7 Appendix B: Product Behavior
The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include updates to those products.
Windows 10 operating system
Windows Server 2016 operating system
Windows Server operating system
Windows Server 2019 operating system
Windows Server 2022 operating system
Windows 11 operating system
Windows Server 2025 operating system
Exceptions, if any, are noted in this section. If an update version, service pack or Knowledge Base (KB) number appears with a product name, the behavior changed in that update. The new behavior also applies to subsequent updates unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.
Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms "SHOULD" or "SHOULD NOT" implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term "MAY" implies that the product does not follow the prescription.
<1> Section 2.2.1.2.1: The PDU values for KRB_AS_REP and for KRB_TGS_REP messages have been changed to zero (0) and backported to every product in the applicability list for the April 9, 2024 service release. Previous values for each product are in the following table.
|
Operating systems |
KRB_AS_REP PDUs |
KRB_TGS_REP PDUs |
|---|---|---|
|
Windows 11, version 23H2 operating system Windows Server 2022, 23H2 operating system |
70 |
71 |
|
Windows 10 v1809 operating system Windows Server Windows Server 2019 |
62 |
63 |
|
Windows 10 v1607 operating system Windows Server 2016 |
69 |
70 |
<2> Section 2.2.1.3.6: For more information on Kerberos and NTLM secrets see [MSDOCS-CGP].
<3> Section 2.2.2.1.6: This is done to allow back-compatibility with applicable Windows Server releases which returned the wrong PDU for an AS_REP message.
<4> Section 2.2.2.1.6: The PDU values for KRB_AS_REP and for KRB_TGS_REP messages have been changed to zero (0) and backported to every product in the applicability list for the April 9, 2024 service release. Previous values for each product are in the following table.
|
Operating system |
KRB_AS_REP PDUs |
KRB_TGS_REP PDUs |
|---|---|---|
|
Windows 11, version 23H2 Windows Server 2022, 23H2 |
70 |
71 |
|
Windows 10 v1809 Windows Server Windows Server 2019 |
62 |
63 |
|
Windows 10 v1607 Windows Server 2016 |
69 |
70 |
<5> Section 3.1.5.6: This is done to allow back-compatibility with applicable Windows Server releases which returned the wrong PDU for an AS_REP message.