Fix for Windows Server 2016 Domain Controller Reboots.
This follows the original agent update announcement issued after September Patch Tuesday.
Summary
Netwrix has identified an issue with all Threat Prevention (NTP) 8.1, 8.0, 7.5 agent builds on a specific Windows Server 2016 configuration. On affected machines, the issue causes the server to reboot.
Resolution
Fixed builds are now available from the Customer Portal.
Affected Configuration
Only machines that meet both of the following conditions are impacted. The operating system is Windows Server 2016 with version 6.2.14393.9507 of kdcsvc.dll, and the machine runs an NTP 8.1, 8.0, 7.5 versions. Windows Server 2016 machines without the kdcsvc.dll are not impacted and operate normally with current NTP builds, including the September Patch Tuesday release.
Symptom
Affected machines reboot. Because this occurs on servers that host critical identity services, customers should treat it as a service availability risk. Customers with affected machines should update to the fixed build.
Affected Agent Versions
The following NTP agent versions are affected: 8.1, 8.0, 7.5.
How to Check Whether You Are Affected
On each Windows Server 2016 machine that hosts or will host an Threat Prevention agent, check the file version of kdcsvc.dll in C:\Windows\System32. If the version is 6.2.14393.9507 and the installed or planned agent version appears in the list above, the machine is affected.
Recommended Actions
Update affected agents 8.1.0.40, 8.0.0.95 or 7.5.0.322.
Need help with this update?
There are many different ways to get help with our products!
| Situation | Action |
|---|---|
| If you feel the product is broken and not working as intended… | Contact Support |
| If you have a question you’d like to ask other experts… | Create a discussion in the community: Threat Prevention > Discussions & Questions |
| If you have a feature request… | Let our product team know directly: Threat Prevention > Ideas |
| If you have something cool to show… | Show everyone what you built: Threat Prevention > Show & Tell |
What are your thoughts?
We are always happy to hear from our users on what you like, and what you hope to see in the future. Please, share your thoughts below!