UNSOLVED

anonymous_stranger

updated

3 years ago

Closed

0

1405

April 25th, 2023 13:00

MS Netlogon RPC enforcement - CVE-2022-38023

Regarding the upcoming Netlogon RPC enforcement coming from Microsoft

https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25#registry5021130

According to this Dell article:

https://www.dell.com/support/kbdoc/en-us/000207527?dgc=SM&cid=281911&lid=spr9581481364&refid=sm_LITHIUM_spr9581481364&linkId=210176848

"These updates to Windows by Microsoft to address CVE-2022-38023 will have NO functional impact to PowerScale clients running any current release of OneFS as RPC Sign and Seal has been supported since OneFS 7.x.

New Event ID 5840 WILL be created with PowerScale clients running OneFS releaess 9.4.x and earlier which use RC4 by default for NTLM/Netlogon Secure Channel."

Has anyone actually configured Enforcement of the Netlogon RPC changes yet in an environment with OneFS 9.4.x and older and confirmed that these 5840 events are actually cosmetic only?