> For the complete documentation index, see [llms.txt](https://docs.lithnet.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.lithnet.io/ams/v2.1/help-and-support/support-articles/kb000005.md).

# KB000005: Access Manager stops working after applying the November 2022 Windows update

## Summary

After installing the November 2022 Windows updates on your domain controllers, you may find that the Access Manager service does not start, or user authentication fails when trying to access the web service.

## Cause

There are [known issues](https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#2953msgdesc) with the [November 2022 Windows update](https://support.microsoft.com/en-us/topic/november-8-2022-kb5019980-os-build-22621-819-b503e08b-b850-469a-8de9-74df8aebd5f4) that can prevent users, service accounts, and computer objects from authenticating in the domain.

This can result in the Access Manager Service failing to start, or if the service does start, the Access Manager service may be unable to access resources within the domain. As a result, users cannot log into the AMS website, or access LAPS password and request JIT access.

In the event log or in the AMS log files (`C:\Program Files\Lithnet\Access Manager Service\logs`), you may find one or more of the following log entries (or similar messages).

```
Lithnet.Security.Authorization.AuthorizationContextException: AuthzInitializeContextFromSid failed
 ---> System.ComponentModel.Win32Exception (0x80090342): The encryption type requested is not supported by the KDC.
```

```
System.Security.Authentication.AuthenticationException: The user name or password is incorrect.
 ---> System.Runtime.InteropServices.COMException (0x8007052E): The user name or password is incorrect.
```

Users may see an error message in the portal saying:

> Your request could not be processed because your SSO identity could not be found in the directory

## Resolution

Microsoft have released an out-of-band update to fix the known issue with the update. Install the update on all domain controllers, and once complete, reboot the AMS server.

* [KB5021656: Windows Server 2022](https://support.microsoft.com/help/5021656)
* [KB5021655: Windows Server 2019](https://support.microsoft.com/help/5021655)
* [KB5021654: Windows Server 2016](https://support.microsoft.com/help/5021654)
* [KB5021653: Windows Server 2012 R2](https://support.microsoft.com/help/5021653)
* [KB5021652: Windows Server 2012](https://support.microsoft.com/help/5021652)
* [KB5021657: Windows Server 2008 SP2](https://support.microsoft.com/help/5021657)

This patch does not need to be installed on the AMS server itself.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.lithnet.io/ams/v2.1/help-and-support/support-articles/kb000005.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.