Microsoft confirms domain authorization issues with Windows updates

Microsoft updated the page Windows Health Dashboard, adding information about new known issues in Windows 10, Windows 11 and Windows Server that appeared after installing the November Cumulative Updates. It is reported that after installing updates for Windows Server acting as a domain controller, users may experience problems with Kerberos authorization.Problem symptoms:

Authorization of users in the domain may fail. It may also affect authorization in Active Directory Federation Services (ADFS).
Group Managed Service Accounts (gMSA)used for services such as Internet Information Services (IIS Web Server)cannot be authenticated.
Unable to connect to remote desktop using domain accounts.
You may not have access to shared folders on workstations and file shares on servers.
Printing that requires domain authorization may fail.

To verify that there is a problem, you need to open the Event Viewer on te domain controller. For some devices, a Microsoft-Windows-Kerberos-Key-Distribution-Center Event ID 14 error will be displayed with the following text:

While processing an AS request for target service, the account did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes: 18 3. The accounts available etypes: 23 18 17. Changing or resetting the password of will generate a proper key.

Microsoft engineers are working to fix the problem. A solution will be offered in the coming weeks.

Note that the problem does not affect home computers that are not part of a domain network.