windows domain controllers that service certificate-based authentication with the May 10, 2022 update"

We have no servers running ADCS and we aren't doing certificate based authentication.

Can we let the StrongCertificateBindingEnforcement value be enabled without issues?

Answer 1

Hello,

Thank you for posting in Microsoft Q&A.

Based on the description, I understand your question is related to KB5014754.

The KB5014754 is Certificate-based authentication changes on Windows domain controllers, if your organization does not have Public Key Infrastructure (PKI) servers and does not use certificate-based authentication, the update's primary changes may not directly impact you.

Since you are not using this type of authentication, enabling this value should not cause issues in your environment. It is still recommended to monitor your systems after making such changes to ensure there are no unexpected behaviors.

Have a nice day.

Best Regards,

Molly

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it