Microsoft Enforcement Mode

Stefan Kania stefan at
Sat Jan 29 10:41:25 UTC 2022

I just read, that Microsoft uses a new Enforcement Mode on all MS DCs to
protect the DC against CVE-2021-42287 and CVE-2021-42278. The
Enforcement Mode can be deactivated until June, then MS will force it on
all DCs.
But with this mode active it's no longer possible to join a Linux-Client
to a MS-Domain. I could not find out if this will affect Samba or only
SSSD. If it affect Samba will it affect all Samba-version?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3477 bytes
Desc: S/MIME Cryptographic Signature
URL: <>

More information about the samba-technical mailing list