[German]Microsoft has also released security updates for Windows 7 and 8.1 as well as for the Windows Server counterparts 2008 R2 and 2012/R2 as of May 10, 2022. Here is an overview of these updates for Windows 7/8.1 and the corresponding Windows Server versions 2008 R2 and 2012/R2.
Updates for Windows 8.1 and Windows Server 2012 R2
For Windows 8.1 and Windows Server 2012 R2 a rollup and a security-only update have been released. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
KB5012670 (Monthly Rollup) for Windows 8.1/Server 2012 R2
Update KB5014011 (Monthly Rollup for Windows 8.1 and Windows Server 2012 R2) contains improvements and fixes, and addresses the following issues.
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- After installing the January 2022 Windows update or a later Windows update on the Primary Domain Controller emulator (PDCe), listing or modifying name suffixes routing by using Netdom.exe or "Active Directory Domains and Trusts" snap-in may fail and you receive the following error message: "Insufficient system resources exist to complete the requested service."
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS. In case of a manual installation, the latest Servicing Stack Update (SSU KB5014025) has to be installed beforehand – whereas this SSU cannot be uninstalled anymore. Microsoft is aware of several issues related to the update (details can be found in the support article).
KB5014001 (Security-only update) for Windows 8.1/Server 2012 R2
Update KB5014001 (Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2) addresses the following items.
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
The update is distributed via WSUS (but not via Windows Update) or is available from the Microsoft Update Catalog. In case of a manual installation, the latest Servicing Stack Update (SSU) KB5014025 must be installed beforehand. In addition, the Internet Explorer 11 security update KB5011486 from March 2022 (if not already available, I did not find an update for April and May) should be installed.
Updates for Windows Server 2012
A rollup and a security-only update have been released for Windows Server 2012 and Windows Embedded 8 Standard. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
KB5014017 (Monthly Rollup) for Windows Server 2012
Update KB5014017 (Monthly Rollup for Windows Server 2012, Windows Embedded 8 Standard) contains improvements and fixes, and addresses the following issues.
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- After installing the January 2022 Windows update or a later Windows update on the Primary Domain Controller emulator (PDCe), listing or modifying name suffixes routing by using Netdom.exe or "Active Directory Domains and Trusts" snap-in may fail and you receive the following error message: "Insufficient system resources exist to complete the requested service."
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS. In case of a manual installation, the latest Servicing Stack Update (SSU KB5014027) must be installed beforehand – whereby this SSU can no longer be uninstalled. There are several problems with this update listed in the KB article.
KB5014018 (Security-only update) for Windows Server 2012
Update KB5014018 (Monthly Rollup for Windows Server 2012, Windows Embedded 8 Standard) contains improvements and fixes, and addresses the following issues.
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalogand via WSUS. In case of a manual installation, the latest Servicing Stack Update (SSU KB5014027) must be installed beforehand – whereby this SSU can no longer be uninstalled. This update is known to have the same issues as the updates listed above. In addition, the Internet Explorer 11 security update KB5011486 (if not already available) from March 2022 should be installed.
Updates for Windows 7/Windows Server 2008 R2
For Windows 7 SP1 and Windows Server 2008 R2 SP1 a rollup and a security-only update have been released. However, these updates are only available for systems with ESU license (1st,2nd and 3rd year complete). The update history for Windows 7 can be found on this Microsoft page.
The update installation requires either a valid ESU license for 2021, or ESU Bypass v11 (see). This is the last update for the ESU license for the 3nd year.
KB5014012 (Monthly Rollup) for Windows 7/Windows Server 2008 R2
Update KB5014012 (Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1)contains (in addition to the security fixes from the previous month) enhancements and bug fixes and addresses the following
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- After installing the January 2022 Windows update or a later Windows update on the Primary Domain Controller emulator (PDCe), listing or modifying name suffixes routing by using Netdom.exe or "Active Directory Domains and Trusts" snap-in may fail and you receive the following error message: "Insufficient system resources exist to complete the requested service."
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
This update is automatically downloaded and installed via Windows Update. However, the package is also available via Microsoft Update Catalog and is distributed via WSUS. Details about the requirements and known issues can be found in the KB article.
KB5013999 (Security Only) for Windows 7/Windows Server 2008 R2
Update KB5013999 (Security-only update) is available for Windows 7 SP1 and Windows Server 2008 R2 SP1 with ESU license. The update addresses the following issues.
- The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
- The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.
The update is available via WSUS or in the Microsoft Update Catalog. To install the update, the prerequisites listed in the KB article and above in the rollup update must be met. The update has the known bugs described in the KB article and causes, among other things, error messages when printing. In addition, the Internet Explorer 11 security update KB5011486 (if not already available) from March 2022 should be installed. Be sure to install the latest Servicing Stack Update beforehand.
Similar articles:
Microsoft Office Updates (May 3, 2022)
Microsoft Security Update Summary (May 10, 2022)
Patchday: Windows 10-Updates (May 10, 2022)
Patchday: Windows 11/Server 2022-Updates (May 10, 2022)
Windows 7/Server 2008R2; Windows 8.1/Server 2012R2: Updates (May 10, 2022)
Patchday: Microsoft Office Updates (May 10, 2022)
