JDK-8161921: Windows Defender Credential Guard doesn't allow sharing of TGT with Java.See the following Oracle bug database article: The following issue affects the Java GSS API. Credential guard doesn't work with MSCHAPv2 configurations, of which Cisco ISE is a very popular enterprise implementation.Known issues involving third-party applications For more information, see the following support articles: This issue can potentially lead to unexpected account lockouts. KB4015217 Windows Defender Credential Guard generates double bad password count on Active Directory domain-joined Windows machines The following known issues have been fixed by servicing releases made available in the Cumulative Security Updates for April 2017: As a workaround, run the scheduled task under a domain user or the computer's SYSTEM account.The username appears in an unusual format because local accounts aren't protected by Credential Guard.This event stems from a scheduled task running under local user context with the Cumulative Security Update for November 2017 or later and happens when Credential Guard is enabled.Source: Microsoft-Windows-Security-Netlogonĭomain Controller Blocked Audit: Audit NTLM authentication to this domain controller. For example: Log Name: Microsoft-Windows-NTLM/Operational You also get a similar user name in a user logon failure event 4625 with error 0xC0000064 on the machine itself. When you enable NTLM audit on the domain controller, an Event ID 8004 with an indecipherable username format is logged. 2147943726: ERROR\_LOGON\_FAILURE (The user name or password is incorrect). User Action: Ensure the credentials for the task are correctly specified.Īdditional Data: Error Value: 2147943726. The task fails and reports Event ID 104 with the following message: Task Scheduler failed to log on '\Test'. Scheduled tasks with domain user-stored credentials fail to run when Credential Guard is enabled. The following known issues have been fixed in the Cumulative Security Update for November 2017: For more information, see Application requirements. So applications that require such capabilities won't function when it's enabled. Windows Defender Credential Guard blocks specific authentication capabilities. Windows Defender Credential Guard has certain application requirements.
0 kommentar(er)
