FAS - Users from 2-way trusted domain getting "incorrect username or password" on VDA login

Users from primary domain are able to be authenticated without issue. Users from Domain B, which is in a different forest and is trusted via 2-way trust, can authenticate with the storefront without issue. However, when launching a resource the CWA eventually loads a small window indicating the t...

November 8, 2022—KB5020003 (Security-only update)

None None...

November 8, 2022—KB5020009 (Monthly Rollup)

None None...

April 12, 2022—KB5012650 (Monthly Rollup)

None None...

April 12, 2022—KB5012639 (Security-only update)

None None...

March 8, 2022—KB5011560 (Security-only update)

None None...

March 8, 2022—KB5011535 (Monthly Rollup)

None None...

January 11, 2022—KB5009624 (Monthly Rollup)

None None...

January 11, 2022—KB5009586 (Monthly Rollup)

None None...

CVE-2020-0665

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...