Netlogon protocol sealing enforcement

1. Audit / monitoron or after 8 Nov 2022 Published timing is qualified; effectiveness is not confirmed.
2. Enforced by defaultJune 2023 On by default; an override or rollback still exists
3. EnforcedJuly 2023 Now: Enforced; the override no longer helps
4. Enforcedon or after 11 Jul 2023 Published timing is qualified; effectiveness is not confirmed.

1. 8 Nov 2022 3 years agoon or afterAudit / monitor · unconfirmed
   • SummaryScope

     To help secure your environment, install the Windows update that is dated November 8, 2022 or a later Windows update to all devices, including domain…

   • Timing of updates to address CVE-2022-38023Milestone
     CVE-2022-38023
   • Registry Key settingsMilestone
2. June 2023 3 years agomonth windowstartingEnforced by default
   • SummaryMilestone
     CVE-2022-38023
3. July 2023 3 years agomonth windowEnforced
   • SummaryMilestone
     CVE-2022-38023
4. 11 Jul 2023 3 years agoon or afterEnforced · unconfirmed
   • Timing of updates to address CVE-2022-38023Milestone
     RequireSealCVE-2022-38023

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• RequireSealOverride11 Jul 2023
• RejectMd5ClientsOverride

Requirements, exceptions and scope

• Timing of updates to address CVE-2022-38023ExceptionScope1 condition1 passage
  RequireSeal
• Registry Key settingsRequirement1 condition3 passages
  CurrentControlSet
• Windows events related to CVE-2022-38023RequirementScope1 condition2 passages
• Frequently Asked Questions (FAQ)ExceptionRecommendationTentative1 condition2 passages
  RejectMd5Clients
• GlossaryRequirement1 condition1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.